Privacy policy

Last updated [DATE] · Data controller: [COMPANY NAME], [ADDRESS], Kenya · ODPC registration: [ODPC REGISTRATION NUMBER]

What we collect

• Game data: a random player name, your scores, taps and game times, so our server can check every score.
• Phone number: only if you verify it or pay by M-Pesa. Used to send your SMS code, take soda payments and pay prizes.
• Payment records: M-Pesa receipt numbers and amounts, kept as accounting records.
• Chat messages you send in the game.
• Device and network data: a device identifier and a scrambled (hashed) form of your IP address, to stop cheating and multiple accounts.
• Cookies and similar tools, only if you accept them: Google Analytics, Meta Pixel and TikTok Pixel, to measure how the game is used and how well our ads work.

Why we use it

To run the game and the leaderboard, check scores, take payments, pay prizes, prevent fraud, meet legal duties and, with your consent, measure and improve our marketing.

Who we share it with

Safaricom (M-Pesa payments and prize payouts), our SMS provider, our hosting provider (DigitalOcean), and, if you accepted cookies, Google, Meta and TikTok. We don't sell your data.

How long we keep it

Game and chat data for up to 12 months. Payment and prize records for 7 years, as the law requires. You can ask us to delete the rest sooner.

Your rights

Under the Data Protection Act, 2019 you can ask to see, correct or delete your data, object to its use, and withdraw consent at any time. To change your cookie choice, clear this site's data in your browser. Contact us at [PRIVACY EMAIL, e.g. [email protected]]. You can also complain to the Office of the Data Protection Commissioner (odpc.go.ke).

Children

CHENGA is for people aged 18 and over. We don't knowingly collect data from anyone younger.