Privacy Policy — Nizal

Last updated: 11 October 2026 · The “Nizal” app (sa.wadq.nizal) on Android and iOS.

In short: Local play needs no account and no internet, and your games stay on your device or your local Wi-Fi. When your device is online, the app checks subscription status with RevenueCat when it opens and when you return to it, even if you never subscribe, using a random identifier and basic device information, never your games. Online play needs a Nizal account created with your e-mail address. No ads, no tracking, no chat, no location, and we do not sell your data.

What we collect and why

• Nizal account (online play only): your e-mail address and account identifier. We e-mail you a sign-in code; we never ask for a password.
• Online rooms: the name you choose, the room code, and your answers and scores. Other players in the same room see your name, score and game status (such as whether you are connected or have answered); their app also receives a player ID linked to your account, used for reporting and blocking and not shown. They never receive your e-mail. Room data is deleted when the room ends.
• Open rooms: if a host makes a room “open”, it appears in the “Open rooms” list to every signed-in player with the host's display name, the game, the player count, the categories and game settings, and the room code, but never other players' names, any player ID or anyone's e-mail. It leaves the list when the game starts, the room fills, joining is locked or the room is made closed, and it is never shown to a player the host removed. A “closed” room is never listed and is joined only with its code, but anyone who saw a room's code while it was open can still use it until the host locks joining.
• IP address: used to run the connection and prevent abuse. It is not written to our server logs or to the sign-in and subscription records. Our sign-in service keeps the IP address of your most recent sign-in or session refresh with that device's session and deletes it when you sign out on that device or delete your account; a copy may remain in our encrypted backups until they are deleted.
• Reports and blocks: a report stores your identifier, the reported player's identifier, the room code and the reason you choose, with its time and review status, and is reviewed manually. A block stores only your identifier, the blocked account's identifier and the date of the block, and it also hides open rooms between you: neither of you sees, in the list, a room the other is in.
• Sign-in and subscription records: the time, type and outcome of the event, with your e-mail encrypted, to fix sign-in and subscription problems and prevent abuse. They never contain sign-in codes, passwords, payment details or IP addresses.
• Subscription: payment is made through the App Store or Google Play; we never see your card. RevenueCat verifies and restores the subscription and shows us subscription statistics, using a random identifier — not your e-mail or name — purchase data (product, subscription status and dates), and basic device information such as the OS version.

All traffic between the app and our servers is encrypted. We process account, room and subscription data to provide the service you ask for, and reports, blocks and sign-in and subscription records to protect the service and prevent abuse.

On your device

The app stores your settings, the questions you have seen, local match history, questions you add, the display name you last used in an online room (with a short code derived from your account, so another account on the same phone does not get it; it is deleted when you sign out or delete your account), and your sign-in session in the system's secure storage. Uninstalling removes this data from the phone, but on iPhone the saved sign-in can remain until you sign out or delete your account, and a device backup you keep (such as iCloud or Google) may still hold a copy. Uninstalling does not delete your Nizal account.

In local Wi-Fi Tug of War the host's phone runs the game: names that players type travel over your Wi-Fi, unencrypted, to the host's phone and the browsers of players who joined, are kept in memory for that game only, never reach our servers and never leave your local network. Each player's browser remembers the name it typed for next time.

Who receives data

• Other players in your online room: your name, score, game status and player ID, never your e-mail.
• Signed-in players browsing open rooms: an open room's host display name, game, player count, categories and room code; never anyone's e-mail or player ID.
• Our cloud hosting provider in Riyadh: runs our servers, sends the sign-in code e-mails, and stores encrypted backups.
• RevenueCat (United States): subscription verification, restore and subscription statistics. Its policy: revenuecat.com/privacy.
• App Store / Google Play: payment and subscription management.
• Your e-mail provider: receives the sign-in code message.

Subscription data is therefore processed outside Saudi Arabia. Our hosting provider and RevenueCat process data only on our behalf and must protect it at least as well as this policy describes; the stores and your e-mail provider follow their own policies. Apart from these, we share data with no one, and we do not sell it.

How long we keep it

• Account: until you delete it.
• Room data: until the room ends.
• Sign-in records: 60 days. Subscription records: 120 days.
• IP address of the latest session refresh: until you sign out on that device or delete your account.
• Subscription data at RevenueCat: until you delete your account or ask us to delete it.
• Reports: 30 days, or up to 90 days if reviewed. Blocks: until you remove them or either account is deleted.
• Encrypted backups: a deleted account may remain in an older backup until that backup is deleted. We use backups only to recover the service after a failure, not to undo deletions; if a recovery ever brings back an account you deleted, delete it again or e-mail us and we will.

Deletion happens in the next cleanup cycle and can be briefly delayed by an outage.

Deleting your account

In the app: “My account” (حسابي) → “Delete account” (حذف الحساب) → confirm. We delete your account and your subscription record at RevenueCat, remove your blocks, and erase your identifier from reports. We keep the deleted account's identifier for 30 days only, to stop its data being recreated. Sign-in and subscription records (which hold your e-mail, encrypted) expire on their normal schedule, 60 and 120 days after each event, and the account may remain in an older encrypted backup until that backup is deleted. Deleting the account does not cancel a store subscription; cancel it in your store settings. If you cannot delete in the app, e-mail us from the account's address.

Your rights

You can ask to see your personal data, get a copy, correct it or delete it, and you can stop the processing of online-play data at any time by deleting your account. E-mail nizal4app@gmail.com from the account's address and we reply within 30 days; we may withhold information about other players, such as who reported you.

Permissions

• Photos: only when you choose a picture for one of your own questions.
• Local network and Internet: playing on your own network, the account and online rooms, and subscription verification.

Children

The app is for a general audience and is not directed at children under 13. Do not create an account if you are under 13; local play works without one.

Changes and contact

If we change what we collect or how long we keep it, we update this page and its date before the change.
Email: nizal4app@gmail.com · Phone / WhatsApp: +966 50 604 1672

Published by Wadq — Saudi Arabia.