Privacy policy

MASKAX ("we", "MASKAX+") makes MASKAX+, a learning game for students in grades 8–12. This policy explains what data the app collects, why, who sees it and what you can do about it.

Account: your full name, your phone number (it is how you sign in), your grade, and a MASKAX ID we create for you. Your password is stored and checked by Google Firebase Authentication; we never see it.

Learning and games: your answers, scores, match results and opponents, XP, level, daily streak, practice and past-exam use, and your place on the rankings.

Friends and chats: friend requests, your friends, the text and voice messages you send in chats and groups, the groups you are in, and any reports or blocks you make.

Plan and payments: the plan you chose, the amount, the date, the phone number you paid from and the payment provider's reference. We never see or store your PIN or your wallet balance.

Device and technical data: a push-notification token for your phone, when you were last active (friends see "online"), your IP address and basic request logs (time, request type, result). Logs are kept for about 14 days and never contain your messages, password or tokens.

Microphone: used only while you record a voice message. The app does not listen at any other time.

To create your account, run the games and rankings, keep matches fair, deliver your messages, and show your progress.

To send notifications you asked the app to show: messages, game invitations, friend requests, payment confirmations and reminders.

To process plan payments, to give you access, and to help you if something goes wrong.

To protect the app from cheating, abuse and attacks.

Other students can see your name, MASKAX ID, grade, level and streak. Classmates see your name and XP on the leaderboard. Your friends can see when you are online. Messages are visible to the people in that chat or group.

Your phone number is never shown to other students.

We do not sell your data and we do not show advertising or use advertising trackers.

We use service providers to run the app: Google Firebase (sign-in and push notifications); our hosting provider, with servers in Amsterdam, the Netherlands; and Sifalo Pay with the mobile-money operators (EVC Plus / Waafi and e-Dahab) to process payments. They receive only what they need for that job.

We may share data when the law requires it or to protect users from harm.

Our servers are in the Netherlands. Google may process sign-in and notification data in other countries. By using the app you understand that your data is handled outside Somalia.

We keep your data while your account exists. When you delete your account, your profile, friends, game history, rankings and the messages tied to you are removed. Messages you sent in a group may remain without your name. Finished matches may remain in your opponent's history without your identity. Server logs are removed after about 14 days.

You can change your name and grade in the app, and delete your account yourself: Settings → Delete account. You can also ask us to delete your data or give you a copy of it (see "Delete your account" and the contact details below).

You can turn off notifications and the microphone in your phone settings.

The app talks to our servers over HTTPS, access to the data is limited, and your password is handled by Firebase. No system is perfectly secure, so please choose a strong password and do not share it.

MASKAX+ is for students in grades 8–12, usually 13 years and older. Students under 18 should use it with the knowledge of a parent or guardian. We do not knowingly collect data from children under 13; if you think we have, contact us and we will delete it.

If we change this policy we will update the date below, and tell you in the app when the change is important.

our contact page