Zohari Checkers (“the app”) is published by Zohari Tech Systems Ltd, a company registered in Kenya with offices in Nairobi (“we”, “us”, “our”). This policy explains what personal data the app collects, why we collect it, who we share it with, and the choices you have.
Contact us about this policy, or about your data, at info@zohari.tech.
1. What you can do without an account
Playing against the computer and pass-and-play on a single device work entirely offline and require no account. In those modes we do not collect personal data.
Everything below applies once you sign in or use a feature that needs an account: online matches, challenge links, tournaments, the wallet and your profile.
2. Data we collect
Account data
Sign-in is handled by our Keycloak identity service using OpenID Connect. When you create or use a Zohari account we receive and store:
- your username and account identifier
- your email address and whether it has been verified
- if you sign in through a third-party provider such as Google, the identifying information that provider releases to us
We do not receive or store your password. Passwords are handled by Keycloak, or by the third-party provider you choose.
Phone number
If you deposit funds, pay a tournament entry fee, or request a withdrawal, we collect the mobile number (MSISDN) you use for M-Pesa. We need it to initiate the payment request and to reconcile the transaction.
Wallet and transaction data
For accounts that use the wallet we store a balance in credits and a record of each transaction: deposits, tournament entry fees, prizes and withdrawals, with amounts, timestamps and status. We retain these records to operate the wallet, to resolve disputes, and to meet financial record-keeping obligations.
Gameplay data
We store the games you play online, the moves made, clock data, results, tournament registrations and standings. This is what makes matchmaking, resume, rankings and prize settlement work.
Device and technical data
Our servers receive the technical data any internet service receives, including your IP address and the time of each request, and we log it for security and abuse prevention. The app checks device connectivity to tell you when you are offline. The app contains no third-party advertising or analytics software development kits.
Data stored only on your device
Your authentication tokens are kept in the operating system’s secure storage, the Android Keystore or the iOS Keychain. Your appearance and board-skin preferences and a game-resume key are kept in ordinary app storage. Signing out clears the tokens. Uninstalling the app removes all of it.
3. Why we use your data
| Purpose | Data used |
|---|---|
| Create and secure your account | Account data |
| Run online matches and tournaments | Account data, gameplay data |
| Process deposits, entry fees and prizes | Phone number, wallet and transaction data |
| Prevent fraud, cheating and abuse | Account, gameplay, technical data |
| Meet legal and financial record-keeping duties | Wallet and transaction data |
| Support you when you contact us | Account data, whatever you send us |
Where Kenyan or European data protection law requires a lawful basis, we rely on performance of our contract with you for the first three purposes, our legitimate interests for fraud prevention and support, and legal obligation for record-keeping.
4. Who we share it with
We do not sell your personal data and we do not share it for advertising.
We share the minimum necessary with:
- Safaricom PLC (M-Pesa), to initiate and confirm payments. This requires your mobile number and the amount.
- Our hosting and infrastructure providers, who process data on our instructions in order to run the service.
- Authorities or regulators, where we are legally required to disclose, or where disclosure is necessary to investigate fraud or protect our users.
5. International transfers
Our infrastructure may process data outside Kenya. Where that happens we take the steps required by the Data Protection Act, 2019 to ensure your data remains protected to an equivalent standard.
6. How long we keep it
- Account data: for as long as your account exists.
- Wallet and transaction records: for the period required by applicable financial record-keeping law, counted from the date of the transaction, even if you close your account before then.
- Gameplay records: while they remain relevant to rankings, tournaments and dispute resolution.
- Server logs: a limited period for security purposes.
7. Your rights
Under Kenya’s Data Protection Act, 2019, and under the GDPR where it applies to you, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or transfer it to another service. Write to info@zohari.tech and we will respond within the period the law allows.
You may also complain to the Office of the Data Protection Commissioner in Kenya, or to your local supervisory authority.
Deleting your account
To delete your Zohari account and its associated data, email info@zohari.tech from the address on the account, with “Delete my account” as the subject. We will acknowledge your request and complete the deletion within the period the law allows.
We will delete your account data and gameplay history. We must retain wallet and transaction records for the statutory period described above; they are kept in a restricted form and are not used for any other purpose. Withdraw any remaining balance before requesting deletion, because deletion does not release funds.
8. Children
The app is not directed at children. You must be 18 or older to sign in, and in particular to use the wallet or enter a paid tournament. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact us and we will delete it.
9. Security
Traffic between the app and our servers is encrypted in transit. Tokens are held in the platform’s secure storage rather than in ordinary app storage. Access to production data is restricted to staff who need it. No system is perfectly secure, so we cannot guarantee absolute security, but we will notify you and the relevant authority of a breach where the law requires it.
10. Changes to this policy
We will update this page when our practices change and revise the “Last updated” date. If a change materially affects your rights we will tell you in the app or by email before it takes effect.