Privacy Policy

Mega Power Games Inc. ("we," "us," or "our") is a Canadian corporation committed to protecting the privacy and personal information of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Pulse mobile application ("the App"). This policy complies with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation in Canada, as well as the requirements of the Apple App Store and Google Play Store.

By downloading, installing, or using the App, you acknowledge that you have read, understood, and agree to the practices described in this Privacy Policy. If you do not agree, please do not use the App.

1. Information We Collect

We collect information that you provide directly, information generated through your use of the App, and limited information collected automatically from your device.

1.1 Account Information

When you create an account, we collect:

• Full name and email address
• Company or organization name
• Bio or personal description
• Website URL and Twitter/X handle
• Profile images, logos, and game artwork (for Developer accounts)

1.2 Authentication Data

To secure your account, we process:

• Passwords, which are securely hashed and managed through Amazon Cognito (we never store passwords in plain text)
• Time-based One-Time Password (TOTP) tokens for multi-factor authentication (MFA)
• Authentication session tokens stored securely in your device's keychain

1.3 Event Participation Data

When you participate in playtesting events, we collect:

• Event registrations and attendance records
• Check-in status, timestamps, and check-in method (QR code, manual entry, or list selection)
• Unique QR codes assigned for event check-in

1.4 Application Data

If you apply to participate in an event, we may collect:

• Gaming experience and interests
• Preferred gaming platforms
• Team member information (for Developer applicants)
• Any additional information you provide in the application form

1.5 Survey and Feedback Data

When you submit surveys or feedback about games, we collect:

• Numerical ratings and scores
• Written text comments and feedback
• Multiple-choice and checkbox responses

1.6 Voting and Raffle Data

During event activities, we collect:

• Votes cast in People's Choice voting sessions
• Raffle ticket earnings and prize-win records

1.7 Judging Data

For users with the Judge role, we collect:

• Evaluation scores assigned to games
• Written judge feedback and private notes

1.8 Device Information

With your permission, we collect:

• Push notification device tokens (Apple Push Notification service token on iOS; Firebase Cloud Messaging token on Android) solely for the purpose of delivering push notifications you have opted into

1.9 Locally Stored Data

The App stores limited data on your device to support offline functionality:

• Cached attendee information in a local SQLite database for offline check-in (Admin users only)
• Authentication tokens stored securely in your device's native keychain or keystore

2. How We Use Your Information

We use the information we collect for the following purposes:

2.1 Providing and Operating the App

• Creating and managing your user account
• Authenticating your identity and securing access to the App
• Facilitating event registration, check-in, and participation
• Processing and displaying survey responses and feedback to event organizers and developers
• Running voting sessions and raffle draws during events
• Processing and reviewing event applications

2.2 Communications

• Sending push notifications about event updates, schedules, and announcements (with your consent)
• Sending transactional emails such as account verification, password resets, and event-related notifications
• Sending bulk email communications related to events you are registered for

2.3 Event Management and Reporting

• Generating aggregate event statistics and analytics for organizers (e.g., check-in rates, survey completion rates, hourly attendance trends)
• Producing developer-level feedback summaries (e.g., average ratings, survey counts)
• Maintaining historical event records for reporting and future event planning

2.4 Improving the App

• Understanding how users interact with the App to improve functionality and user experience
• Diagnosing technical issues and ensuring reliable service

3. Data Storage & Security

3.1 Where Your Data is Stored

Your personal information is stored on Amazon Web Services (AWS) infrastructure located in the ca-central-1 (Canada) region. This means your data is stored on servers physically located in Canada and is subject to Canadian law.

Certain data is also stored locally on your device:

• SQLite database: Used to cache attendee data for offline check-in functionality. This data is stored only on the device and is cleared when no longer needed.
• Device keychain/keystore: Authentication tokens are stored in your device's secure enclave or keystore, protected by the operating system's native security mechanisms.

3.2 Security Measures

We implement industry-standard technical and organizational measures to protect your data, including:

• All data transmitted between the App and our servers is encrypted using TLS (Transport Layer Security)
• Passwords are cryptographically hashed; we never store or have access to plain-text passwords
• Authentication is managed through Amazon Cognito with support for multi-factor authentication (MFA)
• API access is secured with JWT (JSON Web Token) authentication with automatic token refresh
• Role-based access controls ensure users can only access data appropriate to their role (Admin, Developer, Playtester, Judge, or Media)
• Uploaded images and files are stored securely in Amazon S3 with access controls
• Regular security reviews and updates of our infrastructure and dependencies

While we take reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

4. Third-Party Services

We use the following third-party services to operate the App. These services may process your personal information as described below:

4.1 Amazon Web Services (AWS)

We use multiple AWS services for our backend infrastructure:

• Amazon Cognito: User authentication, account management, and secure credential storage
• Amazon API Gateway & AWS Lambda: Processing API requests from the App
• Amazon DynamoDB: Storing application data including event records, user profiles, and survey responses
• Amazon S3: Storing uploaded images such as developer logos and game artwork
• Amazon SES (Simple Email Service): Sending transactional emails (account verification, password resets) and bulk event-related emails

AWS data is processed and stored in the ca-central-1 (Canada) region. AWS complies with international privacy frameworks. For more information, see the AWS Privacy Notice.

4.2 Apple Push Notification Service (APNs)

We use APNs to deliver push notifications to iOS devices. Your device token is shared with Apple solely for notification delivery. See Apple's Privacy Policy.

4.3 Firebase Cloud Messaging (FCM)

We use (or plan to use) FCM to deliver push notifications to Android devices. Your device token is shared with Google solely for notification delivery. See Google's Privacy Policy.

5. Push Notifications

The App may send push notifications to your device for event-related updates, including:

• Event schedule changes and announcements
• Check-in reminders and event-day alerts
• Raffle and voting session notifications
• General event communications from organizers

5.1 Consent and Control

Push notifications require your explicit consent. When you first use the App, your device's operating system will prompt you to allow or deny notifications. You may adjust your notification preferences at any time through:

• iOS: Settings > Notifications > Pulse
• Android: Settings > Apps > Pulse > Notifications

5.2 Device Tokens

If you enable push notifications, your device generates a unique push notification token. This token is stored on our servers and used exclusively to route notifications to your device. Tokens are removed from our systems when you disable notifications or delete your account.

6. Data Retention

6.1 Active Accounts

We retain your account information for as long as your account remains active and as needed to provide you with the App's services.

6.2 Event Data

Event participation data, survey responses, voting records, judging data, and related information are retained for historical reporting and analytics purposes. This data helps event organizers evaluate past events and plan future ones.

6.3 Locally Stored Data

Data cached locally on your device (SQLite database, authentication tokens) may be cleared by:

• Logging out of the App
• Uninstalling the App
• Clearing the App's data through your device settings

6.4 Account Deletion

You may request the deletion of your account and associated personal data at any time (see Section 7: Your Rights). Upon receiving a verified deletion request:

• Your account will be deactivated and personal information will be removed or anonymized within 30 days
• Aggregate or anonymized data that does not identify you may be retained for analytics and reporting
• Certain data may be retained if required by law or for legitimate business purposes (e.g., fraud prevention, legal compliance)

7. Your Rights

Under PIPEDA and applicable Canadian privacy law, you have the following rights regarding your personal information:

7.1 Right of Access

You have the right to request access to the personal information we hold about you. We will respond to your request within 30 days, as required by PIPEDA.

7.2 Right to Correction

You may request that we correct or update inaccurate or incomplete personal information. You can also update much of your information directly within the App.

7.3 Right to Deletion

You may request the deletion of your account and personal data using our data deletion request form. You can also contact us by email at contact@megapower.games.

7.4 Right to Withdraw Consent

You may withdraw your consent for the collection, use, or disclosure of your personal information at any time, subject to legal or contractual restrictions. Withdrawing consent may affect our ability to provide you with certain features of the App.

7.5 Right to Complain

If you believe your privacy rights have been violated, you have the right to file a complaint with the Office of the Privacy Commissioner of Canada.

7.6 Exercising Your Rights

To exercise any of these rights, please contact us at contact@megapower.games. We may ask you to verify your identity before processing your request to protect your privacy and security.

8. Children's Privacy

The App is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@megapower.games and we will take steps to delete such information promptly.

Users between the ages of 13 and the age of majority in their province or territory of residence should review this Privacy Policy with a parent or guardian before using the App.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this page
• We will notify you through the App or via email for significant changes
• Continued use of the App after changes have been posted constitutes your acceptance of the updated Privacy Policy

We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us:

Mega Power Games Inc.
Email: contact@megapower.games

We will acknowledge receipt of your inquiry and endeavour to respond within 30 days.