Effective date: 27 May 2026 Last updated: 27 May 2026 Data Controller: aluwi.inc, a Barbados corporation Mailing address: [Barbados registered office address — to be inserted from the CAIPO incorporation documents] Contact: hello@aluwi.ai
Island Slam is a Caribbean dominoes game. We collect the minimum information needed to run it: your sign-in details, your in-game profile, your match history, and any chat messages you send during multiplayer matches. We do not sell your information. We use Google Firebase for the back-end and Google AdMob to show ads to non-subscribers. You can delete your account at any time from inside the app — your sign-in is disabled immediately and your data is erased within 15 days. The full policy below explains exactly what’s collected, why, who it’s shared with, how long it’s kept, and the rights you have to control it.
Island Slam is owned and operated by aluwi.inc, a corporation organized under the laws of Barbados. References below to “we,” “us,” “our,” or “aluwi” mean aluwi.inc.
Our mailing address for privacy inquiries is the address listed at the top of this policy — our registered office in Barbados, on file with the Corporate Affairs and Intellectual Property Office (CAIPO).
Our supervisory authority for data protection is the Data Protection Commissioner of Barbados, established under the Barbados Data Protection Act, 2019.
This Privacy Policy explains how we handle personal information when you:
This policy does NOT cover:
We organize this by what the data is used for, because that matters more than the technical category.
By creating an account, you consent to the processing of your personal data as described in this policy, in line with the Barbados Data Protection Act, 2019.
When you sign in with Google, we receive: your Google email address, your Google display name, and your profile picture URL.
When you sign in with email and password, we receive: your email address and a hashed password (we never see the plaintext password — Firebase Authentication hashes it before storage).
We use this only to identify your account between sessions. Email addresses are not used for marketing.
Lawful basis (Barbados DPA / GDPR): Performance of contract — we need this to provide the game.
While you play, we store on Firebase Realtime Database:
Lawful basis: Performance of contract.
If you send chat messages during a multiplayer match, we store the message text and your display name on Firebase for 90 days. After 90 days, messages are automatically deleted. We retain them for that window so we can investigate reports of abusive behavior.
In-game chat includes a profanity filter, the ability to block another player, and a one-tap report function. Reported messages are reviewed by us, and we may warn, suspend, or remove players who break the rules. Chat is intended for friendly trash-talk between players in the same match. The game is rated 13+ on the App Store and Teen on Google Play, in part because user-generated chat is present.
Lawful basis: Performance of contract (to provide the chat feature) and our legitimate interest in moderating abusive behavior.
If you subscribe to Island Slam’s ad-free tier ($1.99/month), we receive a subscription receipt from Apple or Google confirming your entitlement. We do not receive your credit card number, billing address, or any other payment data — Apple and Google handle that on their own platforms.
We use the third-party service RevenueCat to validate your subscription receipt and tell our app whether you should see ads or not. RevenueCat receives a hashed user identifier from us and the receipt token from the store.
Lawful basis: Performance of contract.
If you are NOT a subscriber, you will see a full-screen interstitial ad between some matches (never during a match, and not during your first few matches of a session). Ads are served by Google AdMob.
For ads to be shown, AdMob may collect from your device:
On iOS, the App Tracking Transparency (ATT) prompt will ask whether you allow tracking before any tracking-based advertising occurs. If you decline, ads still show but they are not personalized.
On Android, you can reset or delete your advertising ID at any time in your device settings. We respect that signal. In the EU and UK, a consent banner (Google’s User Messaging Platform) governs ad personalization.
If you subscribe to the ad-free tier, AdMob is not loaded and none of the above applies.
Lawful basis (Barbados DPA / GDPR): Consent (collected via the ATT prompt on iOS; via Google’s User Messaging Platform consent banner in the EU and UK).
We use Firebase Crashlytics to receive crash reports when the app fails. A crash report includes: the type of crash, the line of code where it failed, your device model, your operating system version, and (optionally) a unique installation identifier. It does not include your name, email, contents of your hand, or chat messages.
We use Firebase Analytics to understand which screens players use most, which game modes are popular, and where players drop off. Analytics events are aggregated — we do not look at individual player journeys.
Lawful basis: Legitimate interest in maintaining a working product.
If you request account deletion (in-app at Settings → Delete account, or by emailing hello@aluwi.ai), your sign-in is disabled immediately and your data is erased within 15 days — in most cases the deletion runs the moment you confirm.
We keep a small record of the request (your former user ID, the deletion date, and confirmation) for 12 months. This is required by Apple’s Account Deletion Reporting policy and helps us prove the deletion took place if questioned. This deletion record is the only information we keep about a deleted account. All other data — display name, email, match history, chat messages, leaderboard entries — is removed within 15 days of your request.
Lawful basis: Compliance with legal obligation (Apple App Store policy; Barbados DPA / GDPR Article 17 record-keeping).
To be specific, because absence is informative:
We do not sell your personal information. The only parties who receive your data are the service providers we use to run the game:
| Provider | What they receive | Why | Where they store it |
|---|---|---|---|
| Google Firebase (Authentication, Realtime Database, Crashlytics, Analytics, Cloud Functions) | Email, display name, game state, match history, crash reports, analytics events | To run the game’s back-end | United States and European Union, on Google’s servers |
| Google AdMob (free tier only) | Device advertising identifier, approximate location, device metadata | To serve interstitial ads | United States, on Google’s servers |
| RevenueCat | Hashed user ID, Apple/Google receipt token | To validate your subscription | United States, on RevenueCat’s servers |
| Apple App Store / Google Play Billing | Your Apple/Google account ID, subscription transaction details | To process subscription payments | Apple/Google’s own infrastructure |
We may also disclose your information when legally required: in response to a valid subpoena, court order, or other lawful request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
Island Slam is based in Barbados, but our service providers store data primarily in the United States and the European Union.
If you are located in the EU, the UK, Barbados, or another jurisdiction with cross-border transfer restrictions, your personal information may be transferred to and processed in the United States.
We rely on the following safeguards for international transfers:
You may request a copy of the relevant SCCs by emailing hello@aluwi.ai.
| Data | Retention | Why |
|---|---|---|
| Account credentials (email, hashed password) | Until you delete your account, then 15 days max | Needed to keep your account working |
| Game state during a match | Lifetime of the match, then deleted | Only useful while playing |
| Match history + leaderboard entries | 12 months rolling, then aggregated/anonymized | Powers weekly and monthly leaderboards |
| Chat messages | 90 days | Moderation and abuse-report investigation |
| Crash reports | 90 days | Bug diagnosis |
| Analytics events | 14 months | Product improvement |
| Subscription receipts | Lifetime of subscription + period required by Barbados record-keeping law | Tax and audit obligations |
| Account-deletion records | 12 months after deletion | Apple App Store policy compliance |
No system is perfectly secure. If a security breach occurs that puts your data at risk, we will notify you and the Data Protection Commissioner of Barbados (and any other relevant supervisory authority) within 72 hours of becoming aware, as required by law.
Island Slam is rated 13+ on the App Store and Teen on Google Play. We do not direct the game to children under 13 and do not knowingly collect personal information from anyone under 13.
If we learn — or are notified — that a player is under 13, we will immediately suspend access to that account and delete it and any associated data within 15 days.
For players aged 13–17 (in jurisdictions where this applies, including Barbados, the United Kingdom, EU member states, and the United States):
If you are a parent or guardian and believe your child under 13 has created an account, please contact hello@aluwi.ai and we will suspend the account immediately and remove it and all associated data.
The Barbados Data Protection Act, 2019 grants you the rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. To exercise these rights, email hello@aluwi.ai. We will respond within 30 days. You also have the right to complain to the Data Protection Commissioner of Barbados.
To exercise any of these rights, email hello@aluwi.ai. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.
We extend the rights described above to all users globally as a matter of policy. Email hello@aluwi.ai to exercise them.
Island Slam is a mobile app and does not use cookies in the traditional web sense. The mobile app uses:
The web version of Island Slam uses:
We do not use cookies for advertising or third-party tracking on the web version.
We may update this Privacy Policy from time to time. When we do, we will:
If you continue to use Island Slam after the effective date of a change, you accept the updated policy. If you do not agree, you may delete your account.
Questions, requests, or complaints:
Email: hello@aluwi.ai Mailing address: [Barbados registered office address — to be inserted from CAIPO incorporation documents] Data Controller: aluwi.inc, a Barbados corporation
For supervisory authority complaints:
Island Slam — Caribbean dominoes, done right. © 2026 aluwi.