1. Introduction and Scope

This Privacy Policy describes how Mananamana ("we," "us," or "our") collects, uses, discloses, and protects information about you when you use our digital board game platform, website, mobile applications, and related services (collectively, the "Services"). This policy applies to all users of our Services, including registered players, visitors to our website, and participants in our educational programs.

By accessing or using our Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our practices, please do not use our Services.

We are committed to protecting your privacy and maintaining the confidentiality of your personal information in accordance with applicable privacy laws, including the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada and other relevant jurisdictions where our Services are available.

2. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide to us when you:

• Create an Account: Name, email address, username, password, date of birth, country of residence, and preferred language
• Make Purchases: Billing information, payment method details, transaction history, and purchase preferences
• Contact Support: Communication records, support tickets, feedback, and any information you choose to share
• Participate in Surveys: Survey responses, feedback, opinions, and demographic information
• Join Educational Programs: Educational background, institution affiliation, learning objectives, and progress data
• Customize Your Experience: Game preferences, difficulty settings, notification preferences, and accessibility requirements

Information Automatically Collected

When you use our Services, we automatically collect certain information about your device and usage patterns:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers
• Usage Data: Pages visited, features used, time spent, click patterns, game sessions, and interaction data
• Game Analytics: Gameplay statistics, performance metrics, achievement data, and learning progress
• Location Data: General geographic location based on IP address (not precise location)
• Technical Data: Log files, error reports, crash data, and performance metrics

Information from Third Parties

We may receive information about you from third-party sources, including:

• Educational institutions that license our Services
• Payment processors and financial institutions
• Analytics and marketing service providers
• Social media platforms (if you choose to connect your accounts)
• Other players who refer you to our Services

3. How We Use Your Information

We use the information we collect for various legitimate business purposes, including:

Service Provision and Management

• Creating and managing your user account
• Providing access to our game platform and features
• Processing transactions and managing subscriptions
• Delivering customer support and technical assistance
• Maintaining and improving our Services

Personalization and Enhancement

• Customizing your gaming experience based on preferences
• Providing personalized content and recommendations
• Adapting difficulty levels and learning paths
• Delivering relevant educational resources
• Improving user interface and user experience

Communication and Marketing

• Sending service-related notifications and updates
• Providing information about new features and products
• Delivering educational content and tips
• Conducting surveys and gathering feedback
• Marketing our Services (with your consent where required)

Analytics and Research

• Analyzing usage patterns and user behavior
• Conducting research to improve educational outcomes
• Measuring the effectiveness of our Services
• Identifying trends and opportunities for enhancement
• Generating anonymized reports and statistics

Legal and Security Purposes

• Complying with legal obligations and regulatory requirements
• Protecting against fraud, abuse, and security threats
• Enforcing our terms of service and policies
• Resolving disputes and legal claims
• Maintaining the safety and integrity of our platform

4. Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Contractual Necessity: To fulfill our obligations under our Terms of Service and provide the Services you've requested
• Legitimate Interests: To improve our Services, ensure security, and conduct business operations
• Consent: Where you have explicitly consented to specific processing activities
• Legal Compliance: To comply with applicable laws, regulations, and legal processes
• Vital Interests: To protect the safety and well-being of our users and the public

5. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information in the following circumstances:

Service Providers and Partners

We work with trusted third-party service providers who assist us in operating our business and providing our Services:

• Cloud Infrastructure Providers: For hosting and data storage services
• Payment Processors: For secure payment processing and fraud prevention
• Analytics Providers: For usage analytics and performance monitoring
• Customer Support Tools: For providing efficient customer service
• Educational Partners: For delivering educational content and programs
• Marketing Services: For email delivery and marketing automation (with consent)

Legal Requirements and Protection

We may disclose your information when required by law or to protect our rights and the safety of our users:

• In response to valid legal requests, court orders, or government investigations
• To comply with applicable laws, regulations, and legal processes
• To protect against fraud, security threats, and illegal activities
• To enforce our Terms of Service and other agreements
• To protect the rights, property, and safety of Mananamana, our users, and the public

Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change and provide choices regarding your information.

Aggregated and Anonymized Data

We may share aggregated, anonymized, or de-identified information that cannot reasonably be used to identify you for research, analytics, and business purposes.

6. Data Security and Protection

We implement comprehensive security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

Technical Safeguards

• Encryption: Data is encrypted in transit using TLS/SSL protocols and at rest using industry-standard encryption
• Access Controls: Multi-factor authentication and role-based access controls for our systems
• Network Security: Firewalls, intrusion detection systems, and regular security monitoring
• Secure Development: Security-by-design principles and regular code reviews
• Data Backup: Regular, secure backups with tested recovery procedures

Organizational Measures

• Employee Training: Regular privacy and security training for all staff members
• Access Limitation: Personal information access limited to authorized personnel only
• Incident Response: Comprehensive data breach response and notification procedures
• Vendor Management: Due diligence and contractual protections for third-party providers
• Regular Audits: Periodic security assessments and compliance reviews

Data Retention

We retain your personal information only as long as necessary to fulfill the purposes outlined in this policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary based on the type of information and applicable legal requirements.

7. Your Privacy Rights and Choices

Depending on your location and applicable laws, you may have certain rights regarding your personal information:

Access and Portability

• Right to Access: Request access to your personal information we hold
• Data Portability: Receive a copy of your data in a structured, machine-readable format
• Information Requests: Learn about how your information is processed and shared

Correction and Updates

• Right to Rectification: Correct inaccurate or incomplete personal information
• Account Management: Update your profile and preferences through your account settings
• Data Accuracy: Ensure your information remains current and accurate

Deletion and Restriction

• Right to Erasure: Request deletion of your personal information under certain circumstances
• Right to Restriction: Limit how we process your information in specific situations
• Account Deletion: Delete your account and associated data (subject to legal retention requirements)

Consent and Objection

• Withdraw Consent: Withdraw consent for processing activities that require consent
• Object to Processing: Object to processing based on legitimate interests
• Marketing Opt-out: Unsubscribe from marketing communications at any time

Exercising Your Rights

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section. We will respond to your request within the timeframes required by applicable law, typically within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience with our Services. For detailed information about our use of cookies, please refer to our Cookie Policy.

Types of Cookies We Use

• Essential Cookies: Necessary for the basic functionality of our Services
• Performance Cookies: Help us understand how you use our Services
• Functional Cookies: Remember your preferences and settings
• Analytics Cookies: Provide insights into user behavior and service performance

Managing Cookie Preferences

You can control cookie settings through your browser preferences or our cookie management tools. Note that disabling certain cookies may affect the functionality of our Services.

9. Children's Privacy

Our Services are designed for users aged 13 and older. We do not knowingly collect personal information from children under 13 years of age without verifiable parental consent.

Educational Use

When our Services are used in educational settings with users under 18, we work with schools and educational institutions to ensure appropriate privacy protections and parental involvement as required by applicable laws such as FERPA and COPPA.

Parental Rights

Parents and guardians have the right to review, modify, or delete their child's personal information. If you believe we have collected information from a child under 13 without proper consent, please contact us immediately.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence, including Canada and the United States. These countries may have different data protection laws than your jurisdiction.

Safeguards for International Transfers

When we transfer personal information internationally, we implement appropriate safeguards to protect your information, including:

• Standard contractual clauses approved by relevant authorities
• Adequacy decisions recognizing equivalent protection levels
• Certification schemes and codes of conduct
• Binding corporate rules for intra-group transfers

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through:

• Email notifications to your registered email address
• Prominent notices on our website and in our Services
• In-app notifications for significant changes
• Updates to the "Last updated" date at the top of this policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our Services after any changes indicates your acceptance of the updated policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

We are committed to resolving any privacy concerns promptly and will respond to your inquiries within 30 days of receipt.