1. Information Collected
Ryval collects only the minimal data necessary for the use of the application and for users to connect with each other. We do not collect sensitive personal data. The data collected includes:
- Email Address: Collected when the user creates their player profile. It is required to create the profile, log in, and also allows the user to access their account from other devices.
- Username: Users can set any name to identify themselves within the application; it does not need to be a real name. This information can be modified after the profile is created.
- Reference Location: Each user must select an approximate location where they are most likely to play, for the purpose of being found by other players. This location should not be personal, and it is recommended not to use private locations. The location is only a reference and is used exclusively within the context of the application. This information can also be modified after the profile is created.
- Usage Data: We collect information about how users interact with the application, such as most used features, frequency of use, length of sessions, days and times of use, device type and operating system version. This data is collected anonymously and is not linked to specific users. Analytical information is used only to improve the quality of the application and optimize functionality.
2. Methods of Data Collection
We collect information through forms within the mobile application. Email is collected when the user creates their player profile. Both the username and reference location can be changed after the profile is created. We do not use cookies, third party services that are not mentioned in this document, nor do we track users outside of the application. Usage data is collected only when users interact with the application; this data is completely anonymous and is not associated with any specific user.
3. Legal Basis for Data Processing
Consent is requested just before the user creates their player profile, where they explicitly accept having read this document and the terms of use. Once accepted, the user can proceed to create their profile. This consent is the legal basis for processing the information provided.
4. How We Use the Information
We use the collected information to connect players, optimize application features, and perform general analysis not linked to specific users, with the sole purpose of improving the user experience.
5. Third-Party Services
In our app, we use third-party services to provide key functionalities and improve certain technical aspects. These services operate in compliance with international data protection standards, such as the General Data Protection Regulation (GDPR), and implement measures like encryption and anonymization to safeguard user privacy. The legal basis for using these services includes legitimate interest to analyze and improve the application, as well as the necessity to ensure essential functionalities promised to users. Although we do not use these services for advertising purposes or cross-application tracking, we invite you to review each service's privacy policy for further details on how they handle data.
- Google Cloud Platform (GCP): We use GCP to manage databases, authenticate users, and store data securely. GCP ensures transmission and storage through encryption, complying with international data protection regulations such as the General Data Protection Regulation (GDPR). [Privacy Policy]
- Firebase Analytics: We use this service to analyze the general use of the application anonymously, with the the goal of improving its performance. We do not use this service for any kind of cross-app tracking or to identify users for advertising purposes. [Privacy Policy]
- Algolia: We use Algolia to allow users to find each other by name. Security measures are applied to protect privacy, and no commercial use of the searches is made. [Privacy Policy]
- Google Maps: We use Google Maps to provide an interface that allows users to select their reference location and display locations of nearby matches and teams. [Privacy Policy]
6. International Data Transfer
User data is stored on Google Cloud servers located in the United States. We implement all appropriate security measures to ensure the protection of stored information and comply with applicable international data protection regulations. For users residing in the European Union, data transfers are carried out in accordance with Article 46 of the General Data Protection Regulation (GDPR), under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring the protection and privacy of personal data. Google Cloud holds recognized certifications that ensure compliance with security and privacy standards. Users may request additional information regarding the specific location of the servers and the security measures implemented by contacting us via our support email contact@ryvalfc.com.
7. Information Security
We implement all necessary measures to protect the information provided by users:
- The information transmitted through the application is encrypted using services provided by Google Cloud Platform, Algolia, and Firebase.
- We use user authentication and authorization to prevent unauthorized access.
- Google Cloud Platform encrypts data both in transit and at rest to ensure information security.
- User messages in private and group chats are not end-to-end encrypted; we are working to improve this aspect in the future. No one is authorized to access these messages, and they are not treated or used for commercial purposes. There are no plans to change this policy in the future.
8. Data Retention
We retain user information while the account is active. Users have the right to modify or delete their information at any time from the application. When an account is deleted, all data is permanently erased from our systems.
9. User Rights
At Ryval, we respect and protect our users' rights regarding the processing of their personal data. Below, we outline the rights users can exercise and how they apply within the context of our application:
- Access and edit: Users can access and modify their personal information directly from the application.
- Deletion: Users can delete their account and all associated information at any time.
- Withdrawal of consent: Users can withdraw their consent for the use of their personal data by deleting their account. This means that no further processing of the provided information will occur.
- Right to data portability: Users have the right to request a copy of the data they have provided. However, in the case of Ryval, the only information collected is the email address, a name and reference location. This data only makes sense in the context of the application, and there are no sufficiently similar platforms to port this data to. Due to the limited nature of the collected information, no portability to other services is performed
- Right to file a complaint: If a user believes that the processing of their personal data violates data protection regulations, they have the right to file a complaint with a competent supervisory authority.
- Right to restrict processing and right to object to processing: Ryval does not process personal data or use the collected information for commercial, advertising, or profiling purposes. Therefore, it is not necessary to request restriction or exercise the right to object to data processing, as there is no processing that impacts users' privacy rights.
10. Use of Device Permissions
Ryval requests some device permissions only when necessary. Users always have control over these permissions and can revoke them from the device settings:
- Geolocation: It is used only when the user uses a feature that requires it, such as finding nearby players, teams or matches.
- Camera and Images: Permission is requested to access the phone's camera or images for the purpose of setting a profile picture or sharing it in conversations.
- Contacts: This permission is only required when the user wishes to share a contact in a conversation.
- Push Notifications: This is requested to notify about app updates, requests and messages from other users. Users can disable or customize notifications from the phone settings.
11. Local Data Storage
Ryval does not store personal information locally. Data stored locally is temporary and is limited to cache generated by Firebase to improve application efficiency.
12. Data Breach Policy
In the event of a data breach that may compromise users' personal information, we commit to notifying the relevant authority within 72 hours of detection. We will also inform affected users and take measures to mitigate any potential damage.
13. Changes to the Privacy Policy
We will update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify users of any significant changes through the application and update the date of the last revision.
14. Data Deletion and Procedures
Users can delete all their personal information from the app, and this deletion will be processed immediately. All account-related data will be permanently removed from our systems. If users need more information about the data deletion process or encounter difficulties deleting their account, they can refer to our Data Deletion Instructions. They can also contact us via our support email for further assistance: contact@ryvalfc.com.
15. Advertising and Marketing Data
Ryval does not use users' personal information for advertising purposes or for marketing analysis. We do not collect or share data with third parties for the purpose of cross-database marketing or generating marketing profiles.
16. Information for Minors
Ryval is not intended for users under the age of 13. We do not intentionally collect information from minors without appropriate consent.
17. Automated Processing and Decision Making
Ryval does not use automated algorithms to connect players. Contact between users occurs solely based on the reference location and phone geolocation of each user. There is no additional processing that may affect users' rights.
18. Access and Deletion of Data upon User Request
In addition to the options available in the application to delete an account or modify data, users can make specific requests to access or delete their data by contacting us directly via support email. To validate a request, users must provide their username, registered email address, and a clear description of the request. We respond to these requests in accordance with applicable regulations and ensure the complete deletion of data, where applicable.
19. Contact
If you have questions, concerns, or inquiries about this Privacy Policy or how we handle your personal data, you can contact us via the support email: contact@ryvalfc.com.