Privacy Policy

Last Updated: October 2025

1. Introduction

Welcome to Mental Mamba. We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website.

Mental Mamba can be used with or without an account. When you create an account and sign in, certain data is linked to your identity to provide personalized features like leaderboards and progress tracking. Anonymous usage is also supported with limited functionality.

2. Information We Collect

Information Linked to Your Identity (When Signed In):

• Contact Information: Email address for account authentication and communication
• User Identifiers: Unique user ID assigned to your account for identification and data association
• Account Information: Username and profile preferences
• Usage Data: Game scores, levels reached, gameplay duration, correct/incorrect answers, session activity, screen views, and feature interactions
• Game Progress: High scores, achievements, leaderboard rankings, and statistics
• Diagnostic Data: Crash reports, error logs, and performance data collected during authenticated sessions

Information Not Linked to Your Identity (Anonymous Usage):

• Anonymous session identifiers
• Device type, operating system, and version
• App version and environment information
• General performance metrics and crash data
• Anonymous usage analytics

Note: If you choose to play without creating an account, your data remains anonymous and is not linked to your identity. However, you will not have access to leaderboards, account sync, or cross-device progress tracking.

3. How We Use Your Information

We use the collected information to:

• Authentication: Verify your identity using email-based login with one-time passcodes (no passwords stored)
• Account Management: Create and manage your user profile, sync progress across devices
• Game Features: Enable leaderboards, track achievements, save high scores, and display personalized statistics
• Analytics: Understand how users interact with the app, track feature usage, and measure game performance
• Improvement: Analyze gameplay patterns to enhance game balance, difficulty levels, and user experience
• Support: Respond to feedback, troubleshoot issues, and provide customer assistance
• Communication: Send important updates, notifications about your account, and respond to your inquiries

Authentication Method

Mental Mamba uses a passwordless authentication system. When you sign up or log in, we send a one-time verification code to your email address. Your authentication is managed by AWS Cognito, a secure cloud-based identity service. We do not store passwords.

4. Third-Party Services and Data Processors

AWS Cognito (Authentication)

We use Amazon Web Services (AWS) Cognito to manage user authentication and identity. When you create an account, your email address and authentication tokens are processed by AWS Cognito. AWS acts as a data processor and handles this information in accordance with their privacy policy and security standards.

AWS (Backend Services)

Our backend infrastructure is hosted on Amazon Web Services (AWS). User data, including account information, game statistics, and analytics, is stored and processed on AWS servers located in the EU (Ireland region). AWS provides enterprise-grade security and compliance certifications.

Google AdMob (Advertising)

Mental Mamba displays advertisements using Google AdMob. AdMob may collect and use information about your device and app usage to show personalized ads. This includes:

• Device identifiers
• App usage data
• Ad interaction data
• Location information (if permitted)

You can opt out of personalized advertising by adjusting your device's advertising settings (iOS: Settings → Privacy → Advertising → Limit Ad Tracking).

Apple Game Center (iOS Only)

On iOS devices, Mental Mamba integrates with Apple Game Center to provide additional leaderboards and achievements. If you choose to use Game Center, your game data may be shared with Apple according to Apple's Game Center privacy policy. Game Center integration is optional.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With AWS for hosting, authentication, and backend services; with Google AdMob for advertising; with Apple for Game Center features (iOS only)
• Public Leaderboards: Your username and game scores are publicly visible on leaderboards (email addresses are never displayed publicly)
• With Your Consent: When you explicitly authorize us to share your information
• Legal Compliance: To comply with legal obligations, court orders, or regulatory requirements
• Safety and Security: To protect our rights, property, safety, or that of our users
• Business Transfers: In connection with mergers, acquisitions, or asset sales (you will be notified of any such change)

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encrypted data transmission (HTTPS/TLS)
• Secure token-based authentication (JWT)
• No password storage (passwordless authentication via email OTP)
• AWS enterprise-grade infrastructure security
• Regular security audits and monitoring
• Access controls and data minimization practices

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account remains active or as needed to provide you with services. Specifically:

• Account Data: Retained while your account is active and for 90 days after account deletion
• Game Statistics: Retained to maintain leaderboard integrity and historical records
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for improvement purposes
• Legal Requirements: Some data may be retained longer if required by law or for legitimate business purposes

You can request deletion of your account and associated data at any time by contacting us at support.mentalmamba@australa.co.

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of the personal information we hold about you
• Correction: Update or correct inaccurate or incomplete information
• Deletion: Request deletion of your account and associated personal data
• Restriction: Request limitation of how we process your data
• Objection: Object to certain types of processing
• Portability: Receive your data in a structured, machine-readable format
• Withdraw Consent: Withdraw consent for data processing where consent was the legal basis

To exercise any of these rights, please contact us at support.mentalmamba@australa.co. We will respond to your request within 30 days. You can also delete your account directly through the app's Account Settings.

9. Children's Privacy

Mental Mamba is rated 4+ and suitable for all ages. We do not knowingly collect personal information from children under 13 without verifiable parental consent.

If you are under 13, please do not create an account or provide any personal information. You can still play Mental Mamba without an account in anonymous mode.

If we become aware that we have collected personal information from a child under 13 without parental consent, we will take steps to delete that information immediately. Parents who believe we may have information about their child should contact us at support.mentalmamba@australa.co.

10. International Data Transfers

Mental Mamba is operated by Australa Limited (UK). Your information is primarily stored and processed on AWS servers located in the European Union (Ireland region, eu-west-1).

If you access our services from outside the EU, your information may be transferred to and processed in the EU. We ensure that appropriate safeguards are in place for such transfers, including:

• AWS compliance with international data protection standards (GDPR, SOC 2, ISO 27001)
• Standard contractual clauses approved by the European Commission
• Adequate security measures as described in Section 6

By using Mental Mamba, you consent to the transfer of your information as described in this policy.

11. Analytics and Performance Monitoring

Mental Mamba collects analytics data to understand how users interact with the app and to improve the gaming experience. Analytics collection includes:

• Session Data: App opens, session duration, screen views
• Gameplay Metrics: Game starts, game completions, scores, levels reached, correct/incorrect answers
• Feature Usage: Which features are used most frequently, user flow through the app
• Performance Data: App crashes, errors, loading times, frame rates

For authenticated users, this analytics data is linked to your User ID to provide personalized insights and track your progress. For anonymous users, analytics data is collected with a randomly generated session ID and is not linked to any personal identity.

All analytics data is transmitted securely to our backend services and is used solely for improving Mental Mamba. We do not share analytics data with third parties except for aggregated, anonymized statistics.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal requirements, or for other operational reasons. The "Last Updated" date at the top of this policy indicates when it was last revised.

We will notify you of any material changes by:

• Posting the updated policy in the app and on our website
• Sending an email notification to registered users (for significant changes)
• Displaying an in-app notification when you next open Mental Mamba

Your continued use of Mental Mamba after any changes indicates your acceptance of the updated Privacy Policy.