Privacy Policy
Last updated: April 2026
1. Introduction
Kurandaz ("we", "our", or "us") operates the Kurandaz mobile application and this website. This Privacy Policy explains how we collect, use, store, and protect information when you use our mobile app, website, and related services (together, the "Services"). The app and site share the same practices described here unless stated otherwise. By using the Services, you agree to this policy. If you do not agree, please stop using the Services.
2. Data safety summary (Google Play)
This short summary is meant to align with the Google Play Data safety section; the rest of this policy adds detail. • Encryption in transit: Data sent between the app and our servers uses HTTPS (TLS). • Device identifiers: Where ads run, advertising identifiers (for example GAID on Android) can be used for ad serving and related measurement, as explained below. • Payments: We do not collect payment card or bank details, and we do not process payments ourselves today. If we add in-app purchases later, payment processing would be handled by Google Play Billing; we would not receive your full card number, and we would update this policy to describe any payment-related data we do receive (for example purchase receipts for fulfillment). • Sharing: We do not sell your personal data. We share data with service providers (such as ads and hosting) only as described in this policy. • Deletion: You can request account and personal data deletion by emailing privacy@kurandaz.com (see Data retention). This summary does not replace the full policy below.
3. Information we collect
We collect the following categories of information when you use the Services. Some items apply only if you use a feature (for example rewarded video ads). --- Account and profile --- • Account information: name, email address, and credentials when you register. --- App activity and game data (server-backed) --- • Usage and game data: tap activity, coin balance, energy usage, boost usage, draw entries, and session timestamps. Coin balances, energy, draws, and rewards are stored on our servers with access controls. The values shown in the app follow server-verified state; changing data only on your device does not change your authoritative account on our servers. We do not sell this game economy data to advertisers for their own marketing. --- Referrals --- • Referral data: your referral code, referral relationships, and referral-linked coin credits. --- Device and ads --- • Device information: device type, operating system version, app version, and advertising identifiers (for example GAID/IDFA) where the platform and your settings allow. • Ad interaction data: which ads were shown, completion status (for example for reward verification), and related metadata. Server-side verification tokens are used for fraud prevention and reward integrity; they are not used to build a personal marketing profile beyond what the ad networks describe in their own policies. --- Technical --- • Technical data: IP address and coarse location inferred from IP at country or region level for security, fraud prevention, and localization. We do not collect precise GPS or continuous location from your device. --- Information we do not collect --- • Payment card or bank account numbers (we do not process payments today; see section 2 if that changes). • Precise GPS or continuous real-time location from the device. • Call logs, SMS content, or your contacts list. • Photos, videos, or arbitrary files from your device (the app does not request broad media or file access for those purposes). • Health data or biometric identifiers.
4. How we use your information
We use your information to: • Operate and maintain your account and coin balance • Process draw entries and notify winners • Verify ad completions and grant energy rewards • Process referral credits • Prevent fraud, cheating, and unauthorized use • Improve the Services and personalize your experience • Send important account notifications • Comply with legal obligations
5. Third-party services
We use the following categories of third-party services; each processes data under its own policy and our instructions where we act as controller: • Google AdMob: advertisements and advertising identifiers. See https://policies.google.com/privacy • Meta Audience Network: advertisements. See https://www.facebook.com/policy.php • Supabase: database and authentication infrastructure • Redis: temporary session and rate-limiting data We do not sell your personal data. We choose processors that commit to appropriate safeguards; where required, we use standard contractual clauses or equivalent mechanisms for international transfers.
6. Advertising and tracking
The app uses advertising identifiers when the platform allows and when needed to serve ads and measure delivery. For analytics and fraud prevention tied to advertising, those identifiers may be processed by us and by ad partners as described in their policies. You can limit ad personalization in your device settings (for example: Android — Google Ads settings; iOS — Tracking preferences). Turning off personalization does not always remove ads; ads may be less tailored. Advertising identifiers (such as GAID/IDFA) can often be reset or limited in device settings; doing so affects how ads are served across apps, not only Kurandaz.
7. Data storage and security
--- Encryption and transmission --- • Data transmitted between the app and our servers uses HTTPS (TLS) encryption in transit. --- Server storage --- • Personal and account data stored on our systems is protected with access controls and least-privilege practices appropriate to our infrastructure. --- On your device --- • The app may keep local data such as session tokens or preferences for functionality; that local storage is not a substitute for server-side balances and is not intended as a confidential encryption vault at rest beyond what the operating system provides. --- General --- No method of storage or transmission is completely secure. We work to protect your information but cannot guarantee absolute security.
8. Data retention
We retain account data while your account is active. If you request deletion, we delete or anonymize personal data within a reasonable period (typically within 30 days), except where the law requires longer retention or where we must keep minimal records for legitimate interests such as fraud prevention.
9. Children's privacy
The Services are intended for users 18 and older. We do not knowingly collect personal data from anyone under 18. If we learn that a minor has registered, we take steps to delete the account and associated data. Contact privacy@kurandaz.com if you believe this has occurred. Where United States law applies, we do not knowingly collect personal information from children under 13 (COPPA — Children’s Online Privacy Protection Act). The age-based content rating shown on Google Play (or other stores) follows the store’s classification; this policy applies regardless of rating. Parents and guardians should supervise minors’ use of apps and device privacy settings.
10. Your rights
Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing. Residents of the EEA, UK, Switzerland, and several other regions may have additional rights under local law (including lodging a complaint with a supervisory authority). To exercise your rights, contact privacy@kurandaz.com. We respond within the time required by applicable law.
12. International users
We operate globally. Your information may be processed in Pakistan, the United States, the European Economic Area, or other countries where our providers operate. We implement safeguards consistent with applicable data protection laws.
13. Changes to this policy
We may update this Privacy Policy from time to time. We post the revised version on this page and update the “Last updated” date. For material changes, we may notify you via the app or email. Continued use after changes constitutes acceptance where permitted by law.
14. Contact us
Privacy inquiries: Email: privacy@kurandaz.com Primary place of business: Lahore, Pakistan We aim to respond within 30 days.