Privacy Policy — Who's Playing? (منو بيلعب؟)

Last updated: November 2, 2026

Who we are

Who's Playing? (منو بيلعب؟) is a party game for families and friends, based in the United Arab Emirates. To contact us or request deletion of your data: teamjalsah@gmail.com

What we collect

• No accounts, no sign-in. We never ask for your real name, email or phone number to play.
• Session data: the nicknames players type, chosen characters, scores and game state — tied to a random 4-letter room code and stored in a Google Firebase database while you play. Anyone who knows the room code can read and change that room's data while the room exists: the code is its only key, because the game has no sign-in. Do not type anything into a name that you would not want others to see.
• Drawings: what is drawn in Draw & Guess is sent to the devices of players in the same room.
• Optional camera photos: if a player chooses a photo instead of a drawn character, it is stored with the room data so the other players can see it, and anyone who knows the room code can see it too. It is removed automatically after two hours without activity in the room, or when the room is deleted if that comes first. We recommend drawn characters, especially for children.
• An anonymous device identifier: the app creates a random code, stored on your device, that accompanies usage statistics. It does not contain your name, it is not linked to the categories you create in Community Categories (they have a separate secret key, see "Community Categories" below), and it disappears if you clear the app's data.
• Usage statistics: which game started, when, how many players, interface language, which screens were opened and for how long, which categories and questions were played and their result, the app version and device type — used to improve the game. They never include names or the room code.
• Crash reports and connection quality: if a screen in the game crashes we receive the technical error message and where it happened, and we record connection quality during play (weak or offline, and for how many seconds) and problems pairing the screen with the phone — used to fix bugs.
• Connection speed sample: at most once a day, and only on the main menu (never during a question or a drawing), the app on the controller phone or the screen in a browser times a few short round trips to our database and to a Google server in Belgium, then stores one small record: those times in milliseconds, the country we infer from the time zone set on the device (or from its language and region setting when the time zone is not enough), the time zone itself, the platform (the app on iOS or Android, or a browser), the connection type where the browser reports it (such as Wi-Fi or mobile data), the app version and the time of the sample — together with the anonymous identifier above. The record contains no IP address and no device location. We use it to choose the fastest server locations for players.
• Subscription status: whether this device is subscribed and to which plan, plus visits to the subscription page and the outcome of a purchase (bought, restored, or the page closed) and the currency. We never receive or see your card details.
• What you write to us: reports of wrong questions and anything you type in them. These are kept outside the room because they are feedback about the game itself.

What we don't do

• We do not sell your data. The only advertising partner that receives data from the app is TikTok, to measure our own ads for the game (see "Measuring our TikTok ads" below).
• We show no advertising inside the game, and we build no advertising profiles of players ourselves.
• We do not access your contacts or call history, and we never read your device's location. All we ourselves know about where you are is the country we infer from the time zone in the "connection speed sample" above. TikTok's tool in the app, when it runs, does send your IP address to TikTok, and an IP address can reveal your approximate area.
• We do not collect sensitive data.

Payments and subscriptions

All payments are handled by Apple or Google as merchant of record. We never see or store your card number at any point. From them we receive only subscription status — subscribed or not, which plan, and when it ends — through a subscription-management provider (RevenueCat) that we use to verify that a purchase is genuine. Apple's, Google's and RevenueCat's own privacy policies apply to what they process. Every provider that processes data for us (RevenueCat and Google's services) is bound by terms that require it to protect your data at least as well as this policy promises. Refund requests go to Apple or Google.

Measuring our TikTok ads

We advertise the game on TikTok. So that we know whether those ads bring players, the store app (on iPhone and Android) contains, from version 1.0.3, a measurement tool from TikTok called the "TikTok App Events SDK". It does not run in a browser or on the TV screen, and our website loads no tracking tool at all.

• What it sends to TikTok when it runs: that the app was installed or opened (including whether it was opened again the next day), and that a subscription was bought (with the amount paid and its currency) or a free trial started, together with information about the device: the device's advertising identifier (on iPhone only if you allow tracking, see below), an identifier TikTok's tool creates for itself on the device, the IP address, the device model and operating-system version, the device's language and region, the screen size, the connection type (Wi-Fi or mobile data), the app version, the browser identifier (user agent), a session number, the time the phone was last restarted, the tool's own error reports, on iPhone possibly also its own health reports (TikTok offers no way to switch them off on iPhone; we have switched them off on Android), and on Android the install source (Google Play's referral data, which shows which ad or link led to the install).
• What it does not send: player names, room codes, photos, drawings, questions, community categories, your email or phone number, or the anonymous identifier and community key described above. Your card details never reach it either; we never see them ourselves. Nor does what you tap or see inside the app: we have switched off the TikTok feature that collects taps, screens viewed, subscription offers shown and page addresses ("Enhanced Data Postback").
• Why: to learn which of our ads led to an install or a subscription, so that we spend on the ads that work. TikTok also uses these events to show our ads to people more likely to enjoy the game, and to avoid showing them to people who already have it. TikTok matches this data with what it holds about the same device to tell whether its owner saw our ad, which is what Apple calls "tracking". We ourselves see only totals in our ads account, such as how many installs and subscriptions came from each ad.
• Your choice on iPhone: the app asks you once, with Apple's standard dialog, whether it may track you. TikTok's tool runs only if you choose "Allow". If you choose "Ask App Not to Track", or the question was never shown to you, TikTok's tool does not start on your iPhone and sends nothing. When you allow it, the tool also uses Apple's own ad-measurement system (SKAdNetwork), which gives advertisers aggregated counts that do not identify the device. The whole game works whatever you answer, and allowing tracking earns nothing. To change your answer later: Settings → Privacy & Security → Tracking → Who's Playing?.
• On Android: the app asks you once, after the opening screen, "Measure our TikTok ads?", and the tool runs only if you choose "Allow"; the game is the same whatever you answer. Once you allow it, the tool reads the advertising ID that Google Play provides, and it runs only while your phone has an advertising ID and ads personalisation is not switched off. If you delete the advertising ID or opt out of ads personalisation in your phone's settings (Settings → Privacy → Ads; the path varies a little between phones), the tool does not start from the next app start and nothing is sent to it.
• A switch in the app, on both: the game's Settings has "Measure our TikTok ads". Switched off, TikTok's tool does not start from the next app start and nothing is sent to it, and no subscription is reported from the moment you switch it off.
• Storage and retention: what TikTok receives is stored on TikTok's servers and processed under TikTok's own privacy policy, which sets how long it is kept. We share data only with partners bound by written terms (for TikTok, the TikTok For Business Commercial Terms and its Business Products (Data) Terms) that require them to protect your data at least as well as this policy promises.

The Friday message (notifications)

The app has an optional setting called "Friday message", and it is off unless you turn it on yourself. If you do, we send you one message every Friday: a majlis-night reminder, what's new in the game, and occasional subscription offers. The messages are delivered through Google's Firebase Cloud Messaging. For that purpose the service holds an app installation identifier and a delivery token for your device, together with the device model, operating system, interface language, time zone and app version, so the message reaches you in your language. The token does not contain your name and is used only for this message and for the notices about your own categories described under "Community Categories" below. You can turn it off at any time in the app's Settings or in your device's notification settings; turning it off in the app deletes the token and stops delivery immediately, and it also stops the notices about your categories until you publish a category or send an appeal again.

So that we know how many phones have signed up, the app keeps one record per phone, with the anonymous identifier: whether the message is on or off, its language, the phone's system (iOS or Android), the app version and when the record was last updated. Each change overwrites the same record, and it does not contain the delivery token.

Community Categories (categories you create)

From version 1.0.3 you can create your own categories for Trivia Showdown, Draw & Guess and Spot the Faker and publish them for other players. Creating categories is optional, and it has terms of its own that you accept before you start: Category creation terms.

• What you write and upload: the category's title and its questions and answers, or its words and hints, its language, the pictures and sound clips you add (with the file name), and the nickname you type. Our servers convert pictures to a smaller file and strip their hidden data, including where a photo was taken, and convert sound to a clip of at most 20 seconds.
• The community key: there are no accounts and no sign-in. The first time you use Community Categories, your phone creates a secret random key for this purpose only, separate from the anonymous identifier above; it is stored on your phone and never shown in the app. Your categories are registered to this key, and with it your phone reads its drafts, its list of categories and the state of each, and its strike records. The key is not published with your categories and is not stored with usage statistics: we keep the creator of each category in a closed record on our servers that nobody but us can read. Your phone also keeps a secret code for each category that only it holds and that alone allows the category to be edited or deleted. Clearing the app's data removes the key, and the phone can then no longer reach its old categories.
• What becomes public: a published category, with its text, pictures, sounds, nickname, play count and likes, can be seen by everyone who uses the game and played by subscribers. Stored with it, and readable in the same way, are the interface language, the version of the creation terms you accepted and when, when the category was created and last changed, and how many reports it has. Your community key and the file names of your pictures and sounds are not published. Do not put your real name, or anyone's personal details, in a category.
• Private categories: when you publish you choose Public or Private, and you can change it later. A private category is free, goes through the same automatic checks, and the same terms, limits and strikes apply. It is not in the Community Categories library or search, nobody can like or report it, its plays are not counted, and no notice is sent about it. Its text is stored on our servers under your secret community key, so inside the game only your phone can read it, and we look at it when we need to enforce the terms. It is not hidden from everyone, though: when you pick or edit it on a phone connected to a room it shows on the room's screen, and when you play it, it is copied into the room's data like any category, and anyone holding the room code can read it until the room is deleted. Its pictures and sounds are stored like those of other categories: anyone with a file's exact link can open it. Nobody can list the files, and each link contains a random code that is hard to guess, but someone who got a link from a room, or while the category was public, can keep opening it until the file is deleted. So keep personal details out of it; the ban on them applies here too. When you make a public category private it leaves the library at once, but rooms that had already opened it may finish it until their session ends.
• Likes, plays and favourites: we store your like of a category with your community key so it counts only once, and we count plays once per room (with the room code and the time it was played). Favourites stay on your phone; they reach us only inside the room data, so that the screen can show them during a game.
• Creating with a screen connected: while you create or edit a category on a phone connected to a screen, a copy of what the creation screen shows (the text, small copies of the pictures, the titles of your categories in "My work", and the upload progress) goes through that room's data, like the rest of the game, so that the screen can show it. Anyone holding the room code can read room data. The copy is deleted when you leave the creation screen, or at the latest after two hours without activity in the room, and the room's data after four hours without activity.
• Reports: if you report a category we store the reason you chose, your note if you write one, and the time, with your community key (so that one device's report is not counted twice). The creator never learns who reported a category, and a category reported by several devices is hidden automatically until we review it.
• Strikes and blocks: if a category breaks the terms we record a strike against the community key (when, which category, and the reason), and the device may be blocked from creating and publishing categories. We also record your acceptance of the creation terms (its version and when you accepted), and daily counters per device that limit how many actions it can take.
• Appealing a block: a blocked device can send an appeal: a message it writes (up to 1,000 characters) and up to 3 pictures, with the interface language. Nobody but us sees it. An open appeal is kept until we decide it, and it is then deleted automatically, with its pictures, 90 days after the decision.
• Notices about your categories: if notifications are already allowed on your phone (for example because you turned on the Friday message), the app tells you through Firebase Cloud Messaging when your category is published or removed, and what we decided about your appeal. The app never asks for the notification permission for this, but if notifications are allowed, a delivery token is created for these notices even when the Friday message is off.

Automatic checks that keep the content family-friendly: before a category is published, our servers first check its text against word lists and patterns that detect personal data (such as phone numbers, email addresses and links), and then send it to Google Cloud services, which process it as our service provider: Cloud Natural Language checks the text. Before any picture or sound clip is stored, it goes to Google Cloud: Cloud Vision checks the pictures (SafeSearch, and reading any text written in them), and Gemini on Vertex AI listens to the sound clips and writes down what is said in them; the text read from them is then checked against the same lists and patterns. Finally Gemini reviews the whole category: its text, what was read from its pictures and sounds, and any pictures the checks flagged. We keep the result of each picture and sound check (including any text read from the picture and the words written down from the sound, also for files that were refused or later replaced), and the results of the last 10 checks of the whole category, so that we can review decisions; players cannot see them, and they are deleted when the category is deleted. Appeal pictures are checked by Cloud Vision (SafeSearch) only, and appeal messages and report notes are checked against word lists on our own servers only.

Translation: if you press "Translate" while creating a category, the lines to be translated are sent to Google Cloud Translation and come back in the other language. We do not store that text unless you save it in your category; we store only a daily counter per device.

How long: a category and its draft are kept until you delete it from "My work" or we delete it. Deleting it erases its text, pictures, sounds, likes, play records, reports and check results. A category we remove for breaking the terms disappears from the game for everyone and stays in "My work" on your phone, with the reason, until you or we delete it. Reports are deleted when we decide on them by keeping or removing the category, or when the category is deleted. Strike, block and terms-acceptance records stay with the community key so that the terms can be enforced, and a block lasts until we lift it.

Why we process this

To run the game across two devices (which is how it works at all), to remember which questions you have seen so they don't repeat, to activate your subscription, to improve the game and fix bad questions, to run Community Categories and keep them family-friendly (the automatic checks, reports, strikes and appeals), to measure connection speed and choose the fastest server locations, to know how many phones signed up for the Friday message, and to measure whether our TikTok ads lead to installs and subscriptions. Our basis is performing the service you asked for, our legitimate interest in improving it and in protecting players, and your consent when you send feedback or a photo, publish a category, report one, or send an appeal. For measuring our TikTok ads the basis is, on iPhone, your consent in Apple's dialog and, on Android, your consent in the app's own question, which you can withdraw at any time with the "Measure our TikTok ads" switch in the game's Settings or by deleting the advertising ID.

Where it is stored, and for how long

• Room data sits on Google Firebase servers. A whole room is deleted automatically after four hours without activity, and may close earlier when the controller phone leaves it. After two hours without activity, the photos are removed from it, along with what the join and creation screens were showing (including the names of past groups). "Without activity" means nobody has touched the controller phone. This runs every 15 minutes, so a deletion can come that much later.
• Your record of questions already seen is stored on your own device and disappears if you clear the app's data.
• Usage statistics, crash reports and written feedback are retained, because they are not tied to a room, and are deleted on request. The same applies to the Friday message sign-up record and the connection speed samples.
• Community Categories data is kept for the periods given in its section above.
• Server locations: the database (Google Firebase Realtime Database) and the category files and appeal pictures (Google Cloud Storage) are in the asia-southeast1 region (Singapore), and the services that handle category requests (Cloud Functions) run in the europe-west1 region (Belgium). Google runs the checking and translation services on its own servers.
• IP address: like any web service, Google's servers that run our database and functions see your device's IP address in order to answer it, and keep it in their standard request logs for up to 30 days. We never copy it into our own records. TikTok's tool in the app sends it to TikTok, as described in its section above.
• What TikTok's tool sends is stored by TikTok on its own servers under its own policy, not by us.

Your rights

You may ask to access, correct or delete your data, or withdraw consent, by emailing the address above. To delete a specific room's data, give us the room code; to delete your feedback, say so in your message. Data we keep only with the anonymous identifier (usage statistics, speed samples and the Friday message record) cannot be matched to an email, because the app does not show that identifier and it is tied to nothing else. For data kept with the community key (your categories and their drafts, likes, reports and strikes): if you published a category from that phone, give us its title or your nickname, and we will find the key and delete what is kept with it. Clearing the app's data on your phone starts a new identifier and a new key, so nothing new is tied to the old records, but it does not delete them from our servers. You can delete any category you created at any time from "My work" with "Delete this category"; to ask for other Community Categories data to be deleted, give us the category's title or your nickname. To stop TikTok measurement on any phone: switch off "Measure our TikTok ads" in the game's Settings; or, on iPhone, change the tracking setting given in its section, and on Android delete the advertising ID or opt out of ads personalisation. What TikTok holds never reaches us and we cannot match it to you, so ask TikTok to see or delete it, under its policy. We respond within 30 days. You have rights under the UAE Personal Data Protection Law, and under the GDPR if you are within its scope.

Children

The game is family-friendly and intended for ages 13 and up; children typically play it alongside their family. We never ask any player for their real name, email or age, we do not build profiles of players, and we show no advertising inside the game.

The store app is for players aged 13 and up, because it contains TikTok's ad-measurement tool. The children's category «دور الصغار» ("The Little Ones' Turn") holds questions for the youngest to answer during a family evening, while the phone that runs the game is a grown-up's. To keep TikTok's tool off: on iPhone a parent can choose "Ask App Not to Track", or turn off all tracking requests in Settings → Privacy & Security → Tracking; on Android, choose "No thanks" when the app asks "Measure our TikTok ads?"; on any phone, switch off "Measure our TikTok ads" in the game's Settings.

Two things parents should know: the nickname a player types is shown to the other players and to anyone who knows the room code, and the optional camera photo is stored with the room data, where anyone who knows the code can see it, until it is removed after two hours without activity in the room or when the room is deleted. We recommend drawn characters instead of photos for children. If you become aware that a child has sent a photo or a name you want removed, email us the room code and we will delete it straight away.

In Community Categories, a published category and its nickname are public to every player. That is why the creation terms forbid writing any child's real name or any personal details, and the automatic checks refuse anything that looks like personal data. If a category about your child is published, email us its title and we will remove it.

Changes to this policy

We may update this policy and will change the "last updated" date above.

On October 30, 2026 (also version 1.0.3) we added private categories and set out who can and cannot reach them.

On October 23, 2026 (version 1.0.3) we added Community Categories and their automatic checks, the Friday message sign-up record, the connection speed sample, the use of the notification token for notices about your own categories, and a secret community key that is separate from the anonymous identifier.

On October 27, 2026 (also version 1.0.3) we added TikTok's ad-measurement tool to the store app, the tracking question on iPhone and our own question "Measure our TikTok ads?" on Android, and removed the words "no cross-app tracking", which are no longer true. We then made the tool run only after your consent on both phones, switched off its collection of taps and screens, and added a switch in the game's Settings to turn it off.

On October 29, 2026 we made clear that the tool's health reports are switched off on Android and may be sent on iPhone, and how parents keep the tool off on Android.

See also: Terms of Use · Category creation terms · Support