Draft — not yet legally reviewed

GuessOff has not launched. This document is a working draft written alongside the product spec and must be reviewed by a Kenyan-qualified lawyer, and the service licensed by the BCLB, before any real money changes hands.

Privacy Policy

Last updated: 3 August 2026 · Draft

What we collect

  • Account — your email address, and if you sign in with Google, the account identifier Google returns.
  • Profile — your handle, rating, and match record.
  • Gameplay — every move in every match, with its timestamp. This is how the engine stays auditable and how we investigate disputes.
  • Payments — your mobile-money number and the transaction records required to move money and to satisfy Kenyan record-keeping law.
  • Technical — device and connection information needed to deliver the game and detect abuse.

What we deliberately do not do

  • We do not show your real name to other players. We assign you a random handle precisely so that signing in with Google does not publish your name.
  • We do not sell your personal data.
  • We do not use your data for advertising profiles.

Who sees what

Your handle, rating, league and match record are public — they appear on leaderboards and to opponents. Your email address, balance, payment details and secret words are not, and are never included in the data streamed to another player's device.

Who we share with

  • Google Firebase — authentication, database and hosting infrastructure.
  • Paystack — payment processing for M-PESA deposits and payouts.
  • Regulators and law enforcement — where we are legally required to.

How long we keep it

Financial records are retained for the period Kenyan law requires. Match records are retained while your account is open, so your history and rating remain meaningful. On account closure we anonymise your profile and gameplay records and delete your contact details, keeping only what the law requires us to keep.

Your rights

Under the Data Protection Act 2019 you may request access to your personal data, ask us to correct it, ask us to delete it (subject to our legal retention obligations), and object to processing. Write to privacy@guessoff.co.ke and we will respond within 30 days.

Security

Secret words are stored where no client can read them, and every write to a balance goes through our servers rather than from a player's device. No system is perfectly secure, but the architecture is built so that a compromised client cannot read another player's word, alter a result, or change a balance.

Contact

privacy@guessoff.co.ke