Mas Dhoani

Privacy Policy

Mas Dhoani, the Maldivian fishing game for Android, and its website. Last updated: 8 October 2026.

The short version

  • You can play without signing up. The app makes an anonymous guest account the first time it goes online.
  • Other players see the name you choose, your level, scores and finds on the online boards and in Mas Races.
  • If you sign in with Google, your progress is saved online so you can carry it to another phone. Your Google name and email stay with Google's sign-in service and are not stored in the game's database.
  • If you order on our website, we keep the order (what you bought, the amount, its reference, the transfer reference you type and your game name) so we can deliver it and keep our accounts. You pay by bank transfer yourself; we never ask for, see or store card or bank login details.
  • If you sign up as a beta tester, we keep your Google email only to add you to the test on Google Play, and delete it when you leave or when testing ends.
  • No ads, no tracking, no analytics tools, no location. We never sell your data.
  • You can delete your account and online data from the app, from this page, or by email to admin@mvdigital.tools.

1. Who we are

Mas Dhoani is made by MV Digital Tools in the Maldives ("we", "us"). We decide how the game's data is used and we are responsible for it. Contact: admin@mvdigital.tools.

This policy covers the Mas Dhoani app (package mv.masdhoani.game), its test edition "Mas Dhoani Beta", this website and the online services they use. It does not cover Google Play, Google accounts, banks or other services you use yourself; their own policies apply.

2. What we collect, and why

The game and the website only collect what they need for their online features. Here is all of it:

WhatWhenWhere it is keptWhy
Your save (progress, settings, your chosen name) and a random player ID made on your phone Always On your phone. Online only if you sign in with Google (row 4) To play the game
Guest account ID (an anonymous Firebase user ID) The first time the app goes online Firebase Authentication (Google) So our server can tell players apart without a sign-up (Mas Races, fair play)
Google account details: name, email address, profile photo link and Google account ID Only if you tap "Sign in with Google", in the app or on this website Firebase Authentication (Google). Not in the game's database. The game and the website show your name and email only to you To sign you in, to bring your progress to another phone, and to show you your account and orders on the website
Online save: your whole save, your random player ID, the app version and the time your phone saved it Only while you are signed in with Google Our database (Supabase), written only by our game server Cloud save, so your progress is safe and goes with you. The website's "My account" shows a summary of it (level, boli, species, best catches, Mas Race record)
Rankings and boards: your chosen name and name glow, level, XP, fish caught, best trip, numbers of species, rare colours and mythic fish, daily challenge scores, maavaharu (ambergris) finds with their size, grade, value and when they were found, and Mas Race ratings, wins and losses, together with your random player ID When you play online Our database (Supabase) Leaderboards, the daily challenge, the finders' board, ratings, and checks against cheating
Mas Races: your chosen name, a public player ID made from your random player ID, the app version, your level and gear, your rating, your phone's model name (for example "SM-A146B"), your taps and their timing in the race, and the result. Your sign-in token, which our server checks and does not keep During a Mas Race Our game server's memory during the race. Ranked results go to our database Matchmaking, deciding fairly who tapped a fish first (the phone model lets us allow for slower screens), fair-play checks and ratings
Purchases: what you bought (product), what it gave you (boli or items), the Google Play order number, a scrambled fingerprint (SHA-256) of the purchase token, whether it was a test purchase, when you bought it, when it was credited and, if it was refunded, when, and the account it belongs to (Firebase user ID). A confirmed website order is recorded the same way, with its order reference in place of the Google Play order number When you buy in the app through Google Play, or when we confirm your website order (you must be signed in with Google) Our database (Supabase), written by our server after it checks the purchase with Google Play (or after the shop owner confirms a website payment) To give you what you paid for exactly once, restore it on a new phone, honour the once-per-player pack, and handle refunds
Orders on this website: the order reference (for example MD-7Q4K), what you ordered, the amount in rufiyaa, its times and status, your game name at the time, the transfer reference you choose to type, the account it belongs to (Firebase user ID), who confirmed it, and the reason we give if we reject or refund it When you place an order on this website (you must be signed in with Google) Our database (Supabase), written only by our game server To match your bank transfer to your order, deliver what you paid for exactly once, handle refunds, and keep our accounts
Your bank transfer: what our bank shows us: the sender's name, the amount, the date and your remarks; and the transfer slip, if you send it to us on Viber or WhatsApp When you pay a website order Our bank account, under our bank's own terms. A slip you send on Viber or WhatsApp stays in that chat app: it is seen only by the shop owner, and is not stored on this website or in our database Only to confirm your order
Beta tester sign-up: the email of the Google account you sign up with, its name, the phone model you choose to give, your sign-up status (pending, approved, waitlist or removed), when you signed up and that you agreed Only if you sign up on the beta page Our database (Supabase), written only by our game server. Approved emails are also added to our tester list in Google Play Console To add you to the test of the app on Google Play, show you your status and link, and send you at most one email about the test
Player reports: when you report another player after a Mas Race, the reason you pick from the list (name, sexual, harassment, cheating, spam or other), the reported player’s name as shown and public player ID, a little context about the race (the mode, whether it was ranked, the race’s number), the app version and the time; who reported (your account ID, guest or Google, and your public player ID); and what we did about it (dismissed, name reset or banned), when, and by whom Only if you tap Report in the app Our database (Supabase), written only by our game server. Only the shop owner reads them, in our back office. Blocking a player is kept only on your phone and is never sent to us To moderate names and behaviour, stop cheating and spam, and keep a record of what we did
Network data: your IP address, the time of each request and the app's or browser's user agent Whenever the app or the website connects Our server uses your IP address only in memory, to limit requests and stop abuse, and never stores or logs it. Our hosting providers keep their usual request logs (section 5) Security and protecting the service

Our server's own logs record events (for example "a race ended" or "an order was confirmed") with a short scrambled code in place of your player or account ID. They contain no names, email addresses or IP addresses.

What we do not collect

The website

When you sign in on this website, Firebase keeps your sign-in in your browser's storage so you stay signed in; signing out removes it. The website loads its own files and, when you sign in, Google's sign-in window. It uses no other third-party scripts.

Purchases

Boli (cowry shells) and the Liberators' Pack can be bought with real money: in the app through Google Play, or on this website by bank transfer. For a website order you may send us the transfer slip on Viber or WhatsApp: only the shop owner sees it, only to confirm your payment, and it is not stored on this website; Viber's and WhatsApp's own privacy policies cover those apps. Single items are bought with boli in the game. Google's privacy policy covers payments made in Google Play; your bank's terms cover your transfer.

Beta testers

The beta sign-up collects your Google account's email for one purpose: to add you to the tester list of Mas Dhoani's test on Google Play, which is how Google Play lets you install the test version. Google Play then handles your participation under Google's own policies. We may send you one email about the test. Your sign-up and email are deleted when you leave the list (one tap on the beta page) or when testing ends. To leave the test on Google Play itself, use the opt-in page there.

Phone backups

If backup is switched on on your phone, Android may copy the app's data (your save, and your sign-in so you stay signed in on a new phone) to your own Google account. Google runs this backup; we cannot see it.

Feel Lab (testers only)

Invited testers may also use "MD Feel Lab", a separate test app. Its "Phone check" sends an anonymous summary to our server: a random install ID, the phone's make and model, Android and WebView versions, screen size and refresh rate, timing measurements and the tester's 1-5 answers. It has no name, account or player ID. We use it only to tune the game for real phones.

3. What other players can see

Your chosen name, name glow, level, scores, finds, ratings and boat in Mas Races are shown to other players on the online boards and in races. Please don't use your full real name, phone number or anything private as your game name. You can change your name in the game. Your orders are never shown to other players.

5. Who handles the data for us

We use these service providers. They process data only on our behalf, to run the game and the website:

So your data is processed outside the Maldives, in Singapore, India, the United States and Google's data centres. We do not sell or rent your data to anyone, and we do not share it with advertisers or data brokers. We would only disclose it if the law requires us to.

6. How long we keep it

7. Deleting your account and data

After a deletion, other players' match histories keep the match itself (so their ratings stay correct), but your name is removed and your player ID is replaced by an anonymous one. Purchase records and orders are kept without your account ID (section 6), and an order still waiting for payment is closed. Reports other players made about you keep the report, without your name or player ID. Deleting your account doesn't refund purchases, and boli or items bought are lost with it.

8. Your rights

You can ask us for a copy of your data, ask us to correct it (you can change your name yourself in the game) or delete it, or object to how we use it. Email admin@mvdigital.tools; we answer within 30 days. We may ask you to prove the account is yours, for example by signing in or by describing your game progress. You can also complain to a data protection authority where you live.

9. Children

Mas Dhoani is made for players aged 13 and over and is not directed at children. The game itself asks for nothing but a nickname. If you are under 18, ask a parent or guardian before buying anything. If you believe a child under 13 has given us personal data (for example a real name as a game name, or by signing in with Google), email us and we will delete it.

10. Security

Everything the app and the website send is encrypted in transit (HTTPS and secure WebSockets). The database can only be written through functions protected by a secret that only our server holds, and your Google sign-in is checked on our server with Google's public keys. Only the shop owner's Google account can confirm orders, and every confirmation is logged. No system is perfectly secure, but we limit what we keep so there is little to lose.

11. Changes to this policy

If we change this policy, we will update the date at the top. For important changes (for example new data, or new ways to buy), we will tell you in the game or on this website before the change applies.

12. Contact

MV Digital Tools, Maldives. Email: admin@mvdigital.tools.

ދިވެހި ބަހުން ކުރު ޚުލާސާއެއް

މަސްދޯނި ހަދައިފައިވަނީ އެމްވީ ޑިޖިޓަލް ޓޫލްސް އިންނެވެ. ސުވާލެއް ނުވަތަ އެދުމެއް އޮތްނަމަ admin@mvdigital.tools އަށް އީމެއިލް ކުރައްވާ.

  • ގޭމް ކުޅުމަށް ސައިން އިން ވުން ލާޒިމެއް ނޫނެވެ. ފުރަތަމަ ފަހަރަށް ގޭމް އޮންލައިން ވުމުން، ނަމެއް ނުވަތަ އީމެއިލެއް ނެތް "ގެސްޓް" އެކައުންޓެއް އަމިއްލައަށް ހެދޭނެއެވެ.
  • ތިބާ ހޮވާ ނަމާއި، ލެވެލް، ސްކޯ، ހިފި މަހުގެ އަދަދުތަކާއި މާވަހަރު ފެނުނުކަން، ރޭންކިންގް ބޯޑުތަކުގައި އެހެން ކުޅުންތެރިންނަށް ފެންނާނެއެވެ. އެހެންކަމުން، ގޭމްގެ ނަމުގައި ތިބާގެ ފުރިހަމަ ނަމާއި ފޯނު ނަންބަރު ފަދަ މަޢުލޫމާތު ނުލިޔުއްވާ.
  • ގޫގަލް އިން ސައިން އިން ވެއްޖެނަމަ، ގޭމްގައި ކުރިއަރާފައިވާ މިންވަރު (ސޭވް) ގޭމްގެ ސާވަރާއި ޑޭޓާބޭސްގައި ރައްކާކުރެވޭނެއެވެ. ގޫގަލް އެކައުންޓުގެ ނަމާއި އީމެއިލް ރައްކާކުރަނީ ގޫގަލްގެ ފަޔަރބޭސް ސައިން އިން ޚިދުމަތުގައެވެ. ގޭމްގެ ޑޭޓާބޭސްގައި އެ ރައްކާއެއް ނުކުރެއެވެ.
  • މަސް ރޭސްގައި ބައިވެރިވާއިރު، ފޯނުގެ މޮޑެލާއި ޓެޕްކުރާ ވަގުތުތައް ސާވަރަށް ފޮނުވެއެވެ. އެ ބޭނުންކުރަނީ ރޭސް އިންސާފުވެރިކޮށް ބެލެހެއްޓުމަށެވެ.
  • ސާވަރަށް ގުޅޭއިރު ތިބާގެ އައި.ޕީ. އެޑްރެސް ފެނެއެވެ. އެ ބޭނުންކުރަނީ ހަމައެކަނި ސާވަރު ރައްކާތެރިކުރުމަށެވެ. ގޭމްގެ ސާވަރު އެ ރައްކާއެއް ނުކުރެއެވެ.
  • ގޭމްގައި އިޝްތިހާރެއް ނެތެވެ. ޓްރެކިންގއެއް ނުކުރެއެވެ. ތިބާގެ މަޢުލޫމާތު އެއްވެސް ފަރާތަކަށް ނުވިއްކަމެވެ.
  • ތިބާގެ އެކައުންޓާއި ޑޭޓާ ފޮހެލުމަށް: ގޭމްގެ Settings > Account > Delete my account، ނުވަތަ މި ޞަފްޙާ، ނުވަތަ އީމެއިލް ކުރައްވާ.
  • މި ގޭމަކީ 13 އަހަރުން ދަށުގެ ކުދިންނަށް ޚާއްޞަކޮށްގެން ހަދާފައިވާ ގޭމެއް ނޫނެވެ.

މި ޚުލާސާއަކީ އިނގިރޭސި ބަހުން ލިޔެވިފައިވާ ސިޔާސަތުގެ ކުރު ތަރުޖަމާއެކެވެ. ދެ ބަހުގެ މާނައިގައި ތަފާތެއް އޮތްނަމަ، އިނގިރޭސި ބަހުން ލިޔެވިފައިވާ ގޮތަށް ޢަމަލުކުރެވޭނެއެވެ.