Varedun – Privacy Policy

Privacy Policy

Effective Date: May 29, 2026
Last Updated: July 18, 2026

This Privacy Policy describes how VAREDUN LLC (“VAREDUN,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with the mobile game Egy Quest (the “App”) and the related VAREDUN learning platform services (collectively, the “Services”).

By installing or using the Services, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Services.

1. Who We Are

VAREDUN LLC
19046 Bruce B Downs Blvd, Ste B6-771
Tampa, FL 33647
United States
Email: cs@varedun.com

2. Children’s Privacy and Age Requirements

Egy Quest is designed for a general audience, including families and children. We take children’s privacy seriously and design the App to comply with the U.S. Children’s Online Privacy Protection Act (COPPA) and Google Play’s Families policies.

Player accounts are available only to users aged 13 and older. Before an account is created — whether by email and password or through Google Sign-In — we present a neutral age screen that asks for date of birth. We use the date of birth only to calculate age on the device at that moment; we do not store or transmit it. If the calculated age is under 13, account creation is blocked and the user is invited to continue playing as a guest.

Guest play is available to users of all ages and does not require an account. We do not collect personal information directly from guests through our own systems. The third-party advertising and analytics services described in Section 3.3 may process device information during any play session, including guest play, under the child-directed treatment described below.

Advertising is child-directed for everyone. Because children may play Egy Quest, we configure our advertising services to treat every user as a child, regardless of age or account status: ads are contextual (non-personalized), limited to G-rated content, and our advertising partners receive child-directed (COPPA) signals instructing them not to use device advertising identifiers for personalized advertising.

We do not knowingly collect personal information from children under 13 through a player account. If we learn that we have collected such information from a child under 13, we will delete it promptly.

Parental rights. Parents and guardians may contact cs@varedun.com at any time to review the information collected in connection with their child’s use of the App, request that it be deleted, or refuse to permit further collection. Because guest play involves no account, the information we ourselves hold about a guest is limited to anonymous session and quiz-attempt records that do not personally identify the child.

3. Information We Collect

3.1 Information You Provide Directly

Quiz Access Codes: If a teacher or educator gives you an access code, you may type it into the App to start an assigned quiz.
Quiz Responses: Your answers to quiz questions, the time taken per question, and your overall score.
Player Account Information: If you create a player account inside the game — using an email address and password, or by signing in with Google — we collect your email address, a display name you choose, and (for email/password accounts) a password that we store only in hashed form. If you sign in with Google, Google provides your email address and basic profile information such as your name; we never receive your Google password. Player accounts are available only to users aged 13 and older (see Section 2). Registered players are identifiable to us by their account information and are no longer anonymous.
Teacher / Author Account Information: If you create a teacher or author account on our web platform, we collect your email address, display name, and a hashed password.

3.2 Information Collected Automatically

Anonymous Session Identifier: When you play as a guest (without an account), we issue an anonymous session token so your gameplay can be tied to a quiz attempt without identifying you personally. This token does not contain personal information.
Local Device Storage: Your progress, in-game coin balance, settings, and the anonymous session token are stored locally on your device. This data is not transmitted to us except as needed for quiz attempts or in-app purchases.

3.3 Information Collected by Third Parties Inside the App

The App integrates the following third-party services. Each operates under its own privacy policy.

Unity LevelPlay Mediation with Unity Ads and Google AdMob: Advertisements are delivered through Unity LevelPlay, Unity’s mediation platform (which incorporates technology from ironSource). Participating ad networks — currently Unity Ads (Unity Technologies) and Google AdMob (Google LLC) — bid to display ads in the App. These services may process device information (device type, operating system, locale, IP-based approximate location) and ad-interaction events to deliver and measure ads. The App requests child-directed treatment for all users: COPPA/child-directed signals are sent to LevelPlay, Unity Ads, and AdMob; ad content is restricted to a G rating; and personalized advertising based on device advertising identifiers is disabled. LevelPlay/ironSource data practices are covered under Unity’s Game Player and App User Privacy Policy.
Unity Privacy Policy: https://unity.com/legal/game-player-and-app-user-privacy-policy
Google Privacy Policy: https://policies.google.com/privacy
Google Play Billing (Google LLC): Used to process in-app purchases (coin packs). Google handles payment information directly — VAREDUN never sees or stores your credit card or payment details. We receive only an anonymous purchase token used to deliver the items you bought.
Privacy Policy: https://policies.google.com/privacy
Google Analytics for Firebase (Google LLC): Used to understand how players engage with the App — for example, which levels are completed, which quizzes are played, language selection, and in-app purchases. Firebase collects app-usage events, a Firebase installation identifier, and device information (device model, operating system, and general region) to provide analytics. This data helps us improve the App.
Privacy Policy: https://policies.google.com/privacy
Google Sign-In (Google LLC): If you choose to sign in with Google, Google authenticates you and provides us your email address and basic profile information (such as your name). We never receive your Google password. Google processes this sign-in under its own privacy policy.
Privacy Policy: https://policies.google.com/privacy

The third-party services listed above are the only advertising, analytics, and authentication SDKs integrated in the App. The App contains no third-party attribution SDKs.

4. How We Use Information

We use the information described above to:

Operate and maintain the App and the VAREDUN platform;
Create and manage player accounts, authenticate you, and provide account-based features;
Match teacher-assigned quizzes to player attempts using access codes;
Record quiz results so teachers can review assigned students’ progress;
Process in-app purchases through Google Play Billing;
Display contextual, child-appropriate advertisements through Unity LevelPlay mediation (Unity Ads and Google AdMob);
Understand in-app engagement through analytics;
Detect and prevent fraud, abuse, and policy violations;
Comply with legal obligations.

We do not sell your personal information for money. However, our use of advertising and analytics services (Unity LevelPlay with Unity Ads and Google AdMob, and Google Analytics for Firebase) involves sharing device information and app-activity data with those providers for ad delivery, measurement, and analytics. Because the App requests child-directed treatment for all users, ad personalization is disabled. Under some laws (such as the CCPA/CPRA), this processing may still be considered “sharing”; you can limit it as described in Section 9.

5. How Information Is Shared

We share information only as follows:

Service Providers and Advertising / Analytics Partners: Unity LevelPlay / Unity Ads (advertising and mediation), Google AdMob (advertising), Google Analytics for Firebase (analytics), Google Play Billing (payments), Google Sign-In (authentication, if you choose to sign in with Google), and Google Cloud (hosting our backend infrastructure in the United States).
Teachers Who Issued an Access Code: If you used an access code from a teacher, that teacher can see the quiz results associated with the access code they generated. They do not see your real identity unless you provided it separately.
Legal Requirements: If required by law, court order, or government request, or to protect our rights or the safety of others.
Business Transfers: If VAREDUN is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.

6. Data Storage and International Transfers

All VAREDUN platform data is stored on servers operated by Google Cloud Platform in the United States. If you access the Services from outside the United States, your information will be transferred to, processed in, and stored in the United States. By using the Services, you consent to this transfer.

In addition, some advertising-mediation processing may occur outside the United States, including in Israel (ironSource / Unity LevelPlay), under those third parties’ own privacy policies and safeguards.

7. Data Retention

Quiz attempts and access code usage: retained for as long as the teacher account that created the assignment exists, then deleted within 90 days of account closure.
Player account information (email, display name, hashed password): retained while your account is active. You may delete your account at any time by visiting https://www.varedun.com/delete-account or by emailing cs@varedun.com. See Section 7.1.
Teacher account information: retained while your account is active. You may request deletion at any time by emailing cs@varedun.com.
Anonymous session tokens: retained for up to 12 months for fraud prevention, then deleted.
Purchase records: retained as required by applicable tax and consumer-protection laws.

7.1 Deleting Your Player Account

You can delete your player account and its associated data at any time in any of these ways:

On the web: visit https://www.varedun.com/delete-account and submit a deletion request — no need to reinstall the App.
By email: contact cs@varedun.com with “Account Deletion Request” in the subject line.

When you delete your player account, we delete the associated account data (your email address, display name, hashed password, and account-linked records) within 30 days. This 30-day timeframe applies to your account and its associated personal data; certain limited records are kept only for the specific legal or security purposes and periods described in this Section 7, namely: purchase records (retained as required by tax and consumer-protection law), anonymous session tokens (up to 12 months for fraud prevention), and access-code quiz attempts (up to 90 days). Guest and on-device data that we never received remains under your control on your device and can be removed by clearing the App’s data or uninstalling the App.

8. Your Rights

Depending on where you live, you may have the right to:

Request access to the personal information we hold about you;
Request correction or deletion of your information;
Object to or restrict certain processing;
Withdraw consent at any time (where consent is the basis for processing);
File a complaint with your local data protection authority.

To exercise these rights, email cs@varedun.com. We will respond within 30 days. To delete a player account specifically, see Section 7.1.

8.1 California Residents (CCPA / CPRA)

California residents have the right to know what personal information we collect, to delete it, to correct it, and to opt out of any “sale” or “sharing” of personal information. We do not sell personal information for money, but our use of advertising and analytics SDKs may constitute “sharing” for cross-context behavioral advertising under California law. To exercise California rights, including opting out of such sharing, email cs@varedun.com with “California Privacy Request” in the subject line.

8.2 European Economic Area, United Kingdom, and Switzerland (GDPR / UK GDPR)

If you are located in the EEA, UK, or Switzerland, our legal basis for processing your information is: (a) contract performance (operating the Services you requested, including your player account); (b) legitimate interests (fraud prevention, service improvement); (c) consent (where required for advertising); and (d) legal obligation. You have the right to lodge a complaint with your supervisory authority.

9. Advertising Choices

You can limit advertising tracking on your device:

Android: Settings → Google → Ads → Delete advertising ID, or enable “Opt out of Ads Personalization.”
Because the App requests child-directed treatment for all users, ads shown in the App are contextual and are not personalized based on your advertising ID.
Visit www.youradchoices.com for additional options.

10. Security

We use industry-standard technical and organizational measures to protect information, including HTTPS/TLS encryption for data in transit, bcrypt password hashing, JWT-based authentication, and access controls on our backend. However, no internet transmission or storage system is 100% secure. We cannot guarantee absolute security and are not responsible for breaches caused by factors beyond our reasonable control.

11. Third-Party Links

The Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies before sharing any information.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date at the top. Material changes will be communicated through the App or by email (for registered users). Continued use of the Services after changes become effective constitutes acceptance of the revised policy.

13. Contact Us

For privacy questions, requests, or complaints, contact:

VAREDUN LLC
Attn: Privacy
19046 Bruce B Downs Blvd, Ste B6-771
Tampa, FL 33647
United States
Email: cs@varedun.com