Privacy Policy

Current App Scope

This Privacy Policy describes the current behavior of the CREAM Games mobile app as of March 20, 2026.

The mobile app currently supports registration, login, password reset, profile updates, profile photo upload, wallet top-up, bids, Trivia, Spin D Koko, and active Koko Draw entries.

Information You Provide

• First name, last name, display name, mobile number, email address, password, and location during registration.
• Profile details you later add or edit, including your description and profile photo.
• Password reset information when you use the forgot-password or reset-password flows.

Information Created By Your Use Of The App

• Local sign-in data stored on your device, including your access token, token expiry, saved user record, and authentication state.
• Wallet data such as token balance, token top-up requests, payment references, and payment verification results.
• Bid entries, active bids, draw entries, spin activity, trivia sessions, answers, and weekly trivia points returned by the backend.
• Profile records, account identifiers, and timestamps returned by Cream platform services.

How Your Information Is Used

• To create, authenticate, and secure your account.
• To show your profile, token balance, active bids, and Trivia points in the app.
• To process token purchases and verify payments after you complete a Flutterwave or Paystack checkout.
• To let you place bids, enter draws, spin the wheel, answer Trivia questions, and receive the result returned by the backend.
• To update or delete your account when you use the settings screens provided in the app.

Payments, Uploads, And Third Parties

When you buy tokens, the app opens a payment page provided by Flutterwave or Paystack and then sends the returned reference back to the backend for verification.

When you upload a profile photo, the image is sent through the upload service used by the app and may later be served back from the Cream photo CDN.

• The current app sends backend requests to Cream platform services, including api.creamplatform.com.
• Profile images may be served back to the app from cdn-users.creamplatform.com.
• The app does not present its own card-entry form; payment details are entered on the provider page you choose.

What The Current App Does Not Actively Do

• The current mobile app code does not actively request push-notification permission in the live login flow.
• This codebase does not currently include a mobile analytics or ad-tracking SDK.

Your Controls

• You can edit your personal information, description, and location inside the app.
• You can replace your profile photo by choosing a new image from your device library.
• You can change your password from Settings.
• You can log out at any time.
• You can delete your account from Settings; the app sends a delete request to the backend and clears local sign-in data.

Security And Device Storage

The app keeps sign-in state in local device storage so you can stay signed in between sessions.

You should protect your password and device. No mobile app or network service can promise absolute security.