Privacy Policy

Last updated: 10 September 2026

This policy covers the Morabaraba Android app and this website, morabaraba.co.za, both run by Motebo Technologies (“we”, “us”). It explains what we collect, why, who else sees it, and what you can do about it.

If you only play against the computer or pass the phone to a friend, you can use the app without an account, and almost nothing here applies to you beyond the Advertising and Analytics sections.

Who we are

Motebo Technologies, South Africa. Email: admin@motebo.co.za.

We are the responsible party under the Protection of Personal Information Act (POPIA) and the controller under the GDPR for the data described here.

What we collect

When you create an account. You can sign in with Google or with an email address and password. We receive your email address, your display name, and a unique account identifier. You choose a username. You may add a country flag and upload an avatar photo. None of these are required to play offline.

When you play online. We store the games you play: the moves, the result, the rules used, when the game started and ended, and your rating history. This is what makes leaderboards, profiles and rematches work.

When you talk to other players. Game chat, direct messages, chat rooms and discussion comments are stored so that the people you sent them to can read them. Other players can report a message, and we keep reported messages for review.

Your progress. Experience points, level, achievements, streaks, daily puzzle results and in-game coins are stored against your account. The coins are earned by playing and cannot be bought with money.

Device identifiers. To send you a notification when it is your move or someone challenges you, the app stores a push token for your device. The advertising SDK reads your device’s advertising ID. Firebase Analytics assigns an app-instance identifier.

Usage data. In the app, Firebase Analytics records which screens are opened and how often the app is used; we do not add custom events. On the website, Google Analytics (GA4) does the same for pages, subject to your cookie consent. Google derives an approximate location from your IP address for this and for advertising. Neither the app nor the site asks for, or uses, your device’s location services.

What we do not collect. Contacts, precise location, photos other than the avatar you choose, microphone, camera, files, SMS, call logs, or payment details. There are no in-app purchases in the current version of the app.

Why we use it

  • To run the game: matching you with opponents, keeping the board in sync, showing who is online, delivering messages and notifications.
  • To keep accounts safe: Firebase Authentication uses your email and IP address to detect abuse.
  • To keep the community usable: moderating reported messages, honouring blocks.
  • To improve the app and the site: understanding which features are used.
  • To pay for the app and the site: showing advertising.

We do not sell your personal information.

Advertising

The app shows ads served by Google AdMob. We ask AdMob for family-safe (“G”) ads only. The website shows ads through Google AdSense.

If you are in the European Economic Area, the United Kingdom or Switzerland, the app shows a consent form before any ad is requested, and you can change your choice at any time in Settings under Ad privacy choices. Elsewhere, ads may be personalised using your advertising ID unless you turn that off in your device’s Google settings, where you can also reset or delete the advertising ID.

Google’s use of advertising data is described at policies.google.com/technologies/ads. You can manage ad settings at adssettings.google.com.

Cookies and consent on the website

The website uses cookies and similar technologies for essential site functionality, for Google Analytics, and to display advertising through Google AdSense. When you first visit we ask for your consent for analytics and advertising cookies. Until you choose, we use Google Consent Mode v2 to keep ad and analytics storage denied by default. If you do not consent, any ads shown are non-personalised. You can change your choice at any time by clearing site data or contacting us.

Who else sees your data

  • Google Firebase (Authentication, Firestore, Cloud Messaging, Analytics) stores accounts, game data, messages and push tokens on our behalf.
  • Google AdMob and AdSense receive your advertising ID or cookie identifiers, ad interactions and approximate location to serve and measure ads.
  • Google Cloud Run hosts our game server in Johannesburg, South Africa.
  • Other players see your username, avatar, country flag, rating, statistics, public game history and anything you post in chat or comments. Your email address is never shown to other players.

We share data with authorities only when the law requires it.

Where your data lives

Our game server and its database run in Google Cloud’s Johannesburg region. Firebase, AdMob and AdSense may process data on Google servers outside South Africa, under Google’s standard data-protection terms.

How long we keep it

  • Your account, profile and game history: for as long as your account exists.
  • Messages: for as long as the game or conversation exists, or until you delete your account.
  • Online-presence and matchmaking records: minutes; they expire automatically.
  • Analytics data: Google keeps it for up to 14 months.
  • After you delete your account, the username, display name, email address and photo are cleared at once. Ratings and match history stay, no longer tied to a name, because your opponents’ head-to-head records and past leaderboards depend on them.

Your choices and rights

Export your data. In the app, Settings → Export my data gives you your profile and rating history as a JSON file.

Delete your account. In the app, Settings → Delete my account signs you out for good and clears the account immediately. You can also request deletion without the app.

Control notifications. Turn them off in the app’s Settings or in your device’s notification settings.

Control ads. See the Advertising section above.

Under POPIA and the GDPR you can also ask us to correct your information, object to how we use it, or lodge a complaint with the Information Regulator (South Africa) or your local data-protection authority. Email admin@motebo.co.za and we will respond within 30 days.

Children

Morabaraba is not directed at children under 13, and we do not knowingly collect personal information from them. Online play and chat require an account. If you believe a child under 13 has created an account, email us and we will delete it.

Security

Everything between the app or the site and our servers travels over HTTPS. Accounts are protected by Firebase Authentication. We restrict who at Motebo can access production data. No system is perfectly secure, and we will tell you if a breach affects you, as POPIA and the GDPR require.

Changes to this policy

When we change this policy we update the date at the top and, for significant changes, tell you in the app. Continued use after a change means you accept it.

Contact

Motebo Technologies
Email: admin@motebo.co.za
WhatsApp: +27 81 008 4223