This policy is a practical template based on the described Rivalio architecture. Review it against the exact SDKs and data flows in the production build before publication.
1. Overview
Rivalio (“Rivalio,” “we,” “us,” or “our”) is a football prediction and leaderboard application for iOS and Android. It is not a betting or gambling service. This Privacy Policy explains how information is collected, used, shared, and protected when you use the Rivalio mobile application, website, and related services.
2. Information we collect
Account and profile information
Depending on how you sign in, we may receive your name, email address, profile image, provider-specific user identifier, and authentication status from Google, Apple, Firebase Authentication, or anonymous authentication. We do not receive your Google or Apple account password.
Google user data
When you choose Google Sign-In, Rivalio requests only the basic information needed to create and operate your account, such as your name, email address, profile image, and Google account identifier. We use this information for authentication, account display, support, fraud prevention, and account management. We do not use Google user data for advertising, and we do not sell it.
Predictions and competition data
We collect match predictions, edits, timestamps, points, rankings, private-league memberships, invite activity, and related in-app actions required to provide the service.
Device, diagnostics, and usage data
We may collect device type, operating system, app version, language, approximate region, app interactions, performance information, crash logs, identifiers used for analytics, and diagnostic events. Depending on your device settings and consent, these may be processed through Firebase Analytics, Crashlytics, Performance Monitoring, and similar services.
Notifications
If you enable notifications, we collect a push notification token and notification preferences so that we can send match reminders, result updates, ranking changes, and service messages. You can disable notifications in the app or device settings.
Advertising data
If advertising is enabled, advertising providers such as Google AdMob may process device identifiers, ad interaction data, approximate location inferred from network information, and consent choices. Personalized advertising is used only where permitted and based on the consent options presented to you.
Support communications
When you contact us, we collect the information you provide, such as your email address, message, screenshots, and technical details needed to answer your request.
3. How we use information
We use information to authenticate users; provide fixtures, predictions, leagues, leaderboards, statistics, and notifications; synchronize and protect account data; calculate points and rankings; detect abuse and security incidents; troubleshoot crashes and performance problems; measure feature usage; deliver and measure advertising where enabled; comply with legal obligations; and communicate with users about support, privacy, safety, and service changes.
4. Service providers
We may use service providers that process information on our behalf, including Google Firebase services such as Authentication, Firestore, Cloud Functions, Cloud Messaging, Analytics, Crashlytics, Performance Monitoring, Remote Config, App Check, and Storage; Apple services such as Sign in with Apple, APNs, and App Store distribution; Google services such as Google Sign-In, Google Play, and AdMob; Expo services such as EAS Build, updates, and notification delivery; Resend for transactional email; and football-data.org and CollectAPI for server-side football fixtures and results.
Football data providers are contacted by our backend. Their API keys are not included in the mobile app, and users do not directly send personal account information to those providers through the app.
6. Data retention
We retain account and competition data for as long as needed to operate the service, maintain league history, resolve disputes, prevent abuse, and meet legal obligations. Diagnostic and analytics data may be retained according to the settings and retention periods of the applicable service provider. When an account is deleted, we delete or anonymize associated personal information unless retention is required for security, fraud prevention, legal compliance, or legitimate recordkeeping.
7. Your choices and rights
You may update profile information in the app, disable notifications through app or device settings, manage advertising consent where offered, sign out, or request account deletion. Where required by applicable law, you may request access, correction, deletion, restriction, portability, or objection regarding your personal information.
To request help or exercise a privacy right, email bbahcivan@developtica.com. We may need to verify your identity before completing a request.
8. Children’s privacy
Rivalio is not directed to children under the minimum digital-consent age that applies in their country. We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal information without appropriate permission, contact us so we can investigate and take appropriate action.
9. Security
We use technical and organizational measures designed to protect information, including authenticated access, server-side validation, encrypted network connections, access controls, secrets management, monitoring, and Firebase security features. No system can guarantee absolute security.
10. International data transfers
Our service providers may process information in countries other than your own. Where required, we rely on recognized transfer mechanisms and contractual or organizational safeguards. Service-provider locations and terms may change over time.
11. Changes to this policy
We may update this Privacy Policy as the app, legal requirements, or service providers change. We will update the “Last updated” date and provide additional notice when required.
12. Contact us
Questions or privacy requests can be sent to:
Rivalio
Email: bbahcivan@developtica.com
Website: https://rivalio.dpca.io/