Privacy Policy

Effective Date: September 5, 2026 · Last updated: September 5, 2026

Kawa Royale ("Kawa Royale", "we", "our", "us") is a free-to-play social casino game published by Embergrove Software LLC, a California limited liability company. This policy covers the Kawa Royale mobile app ("the App") and the websites at kawaroyale.com and kawaroyale.app (together with the App, "the Service"). The Service is intended only for users aged 21 and over, in the United States excluding the State of Washington. This Privacy Policy describes the categories of information the Service collects, how that information is used, who it is shared with, and the choices you have.

The App uses virtual currency only. No real money is wagered or won, and virtual coins cannot be redeemed for real money or anything of monetary value.

1. Information We Collect

1.1 Information stored locally on your device

The following data is stored in your device's local storage by default and is not transmitted to our servers unless you sign in for cloud sync (see §1.2):

1.2 Authentication data

The App supports the following sign-in methods:

1.3 Cloud-synced game data

When you sign in (Apple or Anonymously), the following game data is synced to our backend (Google Firebase Firestore) so you can play across devices and so social features work:

1.4 Purchase data

In the app: purchases are processed by Apple via StoreKit. Apple, not Kawa Royale, handles your payment information. After a successful purchase, the App sends Apple's signed receipt to our server-side validator (a Firebase Cloud Function) to confirm the transaction is legitimate before granting virtual goods. The receipt contains the product ID, transaction ID, and purchase timestamp; it does not contain your name, email, or payment method.

On the web: purchases are processed by our payment processor, which is identified to you at checkout and may act as the merchant of record. You enter your payment details directly with that processor. We never receive or store your full payment card number. We receive a confirmation of the transaction — the items purchased, an order or transaction identifier, the amount, and the billing country used for tax — which we use to grant your virtual goods, to honour refunds and chargebacks, and to meet our tax and record-keeping obligations.

1.5 Diagnostic and crash data

The App uses Firebase Crashlytics to collect anonymous crash reports and diagnostic data when the Service crashes or encounters a fatal error. This includes:

Crashlytics data is anonymous and cannot be linked back to you personally. We use it strictly to identify and fix bugs.

1.6 Analytics data

The App uses Firebase Analytics to understand aggregate usage patterns (which features are used, where players drop off, how long sessions last). Analytics events are pseudonymous — they are tied to a randomized installation identifier, not to your real-world identity. We do not use this data to build advertising profiles, and the Service does not include third-party advertising SDKs.

1.7 Public-profile data (visible to other players)

The following information is visible to other players inside the Service when you participate in social features:

Your virtual coin balance, IAP history, email, and Apple account identifier are never shown to other players.

1.8 Push notification tokens

If you grant notification permission, the App registers an Apple Push Notification (APNS) device token with our backend so we can send time-sensitive alerts (daily bonus reminders, limited-time offers, gift received notifications). The APNS token is opaque and is not personally identifying. You can revoke notification permission at any time in iOS Settings.

1.9 Website-specific data

When you use kawaroyale.com or kawaroyale.app in a browser, the following additional processing applies.

1.10 Geographic eligibility data

The Service is offered only in the United States, excluding Washington. When a request is blocked on that basis we log the country and state code, the path requested, and the reason for the block. We do not log the IP address itself in that record. These logs exist to demonstrate that the restriction is enforced, and are retained for up to 12 months.

2. How We Use Information

3. Information We Do NOT Collect

4. Contact access (optional)

If you grant Kawa Royale access to your contacts to find friends who already play, we process your contacts as follows:

5. Third-Party Services

Kawa Royale uses the following third-party services:

We do not embed advertising SDKs, and we do not sell or share personal information for cross-context behavioral advertising.

6. Data Sharing

We do not share your personal information with third parties except in the following limited circumstances:

7. Data Retention

We retain your account data for as long as your account is active. If you delete your account or have not signed in for 24 months, we will delete or anonymize your personal data within 90 days, with the following exceptions:

8. Children's Privacy

The Service is intended only for adults aged 21 and over, and our Terms of Service require you to be 21 to use it. The App carries a 17+ App Store content rating, which describes its content; it is not a grant of eligibility, and our own minimum age of 21 controls. We do not knowingly collect personal information from anyone under 21. If you believe a child under 13 has provided us with personal information in violation of the Children's Online Privacy Protection Act (COPPA), please contact us using the email below and we will promptly delete that information.

The App contains simulated casino mechanics. No real money is wagered, and virtual coins cannot be cashed out, redeemed, or exchanged for anything of value.

9. Your Privacy Rights

9.1 General rights

Regardless of where you live, you can:

9.2 California residents (CCPA / CPRA)

California residents have the right to: know what personal information we collect, request deletion of personal information, opt out of the sale or sharing of personal information (we do not sell or share — there is nothing to opt out of), and not be discriminated against for exercising these rights. Email us at the address below to exercise any of these rights.

9.3 European Union and UK residents (GDPR / UK GDPR)

EU and UK residents have the right to: access, rectify, erase, restrict, or object to processing of your personal data; data portability; and lodge a complaint with your local data protection authority. The lawful basis for processing is your consent (when you sign in or accept notifications), the performance of our contract with you (operating the game and your account), and our legitimate interest (preventing abuse, improving the Service). Email us to exercise any of these rights.

10. Data Security

Cloud-synced data is stored in Google Firebase with TLS encryption in transit and at rest. Firestore security rules restrict each user's data so only that authenticated user (or our server-side Cloud Functions) can read or write it. Local data is stored in your device's standard storage and is protected by iOS device security. No system is perfectly secure; if we detect a data breach affecting you, we will notify you as required by applicable law.

11. International Data Transfers

Our servers are operated by Google Firebase in the United States. If you access the Service from outside the United States, your information will be transferred to and processed in the United States. By using the Service, you consent to that transfer.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be highlighted at the top of this page with an updated effective date. Continued use of the Service after a change indicates your acceptance of the updated policy.

13. Contact

The data controller is Embergrove Software LLC, a California limited liability company.

If you have questions, requests, or complaints about this Privacy Policy or our handling of your personal information, contact us at:
support@kawaroyale.app

← Back to Kawa Royale · Terms of Service