Privacy Policy

Last updated: March 10, 2025

Talubu ("we", "us", or "our") is operated by Appidi Labs Ltd, a company registered in Cyprus. This Privacy Policy explains how we collect, use, and protect your information when you use our educational games platform at talubu.com (the "Service").

1. Introduction

We are committed to protecting your privacy. This policy describes the types of data we collect, how we use it, and your rights regarding your data. By using the Service, you agree to the practices described here.

2. Data We Collect

For teachers (registered users): We collect your email address, password (when you sign up with email), display name, and profile information. If you use Google sign-in, we receive your Google account email and profile data. When you purchase credits, we process payment information via Stripe (we do not store full card details). We also store your Stripe customer ID for billing purposes. For participants (students joining games): We collect only the display name you choose when joining a battle. We store game scores, session state, and participation data (e.g. which games you completed). No account is required for participants.

3. How We Use Data

We use your data to: provide and operate the Service; process payments and manage credits; authenticate users; display leaderboards and game results; send transactional emails (e.g. account confirmation, password reset); improve the Service; and comply with legal obligations. We do not sell your personal data to third parties.

4. Third-Party Services

We use the following third-party services: • Supabase: Authentication and database hosting. Your account and game data are stored on Supabase infrastructure. • Stripe: Payment processing. Stripe handles payment details; we store only your Stripe customer ID and transaction references. • Google: OAuth sign-in. When you sign in with Google, Google shares your email and profile information with us. • Vercel: Hosting and deployment. Requests and logs may be processed by Vercel. Each third party has its own privacy policy. We recommend reviewing their policies for details on how they handle your data.

5. Cookies & Storage

We use cookies and similar technologies for: (a) authentication—session cookies to keep you logged in; (b) preferences—localStorage for settings such as sound and language; (c) game state—sessionStorage for battle and participant data during gameplay. We do not use third-party advertising or analytics cookies. You can disable cookies in your browser, but this may affect your ability to use the Service.

6. Data Retention

Account data: We retain your account and profile data for as long as your account is active. You may request deletion of your account and associated data. Participant data: Names and scores for completed battles are stored with the session. Sessions expire according to the creator's settings (e.g. 30 minutes to 7 days). Expired sessions may be deleted during routine cleanup. Credit transactions: We retain transaction records for accounting and legal compliance.

7. Your Rights

Depending on your location, you may have the right to: access your personal data; correct inaccurate data; request deletion of your data; withdraw consent; and data portability. If you are in the European Economic Area (EEA), you may also lodge a complaint with a supervisory authority. To exercise these rights, contact us at legal@appidilabs.com. We will respond within a reasonable time as required by applicable law.

8. Children's Privacy

Talubu is designed for educational use. Students participating in battles typically provide only a display name. We do not knowingly collect personal information from children under 13 without appropriate consent. If you are a teacher or parent and believe a child has provided personal data without consent, please contact us at legal@appidilabs.com. We will take steps to delete such information.

9. Changes

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Service and updating the "Last updated" date. Your continued use of the Service after such changes constitutes acceptance of the updated policy.

10. Contact

For questions about this Privacy Policy or to exercise your data rights, please contact us at legal@appidilabs.com. Appidi Labs Ltd is registered in Cyprus.