Privacy Policy

Last updated: May 2026

Loba Lingala is operated by an individual based in the United Kingdom. This Privacy Policy explains how we collect, use, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We take privacy seriously and collect only what we need to run the game.

If you have any questions, please contact us at hello@lobalingalagame.com. We do not publish a public postal address.

1. Data Controller

The data controller is the individual operating Loba Lingala in the United Kingdom. For any questions about how your data is handled, contact us at hello@lobalingalagame.com. Additional identification details are available on request for legal purposes.

2. Data We Collect

We collect only what is necessary. If you use the game without signing in, we do not collect any data that identifies you personally.

If you choose to create an account, we collect:

Your email address — used to authenticate you via a one-time code and to sync your progress across devices.
Your game progress — including completed categories, streak, saved proverbs, and words practised.

We do not collect your name unless you voluntarily provide it. We do not collect sensitive personal data, location data, contacts, payment details, or any data from third-party sources.

3. How We Collect Data

We collect information when you:

Sign up to receive updates about Loba Lingala or related products.
Contact us via email or through our website.
Create an account to save your progress — see sections 8 and 9 for details on local storage and analytics.

4. Purpose of Data Processing

We use your personal data to:

Authenticate you and sync your game progress across devices.
Send you updates about Loba Lingala and related products, where you have consented.
Respond to your enquiries.
Identify and fix bugs and improve the game.
Comply with our legal obligations.

We do not use your data for advertising. We do not sell it. We do not share it with anyone except the service providers listed in section 6, who help us run the game.

5. Legal Basis for Processing

Our lawful basis for processing your data under UK GDPR is:

Consent — when you sign up to receive communications or choose to create an account.
Legitimate interests — in fixing bugs, understanding how the game is used, and communicating with people who have expressed interest in our products. We have assessed that these interests do not override your rights and freedoms.

6. Data Sharing and Disclosure

We do not sell or share your personal data with third parties for their own marketing purposes. The following service providers process data on our behalf as part of running the game. All are bound by strict confidentiality and data protection obligations.

Netlify — hosts the website and processes any form submissions on our behalf.
Supabase — our authentication and database provider. If you choose to sign in, Supabase stores your email address and game progress data securely. Based in the United States.
ElevenLabs — used to generate the example pronunciation audio served in the game. The audio was pre-recorded and is served as static files. No personal data is shared with ElevenLabs.
Fathom Analytics — our privacy-friendly analytics provider. Fathom does not use cookies and does not receive personally identifiable information. It provides anonymised, aggregated usage data only.
Daraja AI — powers the Express Yourself translation feature. When you type a phrase, it is sent to Daraja for translation. No account information or identifying data is transmitted. We use Daraja's enterprise service, which means your text is not used to train their models. Based in Kenya.
Sentry — our error and crash monitoring provider. When the app encounters a problem, Sentry captures technical details including the error message, browser type, and operating system. It does not receive your email address or game progress data. Based in the United States. See sentry.io/privacy.

7. International Data Transfers

Netlify, Supabase, and Sentry are based in the United States. Daraja AI is based in Kenya. Your data may be transferred to and processed in those countries. Where required, transfers are covered by Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the UK ICO, ensuring your data is protected to an equivalent standard under UK GDPR.

8. Audio Recordings — Speak Mode

Loba Lingala includes a Speak mode that allows you to record yourself pronouncing Lingala words and compare your recording to the example audio.

Your voice recordings are stored locally on your device only. They are never uploaded to our servers, transmitted to us, or shared with any third party. When you close or refresh the game, recordings are cleared from memory. We do not have access to, and do not retain, any audio you record.

The example audio files used in the game are pre-recorded using AI voice generation (ElevenLabs) and served from our website. They are not personalised and do not involve the collection of your data.

9. Local Storage and Game Data

To provide a consistent experience, Loba Lingala stores the following data locally on your device using your browser's localStorage:

Your game progress — which categories and levels you have completed.
Your daily streak — how many consecutive days you have played.
Your saved proverbs — any proverbs you have favourited in the booklet.
Your accessibility preferences — such as font size, reduced motion, or high contrast settings.
The date of your last play session.

This data never leaves your device unless you choose to create an account.

Optional account and cloud sync. If you choose to sign in using your email address, your game progress is securely synced to our database (Supabase) so it can be restored across devices. This only happens if you actively choose to sign in. You can delete your account and all associated data at any time from the Settings menu in the game, or by emailing hello@lobalingalagame.com.

You can clear your local data at any time by clearing your browser's site data, or using the reset option in the game's settings menu.

10. Analytics and Error Monitoring

We use Fathom Analytics for website and in-game usage tracking. Fathom does not use cookies and does not collect personally identifiable information. It provides anonymised, aggregated data about how the game is used — such as which features are popular and how sessions flow. We do not use advertising cookies, tracking pixels, or similar technologies.

We also use Fathom to track anonymised in-game events — such as which levels are played, whether the Speak feature is used, and when the proverb booklet is opened. These events are non-identifiable and help us understand how to improve the game. No personal data is attached to them.

We use Sentry for error and crash monitoring. When the app encounters a problem, Sentry captures technical diagnostic information — the error message, browser type, operating system, and the sequence of events leading up to it. This is used solely to identify and fix bugs. Sentry does not receive your email address, name, or game progress data. You can read Sentry's privacy policy at sentry.io/privacy.

11. Data Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or misuse. Your account uses one-time email codes rather than passwords. Progress data stored in Supabase is protected by row-level security. Only authorised personnel have access to your personal information.

12. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes set out in this policy.

If you unsubscribe from our mailing list, we remove your email promptly from active systems.
If you delete your account within the game, your email address and all associated progress data are permanently deleted from our database within 30 days.
Local progress stored on your device is not affected by account deletion and must be cleared separately via your browser or the in-game reset option.

13. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request erasure of your personal data (the "right to be forgotten").
Object to or restrict the processing of your data.
Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
Request data portability — to receive your data in a structured, commonly used format.

To exercise any of these rights, contact us at hello@lobalingalagame.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully. You can contact the ICO at ico.org.uk.

14. Children's Data

Loba Lingala is suitable for general audiences. We do not knowingly collect personal data from children under the age of 13. The optional account feature requires an email address — if you are under 13, please do not create an account without parental consent. If you believe a child has created an account, contact us at hello@lobalingalagame.com and we will delete it promptly.

15. App Store

When Loba Lingala is available on the Apple App Store or Google Play, your use of those platforms is also subject to the respective terms and conditions of Apple Inc. and Google LLC. This Privacy Policy applies to the game content and experience itself.

16. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated date at the top. We encourage you to review it periodically, particularly if you use the account or Express Yourself features.

Contact

For any questions or concerns about this policy or how we handle your personal data, please get in touch:

hello@lobalingalagame.com
We do not have a public postal address at this time.

For information about content licensing, the brand, and commercial use, please see our Legal & Licence page.