Rally Studio legal

Privacy Policy

This page is provided for Rally! users and visitors to rallystudio.ae.

Rally! Trivia - Privacy Policy

Published by Rally Studio | support@rallystudio.ae | rallystudio.ae

PRIVACY POLICY

Effective Date: 8 October 2026

This Privacy Policy explains how Rally Studio (“we,” “us,” or “our”) collects, uses, and shares information when you use the Rally! Trivia mobile application (“the App”).

1. Who We Are

The App is developed and operated by Rally Studio, based in the United Arab Emirates. For any privacy-related queries, contact us at: support@rallystudio.ae.

2. Information We Collect

2.1 Account and Profile Information

Information you provide when creating or using an account may include:

Email address (when you create an account)

Display name or username

Profile photo (if you choose to upload one)

An email address and username are required to create an account. A profile photo is optional. Some basic features may be available without an account. We do not ask for your date of birth.

If you upload a profile photo, it is temporarily processed by Google Cloud Vision to automatically screen for unsafe content (see Section 4) before it is shown to other players. Uploaded photos are not visible to other players until this screening completes.

2.2 Information Collected Automatically

When you use the App, we and our third-party service providers automatically collect:

Device type, operating system, and version

App version and session duration

Gameplay data (scores, XP, achievement progress, categories played, game modes)

Crash reports and error logs (via Sentry)

In-app usage events recorded in our Firebase database

Push notification device token (if you grant notification permission)

IP address and general location region (collected by Firebase infrastructure)

This data is used to improve App performance, diagnose bugs, and understand feature usage. Some of this data is collected by third-party services operating under their own privacy policies. See Section 4.

2.3 Online Play and Quick Chat

Online games use your account identifier, public profile details, game membership, scores, and activity to show lobbies, results, and player profiles to other players. Quick Chat lets players send only preset phrases, emoji, or a preset category choice in an online lobby or between questions. We store the sender’s account identifier, message identifier, optional category identifier, and send and expiry times in Firebase Firestore. Other players in that game can see the resulting message with your name and avatar. There is no free-text chat.

Quick Chat messages disappear from the game screen after a few seconds. Their database records are set to expire after 24 hours; deletion by the database’s expiry service may occur later. Turning Quick Chat off hides the button and incoming messages on your device. Blocking a player hides that player’s messages on your device, but does not remove them from the game for everyone else. We do not offer a permanent chat history in the App.

2.4 Payment Information

All in-app purchases are processed by the app store you downloaded the App from: Apple’s App Store on iOS, or Google Play (via Google Play Billing) on Android. We do not collect, store, or have access to your payment card details at any time. Purchase records are managed by Apple or Google, together with RevenueCat, solely to verify your entitlements within the App. Rally Points are an in-app reward, not a payment method, so no payment or financial data is involved in earning or spending them.

2.5 Website Information

Our website, rallystudio.ae, is used to provide information about the App, display app download links, publish legal policies, and provide support contact details. If you contact us through the website or by email, we may collect the information you choose to provide, such as your email address, name, and message content, so we can respond to your request.

The website may be hosted or maintained through third-party hosting and website tools, which may process basic technical information such as IP address, browser type, device information, pages visited, and general usage logs for security, performance, analytics, and troubleshooting purposes. We do not use the website to sell personal data or share personal data for third-party advertising.

The website has a support form. When you submit it, the details you enter are sent to our support email. The form also uses your IP address to limit repeated submissions. If we later add website analytics, cookies, newsletters, or similar features, we will update this Privacy Policy as appropriate.

3. How We Use Your Information

We use the information we collect for the following purposes:

To create and manage your account

To personalise your in-app experience (themes, avatar, level, XP)

To process and verify in-app purchases and restore them across devices

To run online games, display public player information, and deliver preset Quick Chat messages to game participants

To diagnose technical issues and fix bugs

To understand how users interact with the App so we can improve it

To send push notifications for game invites and app updates (only if you grant permission)

To send important service-related communications (e.g. account security)

To screen uploaded profile photos for unsafe content before they are shown to other players

To review reports submitted about other players and take moderation action (such as removing a photo, resetting a username, or suspending an account) where our rules are violated

To comply with legal obligations

We do not sell your personal data for our own commercial gain, and we do not share it for third-party advertising purposes.

Important: The App relies on third-party infrastructure, most notably Google (Firebase), which processes certain data under its own terms and privacy policy. Google may collect and use data in accordance with its own practices beyond our direct control. We encourage you to review the third-party policies listed in Section 4.

4. Third-Party Services and Data Processors

The App uses the following third-party services. Each acts as an independent data processor or controller under its own terms. By using the App, you acknowledge that data is shared with these providers as necessary for the App to function:

Google: Firebase (Authentication, Firestore, Storage, Cloud Functions)

Firebase is our primary backend infrastructure. It handles user authentication, real-time database and image storage, server-side game logic, and our in-app usage events. Google processes this data under its own terms.

Data Processing Terms: https://firebase.google.com/support/privacy

Google Cloud Vision: Profile Photo Moderation

If you upload a profile photo, it is sent to Google Cloud Vision for automated content-safety screening before it is made visible to other players. Google Cloud Vision processes the image to detect unsafe content categories; it does not receive your name, email address, or other account information alongside the image. Rejected photos are not shown to other players and are deleted.

RevenueCat: In-App Purchase Management

RevenueCat tracks purchase entitlements so your premium content is restored when you reinstall or switch devices. It receives your App Store receipt and purchase identifiers.

Sentry: Error and Crash Reporting

Sentry receives crash reports and error logs, which may include device information and the state of the app at the time of a crash. No personally identifiable information is deliberately included in crash reports.

Apple App Store: Payment Processing & Distribution (iOS)

All real-money transactions on iOS are handled by Apple. We do not receive or store your payment card details.

Google Play: Payment Processing & Distribution (Android)

All real-money transactions on Android are handled by Google through Google Play Billing. We do not receive or store your payment card details.

Expo: Push Notification Delivery

If you grant notification permission, Expo’s push notification service is used to deliver game invites and announcements. Expo stores your device push token temporarily to route notifications.

We share only the minimum data necessary for each service to function. We do not authorise any of these providers to use your data for their own marketing toward you beyond what is described in their own privacy policies.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we aim to delete or de-identify personal account data from our systems within 30 days, except where retention is necessary for legal obligations, security, fraud prevention, purchase verification, or dispute resolution. Game records may retain de-identified results. Quick Chat records have a 24-hour expiry setting, but database deletion is not instantaneous.

Anonymised, aggregated analytics data may be retained indefinitely to help us understand usage trends. Data held by third-party providers (e.g. Google Firebase) is subject to their own retention schedules.

6. Your Rights

6.1 All Users

Access: You can request a copy of the personal data we hold about you.

Correction: You can update your profile information at any time within the App.

Deletion: You can delete your account via App settings or by contacting us at support@rallystudio.ae.

Portability: You can request a copy of your data in a portable format.

6.2 EU/EEA Users (GDPR)

If you are located in the European Union or European Economic Area, you have additional rights under the General Data Protection Regulation (GDPR), including the right to object to processing, the right to restrict processing, and the right to lodge a complaint with your local data protection authority.

Our legal bases for processing your data are: (a) contract performance, to provide you the App and its features; (b) legitimate interests, to improve the App and ensure security; and (c) consent, for optional data you choose to provide and for push notifications.

Please be aware that Google (Firebase), as a data processor, operates data centres globally. International data transfers by Google are governed by Standard Contractual Clauses and Google’s Data Processing Addendum, which are designed to meet GDPR transfer requirements.

6.3 US Users (COPPA)

The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, please contact us at support@rallystudio.ae and we will delete it promptly.

6.4 UAE Users

If you are in the UAE, you may contact us at support@rallystudio.ae to exercise applicable rights under Federal Decree-Law No. 45 of 2021 on Personal Data Protection, including requests to access, correct, or delete personal data.

7. Data Security

We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)

Firebase Authentication for secure account access

Personal data access restricted to authorised personnel only

Regular security reviews of our codebase and infrastructure

While we take every precaution, no system is completely secure. We encourage you to use a strong password and keep your account credentials private.

8. Children’s Privacy

The App is intended for users aged 13 and over. Users under 13 are not permitted to create accounts or make purchases. We currently rely on the age representation made when using the App rather than collecting a date of birth. If you are a parent or guardian and believe a child under 13 has created an account, please contact us at support@rallystudio.ae. Parents and guardians can use their device’s purchase approval and parental control settings where available.

9. International Data Transfers

Your data may be stored and processed on servers located outside the UAE, including in the United States and the European Union, through our use of Firebase and other providers described above. We use the providers' applicable data protection terms and take account of the transfer rules that apply to us.

By using the App, you acknowledge that your data will be transferred to and processed in countries that may have different data protection laws than your country of residence.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. For significant changes affecting account holders, the App will display the updated notice with the Terms acceptance prompt before they continue using their account. The effective date above identifies this version.

11. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us:

Rally Studio

Email: support@rallystudio.ae

Website: rallystudio.ae

Location: United Arab Emirates