Privacy Policy

Last updated: 26 May 2026

Draft — pending legal review. This is not the final version.

Who we are

This service is operated by AttoLabs Ltd, a company registered in the United Kingdom, acting as the "controller" of your personal data. For privacy matters, contact privacy@attolabs.dev.

Data we collect

  • Account data: username, email, and what you provide at sign-up.
  • Gameplay data: your answers, scores, and contest participation.
  • Device & usage data: device type, app identifiers, and aggregated analytics.
  • Prize data: what's needed to issue your prize and verify eligibility when required.

How we use your data

  • Running contests and managing your account.
  • Issuing prizes and preventing fraud and manipulation.
  • Improving the app and showing relevant ads.
  • Communicating with you about the service.

Legal basis for processing

We process your data on the bases of performing our contract with you, our legitimate interests in operating and protecting the service, your consent (especially for advertising and marketing), and compliance with our legal obligations.

Sharing your data

We share only what is necessary with trusted service providers: our prize payouts partner, advertising and analytics providers, and hosting providers. We do not sell your personal data.

International transfers

Your data may be processed outside your country of residence. Where it is transferred, we rely on appropriate safeguards (such as standard contractual clauses) in line with the Saudi Personal Data Protection Law (PDPL) and the UK GDPR.

Retention

We keep your data while your account is active and for as long as needed for the purposes above or to meet our legal obligations, after which we delete it or make it anonymous.

Your rights

You have the right to access, correct, delete, object to the processing of, withdraw consent for, and port your data, under the Saudi PDPL and the UK GDPR. To exercise any right, contact privacy@attolabs.dev. You also have the right to complain to the relevant supervisory authority (the Saudi Data & AI Authority "SDAIA", or the UK Information Commissioner's Office "ICO").

Children's privacy

The service is not directed at anyone under the legal age, and we do not knowingly collect their data.

Changes to this policy

We may update this policy from time to time and will post any changes on this page with an updated date.