Effective Date: May 8, 2026
Kawa Royale ("Kawa Royale", "we", "our", "us", "the App") is a free-to-play social casino game published by Derek Cahill. The App is rated 17+ and is not intended for users under 17. This Privacy Policy describes the categories of information the App collects, how that information is used, who it is shared with, and the choices you have.
The App uses virtual currency only. No real money is wagered or won, and virtual coins cannot be redeemed for real money or anything of monetary value.
The following data is stored in your device's local storage by default and is not transmitted to our servers unless you sign in for cloud sync (see §1.2):
The App supports the following sign-in methods:
When you sign in (Apple or Anonymously), the following game data is synced to our backend (Google Firebase Firestore) so you can play across devices and so social features work:
In-app purchases are processed by Apple via StoreKit. Apple, not Kawa Royale, handles your payment information. After a successful purchase, the App sends Apple's signed receipt to our server-side validator (a Firebase Cloud Function) to confirm the transaction is legitimate before granting virtual goods. The receipt contains the product ID, transaction ID, and purchase timestamp; it does not contain your name, email, or payment method.
The App uses Firebase Crashlytics to collect anonymous crash reports and diagnostic data when the App crashes or encounters a fatal error. This includes:
Crashlytics data is anonymous and cannot be linked back to you personally. We use it strictly to identify and fix bugs.
The App uses Firebase Analytics to understand aggregate usage patterns (which features are used, where players drop off, how long sessions last). Analytics events are pseudonymous — they are tied to a randomized installation identifier, not to your real-world identity. We do not use this data to build advertising profiles, and the App does not include third-party advertising SDKs.
The following information is visible to other players inside the App when you participate in social features:
Your virtual coin balance, IAP history, email, and Apple account identifier are never shown to other players.
If you grant notification permission, the App registers an Apple Push Notification (APNS) device token with our backend so we can send time-sensitive alerts (daily bonus reminders, limited-time offers, gift received notifications). The APNS token is opaque and is not personally identifying. You can revoke notification permission at any time in iOS Settings.
Kawa Royale uses the following third-party services:
We do not embed any other third-party services or SDKs.
We do not share your personal information with third parties except in the following limited circumstances:
We retain your account data for as long as your account is active. If you delete your account or have not signed in for 24 months, we will delete or anonymize your personal data within 90 days, with the following exceptions:
Kawa Royale is rated 17+ on the App Store and is not intended for individuals under 17. We do not knowingly collect personal information from anyone under 17. If you believe a child under 13 has provided us with personal information in violation of the Children's Online Privacy Protection Act (COPPA), please contact us using the email below and we will promptly delete that information.
The App contains simulated casino mechanics. No real money is wagered, and virtual coins cannot be cashed out, redeemed, or exchanged for anything of value.
Regardless of where you live, you can:
California residents have the right to: know what personal information we collect, request deletion of personal information, opt out of the sale or sharing of personal information (we do not sell or share — there is nothing to opt out of), and not be discriminated against for exercising these rights. Email us at the address below to exercise any of these rights.
EU and UK residents have the right to: access, rectify, erase, restrict, or object to processing of your personal data; data portability; and lodge a complaint with your local data protection authority. The lawful basis for processing is your consent (when you sign in or accept notifications), the performance of our contract with you (operating the game and your account), and our legitimate interest (preventing abuse, improving the App). Email us to exercise any of these rights.
Cloud-synced data is stored in Google Firebase with TLS encryption in transit and at rest. Firestore security rules restrict each user's data so only that authenticated user (or our server-side Cloud Functions) can read or write it. Local data is stored in your device's standard storage and is protected by iOS device security. No system is perfectly secure; if we detect a data breach affecting you, we will notify you as required by applicable law.
Our servers are operated by Google Firebase in the United States. If you access the App from outside the United States, your information will be transferred to and processed in the United States. By using the App, you consent to that transfer.
We may update this Privacy Policy from time to time. Material changes will be highlighted at the top of this page with an updated effective date. Continued use of the App after a change indicates your acceptance of the updated policy.
If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal information, contact us at:
derekcahill.business@gmail.com