Privacy Policy
This Privacy Policy explains how we collect, use, store, and share personal information when you use the RIVAL mobile application (“RIVAL”, the “App”) and related services (together, the “Services”). We are committed to protecting your privacy and being transparent about our practices.
Who we are
The data controller responsible for your personal information is Play The Future Ltd, a company registered in the United Kingdom. For privacy-related requests, contact us at privacy@playrival.app.
What we collect
We may collect the following categories of information, depending on how you use the Services:
- Account and contact data. When you create an account, we collect your mobile phone number. We use SMS one-time passcodes (“OTP”) delivered via our messaging provider (for example, Twilio) to verify your number and sign you in.
- Friend discovery from your address book (optional). If you choose to find friends from your device’s contacts, we ask for permission to access your address book. Phone numbers from your contacts are processed on your device (for example, normalised and cryptographically hashed), and those values are sent to our servers only to match you with people who already have RIVAL accounts. We use this solely to suggest connections; we do not use it for marketing, we do not sell it, and we do not build a contacts database for unrelated purposes. You can use RIVAL without using this feature or granting contacts access.
- Profile and gameplay data. We collect information you provide or generate in the App, such as usernames, profile details you choose to add, predictions, scores, leaderboard positions, match participation, in-game actions (including use of CHAOS Cards and similar features), and timestamps associated with gameplay events.
- Real-time session data. To power live rooms, leaderboards, and multiplayer-style experiences, we process session and presence-related data. Where we use services such as Supabase Realtime, relevant events may be transmitted in real time to deliver the experience you see in the App.
- Device and technical data. We may collect device identifiers, operating system version, App version, IP address, crash logs, and diagnostic data to operate, secure, and improve the Services.
- Analytics data. We use standard mobile analytics to understand how the App is used (for example, feature usage, funnels, and performance). We do not use your data to show third-party advertising in the App, and we do not sell your personal information.
- Support communications. If you contact us, we keep the content of your message and contact details so we can respond.
How we use your information
We use personal information for the following purposes:
- To create and authenticate your account, including sending SMS OTP codes for verification and login.
- To suggest friends who may already use RIVAL when you opt in to address-book discovery, using contact-derived data only for that matching purpose.
- To provide live gameplay, scoring, leaderboards, and social or competitive features tied to matches.
- To operate real-time features and synchronise state between you and other participants during a match.
- To maintain the security and integrity of the Services, detect abuse, and enforce our Terms of Use.
- To analyse usage and improve performance, reliability, and product experience.
- To communicate with you about the Services, including important notices where permitted by law.
- To comply with legal obligations and respond to lawful requests from public authorities.
Legal bases (UK / EEA)
Where UK GDPR or EU GDPR applies, we rely on one or more of the following legal bases: performance of a contract with you (providing the App); legitimate interests (for example, securing the Services, understanding aggregate usage, and improving the product — balanced against your rights); consent where required (for example, optional address-book friend discovery before contact-derived data is sent to our servers, certain analytics or marketing communications if we introduce them and ask for consent); and legal obligation where applicable.
Data sharing
We may share information with the following categories of recipients:
- Service providers who assist us in operating the App, such as cloud hosting, authentication, database and realtime infrastructure (for example, Supabase), SMS delivery (for example, Twilio), analytics, crash reporting, and customer support tools. They process data on our instructions and under contractual obligations.
- Other players, where necessary to display gameplay outcomes — for example, leaderboard rankings, usernames, and match-related scores visible within the App.
- Professional advisers, regulators, or law enforcement where required or permitted by law.
- Corporate transactions: if we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction, subject to appropriate safeguards.
We do not sell your personal information. We do not allow third parties to use your data for their own advertising across other apps or websites based on your activity in RIVAL.
International transfers
Your information may be processed in the United Kingdom, the European Economic Area, the United States, or other countries where our providers operate. Where we transfer personal data from the UK or EEA to countries not recognised as providing adequate protection, we use appropriate safeguards such as the UK International Data Transfer Agreement / Addendum or EU Standard Contractual Clauses, as applicable.
Data retention
We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, unless a longer period is required by law. Account and gameplay records are typically kept while your account is active and for a reasonable period afterwards to resolve disputes, enforce agreements, and meet legal requirements. Logs and analytics may be retained in aggregated or pseudonymised form for longer periods. You may request deletion of your account subject to applicable law and legitimate retention needs.
Your rights
Depending on where you live, you may have rights to access, correct, delete, or restrict processing of your personal information, to data portability, to object to certain processing, and to withdraw consent where processing is based on consent. You may also have the right to lodge a complaint with a supervisory authority (in the UK, the Information Commissioner’s Office).
To exercise your rights, contact privacy@playrival.app. We may need to verify your identity before responding.
Security
We implement technical and organisational measures designed to protect personal information against unauthorised access, loss, or alteration. No method of transmission or storage is completely secure; we encourage you to use a strong device passcode and keep your phone number secure.
Children’s privacy
RIVAL is not intended for children under 13 years of age, and we do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us and we will take steps to delete it promptly.
Changes
We may update this Privacy Policy from time to time. We will post the updated version in the App or on our website and adjust the effective date above. Where changes are material, we will provide additional notice as required by law.
Contact
Questions about this Policy or our privacy practices:
privacy@playrival.app
Play The Future Ltd — RIVAL