Privacy Policy

1. Scope

This Privacy Policy applies to the Lamma mobile application (Android package com.botglobal.lamma) and the Bot Global services used to operate it. Lamma is currently a multiplayer game platform launching with XO.

2. Information Lamma processes

Identity and sessions

• Guests provide a game display name.
• If registered account features are used, Lamma may process a username, email address, display name, and password.
• The mobile client does not store passwords as plaintext. Authentication and session credentials are stored locally using secure platform-backed storage, including Android Keystore-backed protection where applicable.

Multiplayer gameplay

Lamma processes player or membership identifiers, game and session identifiers, invitations, presence, readiness, game moves, rematch actions, and related state needed to operate and recover multiplayer sessions. These identifiers are service data and are not described as public profiles.

Optional microphone and voice

Microphone permission is requested only when voice is used, after an in-game voice request and consent flow. Voice media uses WebRTC and is transmitted to the consenting player according to the negotiated connection path. Lamma does not intentionally record or store voice audio. Audio frames are not transported through SignalR; SignalR may carry voice signaling and control metadata needed to establish and manage the connection.

Camera and QR invitations

Camera permission is requested on demand when you choose to scan a QR invitation. Camera frames are processed for scanning and are not intentionally stored or uploaded as user photos. The resulting invitation data or token is sent to the backend for resolution.

Network and service operation

The application communicates with Bot Global backend services over HTTPS and uses realtime and WebRTC networking. Standard technical connection information, such as IP addresses, timestamps, and request metadata, may be processed by server, hosting, and network infrastructure as necessary to deliver and protect the service.

3. Why information is processed

• Provide Guest and registered account and session functionality.
• Create, join, operate, and recover multiplayer games.
• Create, share, scan, and resolve game invitations.
• Authorize participants and preserve application and game-session isolation.
• Maintain realtime presence, connection recovery, security, and service reliability.
• Provide optional consent-based player-to-player voice communication.

4. How information is shared or disclosed

Your display name and relevant game state are visible to the opponent participating in your game session. When both players consent to voice, WebRTC voice media is transmitted to the consenting peer according to the active connection path.

Information may also be processed by hosting, network, and other technical service providers where necessary to operate and secure Lamma. Lamma does not use personal information for targeted advertising or the sale of personal data in the current release.

5. Data and services not used in the current release

The current Lamma release does not access location or contacts; does not use advertising identifiers, advertisements, analytics SDKs, crash-reporting SDKs, SMS or phone access, or payment/billing integration; and does not include Firebase or FCM push integration.

This describes the current version. If Lamma's features or service providers change, this policy will be updated before those changes require different data handling.

6. Retention

Service data is retained for as long as necessary to operate Lamma, protect accounts and sessions, maintain security, and meet legitimate operational requirements. Retention depends on the type and purpose of the information. Local session credentials remain on the device until they expire, are cleared, or the user signs out, subject to platform behavior.

QR camera frames and voice audio are not intentionally retained by Lamma. This policy does not invent a fixed retention period where a formally approved period has not been established.

7. Your choices and requests

• You may access or update account information through available account features where supported.
• You may contact us to request access, correction, or deletion of information associated with you, where applicable.
• You may decline voice requests. Declining voice does not stop gameplay.
• You may withdraw microphone or camera permission at any time in Android device settings. Related optional features will then be unavailable.

Some requests may be subject to identity verification and legitimate security, operational, or legal retention requirements.

8. Security

Lamma uses safeguards appropriate to the current service, including HTTPS/TLS communications, authenticated session handling, Android Keystore-backed local credential protection where applicable, and server-side authorization and application isolation. No system can guarantee absolute security.

9. Children

Lamma is a general multiplayer game and this policy does not establish an age rating or state that the service is specifically designed for children. Parents or guardians with questions about a child's information may contact us using the address below. Google Play target-audience and content-rating decisions are handled separately from this policy.

10. Policy updates

We may update this policy as Lamma's features, service providers, or legal and operational requirements evolve. The effective and last-updated dates will be revised when a new policy is published.

11. Contact

For privacy questions or requests concerning Lamma, contact the service owner at farag.ashraf@icloud.com.