Privacy Policy
Qafila: Caravan Color Puzzle · Last updated 28 October 2026
This policy explains what data the Qafila mobile game ("the app") and the companies that help us run it collect, why, and the choices you have. The app is published by Yaser Alqaisi, an independent developer ("we", "us"). Contact: support@yasalqaisi.com.
1. Summary
- We do not ask for your name, email, phone number or any account. There is no login.
- Your game progress, coins and settings are stored on your device only.
- The app is free and shows ads. Ad and analytics partners collect device and usage data, described below.
- On iPhone, we ask your permission before your data is used to track you across other companies' apps and websites (App Tracking Transparency). In the EU, EEA, UK and Switzerland we also ask for your consent before personalised ads.
- Payments are handled by Apple. We never see your card or payment details.
2. Data stored on your device
Level progress, coins, hearts, boosters, purchases owned and settings (sound, music, haptics) are saved in a file on your device. We cannot access it. Deleting the app deletes it.
3. Data collected by our partners
The app includes software development kits (SDKs) from the companies below. They collect data automatically when you use the app.
| Partner | Purpose | Data |
|---|---|---|
| Unity LevelPlay (ad mediation, by Unity Technologies / ironSource) | Showing ads, choosing which ad network serves an ad, measuring ads, fraud prevention | Advertising identifier (IDFA, only with your permission) and app-specific identifiers, IP address and coarse location (country/region), device make, model, OS, language, carrier, app version, ad interactions |
| Google AdMob | Showing and measuring ads | Device and advertising identifiers, IP address and coarse location, ad interactions, performance and diagnostic data |
| Unity Ads (Unity Technologies) | Showing and measuring ads | Device and advertising identifiers, Unity user ID, coarse location, ad interactions, usage and performance data, purchase events |
| Google Firebase Analytics | Understanding how the game is played (for example which levels are too hard) so we can improve it | App instance ID, game events (level started, won or failed, boosters used, ads watched, purchases with product and price), device and OS, coarse location from IP |
| Firebase Crashlytics | Finding and fixing crashes | Crash reports: stack traces, app state, device model and OS version, a crash-specific installation ID |
| Firebase Remote Config and A/B Testing | Tuning game settings (for example ad frequency or prices in coins) and testing variants | Installation ID, country, language, app version, the test group you are in |
| Apple App Store / Unity IAP | Processing in-app purchases | Purchase receipts (product and transaction ID). Payment details stay with Apple. |
Each partner handles data under its own privacy policy: Google (AdMob, Firebase) · Firebase privacy and security · Unity (LevelPlay, Unity Ads) · Apple.
4. Tracking and personalised ads
iPhone tracking permission. After you finish the first few levels, the app shows Apple's "Allow tracking?" prompt. If you allow it, ad partners may use your advertising identifier to show ads based on your interests and to measure ads across apps. If you decline, the identifier is not shared and you still get ads, but they are less relevant. You can change your choice any time in iPhone Settings → Privacy & Security → Tracking.
EU, EEA, UK and Switzerland. The app is currently offered only in Saudi Arabia. If it becomes available in these regions, it will ask for your consent before any personalised ads, and you will be able to change your choice in the game's Settings.
Crash reports. Crash reports are not used for advertising or tracking. They stay on even if you decline tracking or personalised ads, because we rely on our legitimate interest in keeping the app working and safe.
5. Why we process data (legal bases)
- Consent: personalised ads and ad measurement across apps; analytics where consent is required by law.
- Legitimate interest: crash reporting, fraud prevention, non-personalised ads that fund the free game, basic analytics to improve levels.
- Contract: delivering what you buy in the app.
6. Retention
We keep analytics data for up to 14 months and crash reports for up to 90 days (Firebase defaults). Ad partners keep data as described in their own policies. Data on your device stays until you delete the app.
7. International transfers
Our partners may process data in the United States and other countries outside Saudi Arabia, the EU or the UK. They use safeguards such as the EU Standard Contractual Clauses.
8. Your rights
Depending on where you live, including under the Saudi Personal Data Protection Law (PDPL) and the EU/UK GDPR, you may have the right to access, correct or delete your data, object to or restrict processing, withdraw consent, and complain to a data protection authority (in Saudi Arabia, SDAIA). Because we do not collect your name or email, the quickest way to stop collection is to decline tracking, decline consent, or delete the app. For any request, email support@yasalqaisi.com; for data held by a partner, we will forward your request or point you to that partner.
9. Children
Qafila is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has used the app and data was collected, contact us and we will help remove it.
10. Changes
We may update this policy. The date at the top shows the latest version. Significant changes will be noted in the app's update notes.