Zomo
Privacy Policy
Last updated: 3 September 2026
Zomo is an iOS app for playing and learning Oware. This policy explains what information the app handles, why, how long it is kept, and the choices you have. Zomo runs no advertising, sells no data, and uses no third-party analytics or tracking services.
Who is responsible for your information
Zomo is operated by Marula Labs (“we”, “us”). We are the controller of the personal information described here. The easiest way to reach us about privacy — including to ask what we hold about you, or to have it corrected or deleted — is privacy@playzomo.com.
Information the app handles
If you create an account
Zomo can be played entirely offline with no account. If you choose to sign in (to play online or sync progress), we handle:
- Your email address — used to send you a one-time sign-in link and to identify your account. We do not send marketing email.
- A display name — chosen by you, shown to opponents in online games. You can change it in the app.
- Account details — your Oware rating and the date the account was created.
- Daily-puzzle progress — your streak, which puzzles you have solved, and your points. While signed out this is kept only on your device; when you sign in it syncs to your account so it follows you between devices.
If you play online
- Game records — the players involved, the board position and moves, the result, and timestamps, so a game can be resumed and shown to both players.
- Invitations — if you invite someone by email, that address is stored with the pending game. It is removed once they accept; if they decline, or you withdraw the invite before it is accepted, the pending game is deleted.
If you turn on notifications
With your permission, iOS gives the app a device notification token, which we store against your account so we can send “your turn” and invitation alerts. Notifications are delivered through Apple’s Push Notification service. You can turn them off in the app or in iOS Settings at any time.
Usage analytics
To understand which features are used and where players get stuck, the app records a small stream of product-interaction events. This is on by default; you can turn it off at any time in Settings → Share usage data. It is not fully anonymous — while you are signed in the events are linked to your account (see “Account id” below) — but it is deliberately minimal. Each event carries:
| Field | What it is |
|---|---|
| Event | A fixed action name from a short allow-list (for example, the app opening, or a screen being viewed) plus a little structured context — the stable name of the screen, whether the launch was a cold start. Never a game, lesson, opponent, or free-text value. |
| Install identifier | A random identifier generated on your device the first time the app runs. It is not derived from your device, phone number, or any account, and it is cleared if you reinstall the app. |
| Session identifier | A random identifier for the current app session. |
| App and platform |
The app version and build number, and the broad platform
(ios / web / android).
|
| Timestamps | When the event happened and when it was received. |
| Account id | Attached only while you are signed in, so the data can be removed if you delete your account. Signed-out usage is not linked to any account. |
Turning the setting off stops all further collection and discards anything recorded on your device that has not yet been sent.
Information that stays on your device
Your offline (single-player and pass-and-play) game history and your app settings are stored only on your device and are never sent to us.
What we do not do
- We do not show advertising and use no advertising identifiers (no IDFA).
- We do not track you across other apps or websites, and show no App Tracking Transparency prompt because there is nothing to track.
- We do not use Google Analytics, Firebase, or any third-party analytics or tracking SDK.
- We do not retain your IP address with analytics events.
- We do not collect your location, contacts, photos, or device fingerprints.
- We do not sell or rent your information, and we do not share it for anyone else’s marketing.
Why we are allowed to handle this information
Where data protection law requires a legal basis:
- Account, online-play, and notification data — to provide the parts of the app you ask for (performance of a contract).
- Usage analytics — our legitimate interest in understanding and improving the app. The data is first-party, shared with no one, and minimal. The Share usage data setting is on by default, so events are collected from first launch; you can object at any time by turning it off, which stops all further collection.
How long we keep it
- Account and game data — kept while your account exists. Deleting your account removes your profile, your daily-puzzle progress, your notification tokens, and your analytics events, and also deletes the online games you took part in — which means they are removed from your opponents’ history too.
- Notification tokens — kept until you disable notifications or the token becomes invalid.
- Usage analytics — retained for up to 180 days, then deleted automatically.
Your choices and rights
- Object to usage analytics — turn off Share usage data in Settings. This stops all further collection; it does not by itself delete events already collected, which you can request below.
- Notifications — turn off in the app or in iOS Settings.
- Access, correction, export, and deletion — email privacy@playzomo.com and we will action your request. To have analytics events deleted without a full account deletion, include enough detail for us to locate them (for a signed-in request, your account email).
- Depending on where you live, you may also have the right to complain to your local data protection authority.
Where your information is stored
App data (accounts, games, notification tokens, analytics events) is held in a managed PostgreSQL database run on our behalf by Supabase, our infrastructure provider. Push notifications are delivered through Apple. We do not pass your information to any other processor. If you would like to know the hosting region for your data, ask us at the address below.
Children
Zomo is not directed to children under 13 (or the equivalent minimum age where you live), and we do not knowingly collect their personal information. If you believe a child has provided us information, contact us and we will delete it.
Changes to this policy
If we change how the app handles your information — for example, if we ever adopt a third-party analytics service — we will update this page and change the “Last updated” date above before the change takes effect.
Contact
Marula Labs · privacy@playzomo.com