Rally Studio legal

Privacy Policy

This page is provided for Rally! users and visitors to rallystudio.ae.

Rally! Trivia - Privacy Policy

Published by Rally Studio | support@rallystudio.ae | rallystudio.ae

PRIVACY POLICY

Effective Date: 19 May 2026

This Privacy Policy explains how Rally Studio (“we,” “us,” or “our”) collects, uses, and shares information when you use the Rally! Trivia mobile application (“the App”). By using the App, you agree to the practices described in this policy.

1. Who We Are

The App is developed and operated by Rally Studio, based in the United Arab Emirates. For any privacy-related queries, contact us at: support@rallystudio.ae.

2. Information We Collect

2.1 Information You Provide (Optional)

We collect information only when you choose to provide it. This may include:

Email address (when you create an account)

Display name or username

Profile photo (if you choose to upload one)

Date of birth and gender (optional profile fields)

Email address is required for account creation. All other fields are optional. We do not require any personal information to use basic App features.

2.2 Information Collected Automatically

When you use the App, we and our third-party service providers automatically collect:

Device type, operating system, and version

App version and session duration

Gameplay data (scores, XP, achievement progress, categories played, game modes)

Crash reports and error logs (via Sentry)

General usage analytics (via Firebase Analytics — Google)

Push notification device token (if you grant notification permission)

IP address and general location region (collected by Firebase infrastructure)

This data is used to improve App performance, diagnose bugs, and understand feature usage. Some of this data is collected by third-party services operating under their own privacy policies — see Section 4.

2.3 Payment Information

All in-app purchases are processed through Apple’s App Store. We do not collect, store, or have access to your payment card details at any time. Purchase records are managed by Apple and RevenueCat solely to verify your entitlements within the App.

2.4 Website Information

Our website, rallystudio.ae, is used to provide information about the App, display app download links, publish legal policies, and provide support contact details. If you contact us through the website or by email, we may collect the information you choose to provide, such as your email address, name, and message content, so we can respond to your request.

The website may be hosted or maintained through third-party hosting and website tools, which may process basic technical information such as IP address, browser type, device information, pages visited, and general usage logs for security, performance, analytics, and troubleshooting purposes. We do not use the website to sell personal data or share personal data for third-party advertising.

If we later add website analytics, contact forms, cookies, newsletters, or similar features, we may update this Privacy Policy to explain the additional data collection and choices available to you.

3. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account

To personalise your in-app experience (themes, avatar, level, XP)

To process and verify in-app purchases and restore them across devices

To diagnose technical issues and fix bugs

To understand how users interact with the App so we can improve it

To send push notifications for game invites and app updates (only if you grant permission)

To send important service-related communications (e.g. account security)

To comply with legal obligations

We do not sell your personal data for our own commercial gain, and we do not share it for third-party advertising purposes.

Important: The App relies on third-party infrastructure — most notably Google (Firebase) — which processes certain data under its own terms and privacy policy. Google may collect and use data in accordance with its own practices beyond our direct control. We encourage you to review the third-party policies listed in Section 4.

4. Third-Party Services and Data Processors

The App uses the following third-party services. Each acts as an independent data processor or controller under its own terms. By using the App, you acknowledge that data is shared with these providers as necessary for the App to function:

Google — Firebase (Auth, Firestore, Analytics, Cloud Functions)

Firebase is our primary backend infrastructure. It handles user authentication, real-time database storage, server-side game logic, and usage analytics. Google processes this data under its own terms. Google may use aggregated or anonymised service-usage data to improve its own products.

Data Processing Terms: https://firebase.google.com/support/privacy

RevenueCat — In-App Purchase Management

RevenueCat tracks purchase entitlements so your premium content is restored when you reinstall or switch devices. It receives your App Store receipt and purchase identifiers.

Sentry — Error and Crash Reporting

Sentry receives crash reports and error logs, which may include device information and the state of the app at the time of a crash. No personally identifiable information is deliberately included in crash reports.

Apple App Store — Payment Processing & Distribution

All real-money transactions are handled by Apple. We do not receive or store your payment card details.

Expo — Push Notification Delivery

If you grant notification permission, Expo’s push notification service is used to deliver game invites and announcements. Expo stores your device push token temporarily to route notifications.

We share only the minimum data necessary for each service to function. We do not authorise any of these providers to use your data for their own marketing toward you beyond what is described in their own privacy policies.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete your personal data from our systems within 30 days, except where we are required by law to retain it for longer.

Anonymised, aggregated analytics data may be retained indefinitely to help us understand usage trends. Data held by third-party providers (e.g. Google Firebase) is subject to their own retention schedules.

6. Your Rights

6.1 All Users

Access: You can request a copy of the personal data we hold about you.

Correction: You can update your profile information at any time within the App.

Deletion: You can delete your account via App settings or by contacting us at support@rallystudio.ae.

Portability: You can request a copy of your data in a portable format.

6.2 EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

Our legal bases for processing your data are: (a) contract performance — to provide you the App and its features; (b) legitimate interests — to improve the App and ensure security; and (c) consent — for optional data you choose to provide and for push notifications.

Please be aware that Google (Firebase), as a data processor, operates data centres globally. International data transfers by Google are governed by Standard Contractual Clauses and Google’s Data Processing Addendum, which are designed to meet GDPR transfer requirements.

6.3 US Users (COPPA)

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, please contact us at support@rallystudio.ae and we will delete it promptly.

6.4 UAE Users

We comply with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection. You have the right to access, correct, and request deletion of your personal data by contacting us at support@rallystudio.ae.

7. Data Security

We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)

Firebase Authentication for secure account access

Restricted access to personal data — only authorised personnel

Regular security reviews of our codebase and infrastructure

While we take every precaution, no system is completely secure. We encourage you to use a strong password and keep your account credentials private.

8. Children’s Privacy

The App is intended for users aged 13 and over. Users under 13 are not permitted to create accounts or make purchases. In-app purchases require parental approval through Apple’s Family Sharing and Ask to Buy features. If you are a parent or guardian and believe your child has created an account, please contact us at support@rallystudio.ae.

9. International Data Transfers

Your data may be stored and processed on servers located outside the UAE, including in the United States and the European Union, through our use of Firebase (Google). These transfers are made under Google’s Standard Contractual Clauses and applicable data protection laws.

By using the App, you acknowledge that your data will be transferred to and processed in countries that may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the App. Continued use of the App after changes are posted constitutes your acceptance of the revised policy.

11. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us:

Rally Studio

Email: support@rallystudio.ae

Website: rallystudio.ae

Location: United Arab Emirates