Updated 16 September 2026. KORA is operated by Tajroba. This policy covers KORA on Android. Contact kora@tajroba.sa for support or privacy requests.
We store your player identity, language and country choices, current hero, skills, rewards, match results, friends, club membership, chat messages, reports and moderation actions to operate and protect the game. An optional linked email verifies and recovers your account. An optional selected avatar photo is uploaded; we do not upload your entire photo library. Technical logs may include IP address, request timing and security events.
Your player name, current hero, statistics and friend count are public. Friend lists and hero skills are private unless you enable sharing. Private chat is available to its participants; moderators can review reported content. Game data is hosted on our server in Riyadh, Saudi Arabia. Service providers host the game and deliver account emails. Authorized staff access information needed for support and moderation.
Optional rewarded ads: after an eligible ranked loss, you can choose to watch a Google AdMob advertisement to restore the trophies deducted in that match, up to three protections per game account per UTC day. You can decline and continue playing. An advertisement closed before its reward is earned does not grant protection.
When advertising is available and the applicable privacy choices permit it, Google Mobile Ads processes the device IP address (which may indicate approximate location), advertising and other device/account identifiers, app and ad interactions, and diagnostic information. Google collects and shares this information for advertising, analytics and fraud prevention. KORA does not request precise GPS location for this feature. Google explains its processing at https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.
Reward verification: we send Google a game account identifier and a single-use reward reference. Our server receives a signed event containing the ad unit, reward type and amount, timestamp and transaction identifier. It associates the event with the eligible match and daily limit to prevent forged or duplicate rewards. Ads cannot unlock paid heroes or grant purchases.
Where required, the app presents advertising privacy choices before requesting ads and makes the relevant privacy options available again in Settings. You can also reset or delete your advertising ID in Android settings. Declining an optional rewarded ad does not prevent you from playing.
Delete your account in KORA Settings to remove account data, authored chat, reward reservations and account links from the active service. Consumed ad transaction identifiers and event times remain without account or reservation links to prevent replay and fraud. Security backups expire within 14 days. Purchase records required for verification or legal obligations remain restricted. We do not receive payment card details. Privacy and deletion requests can also be sent to kora@tajroba.sa with your player name and ID, preferably from the linked email; never email a password or verification code. We may verify account ownership before fulfilling a request.
This Android disclosure does not change the behavior of the iPhone version. We update the policy when our practices change.