Privacy Policy

Application: NMT Battles

Last updated: August 21, 2026

Contact: kateryna.kos@bomi.school

1. General Provisions

This Privacy Policy explains what data the "NMT Battles" application collects, why it is needed, to whom it may be disclosed, and what rights users have.

By using the application, you agree to this policy. If you do not agree to the terms, please do not use the application.

2. Who We Are

"NMT Battles" is an educational mobile application in the form of PvP quizzes: players compete against each other (or against a bot, if no live opponent is found) in real time, answering questions from the school curriculum and climbing the league/trophy system.

For privacy questions: kateryna.kos@bomi.school

3. What Data We Collect

3.1. Account Data

• Email — upon registration via email or via Google / Apple
• Nickname (display name) that you choose in the game
• Unique user identifier
• Data from Google Sign-In or Sign in with Apple, if you choose this login method (e.g., email and name). Apple may provide a hidden forwarding address (Hide My Email) instead of your real email

3.2. Game and Social Data

• Number of trophies, league, number of wins and losses
• Battle data: for each round, a reference to the question, the selected answer option (A/B/C/D), whether the answer is correct, response time (milliseconds), and the overall battle result (score, winner, trophy change) are stored. Question text is stored separately — only the question identifier from the shared question bank is kept in the battle record
• Whether you played against a bot or a real player (for matchmaking and ranking fairness)
• Position in rankings: overall, among friends, within a clan
• Clan: name, membership, role (leader / member), clan points
• Friends: friend requests, friends list, battle challenges and rematches
• Tournaments: weekly points for the leaderboard, participation in competitions

3.3. Data You Provide Voluntarily

• Reviews of the application (a rating from 1 to 5 stars and optional text)
• Prize contact (e.g., a Telegram handle), if you leave it after winning a weekly tournament, in order to receive the reward

There is no separate in-app "support chat" system. You can contact us via the email listed in the "Contacts" section.

3.4. Technical and Analytics Data

• In-app events (e.g., login, onboarding completion, battle start and end, screen views)
• Technical information about the device, operating system, and application version — via analytics services
• On iPhone — with your consent via the system App Tracking Transparency (ATT) prompt, an advertising identifier may be collected for Meta analytics. If you decline, the application will continue to work, but some Meta analytics will be limited

3.5. Local Data on the Device

Only service-level settings are stored locally on your phone, for example:

• whether onboarding and the intro tour have been completed
• whether the first launch or first battle has been recorded (for analytics)
• a cache of clan membership data (for faster display)

This data does not replace the server-side profile and may be reset upon reinstalling the application.

4. Why We Use the Data

Application operation — Login, matchmaking (finding an opponent or bot), running battles

Leagues and rankings — Calculating trophies, league position, leaderboards

Social features — Clans, friends, battle challenges, rematch

Tournaments and prizes — Weekly competitions, contacting winners

Product improvement — Analyzing how users go through battles and use the application

Bot matching — If no opponent is found — substitute a bot of an appropriate level

Support — Processing reviews

Security — Preventing cheating and abuse; battle results are verified server-side

5. Legal Bases for Processing (GDPR)

• Performance of a contract — so that the application, matchmaking, and battles function
• Consent — e.g., for tracking (ATT on iOS), a voluntary review, or a contact provided to receive a prize
• Legitimate interest — usage analytics, bot matching, security, and abuse prevention

6. Who We Share Data With

We do not sell personal data. Data may be processed by the following providers:

Supabase — Authorization, database, server-side logic for battles, rankings, and clans

Google — Login via Google

Apple — Login via Apple

Amplitude — Application usage analytics (events, screen views)

Meta (Facebook App Events) — Analytics and performance measurement (subject to your consent on iOS)

These companies may process data on servers located outside Ukraine and the EU. We require them to provide an appropriate level of data protection in accordance with their policies and agreements.

7. Data Visible to Other Players

Other users can see:

• your nickname
• trophies, battle statistics (played / won)
• your league and position in the ranking
• the clan you belong to (name, tag)

They cannot see your email, Telegram, prize contact details, or other personal information.

8. Children and Minors

The application is intended for schoolchildren and university applicants (typically aged 13–18).

• If you are under 13 years old, use the application only with the consent of a parent or guardian

9. How Long We Retain Data

Account and game progress — As long as the account is active

Reviews — As long as necessary for processing and product improvement

Prize contact details — Until the prize is delivered and for the period required by law

Analytics data — In accordance with the policies of Amplitude and Meta (generally a limited period)

After account deletion (Settings → "Delete Account"), your profile, battle history, and progress are deleted from our servers. Some analytics records may remain with analytics providers for their retention period in de-identified or aggregated form.

10. Your Rights

You have the right to:

• view your data
• correct your nickname
• delete your account — in the application settings ("Delete Account")
• withdraw consent to tracking — in iPhone settings (Settings → Privacy & Security → Tracking)
• file a complaint with a data protection supervisory authority

To exercise your rights, write to kateryna.kos@bomi.school. We will respond within 30 days.

11. Security

We apply technical and organizational measures to protect data: encrypted connections (HTTPS), access restrictions, and server-side verification of battle results (to prevent manipulation of scores and trophies). No system is completely secure, but we work to reduce risks.

12. Tracking Technologies

The mobile application does not use cookies as a website would, but analytics SDKs (Amplitude, Meta) may use device identifiers and similar technologies to collect usage statistics.

13. Changes to This Policy

We may update this policy from time to time. The current version will be updated at this link. We will notify you of significant changes in the application or by email, if we have one on file.

14. Contacts

Email: kateryna.kos@bomi.school