Privacy Policy

Last updated: July 25, 2025

Rivalto ("we", "our", or "us") is operated by Gino Falcone. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service"). Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

1. Information We Collect

We collect the following types of information:

Account information: username, email address, and profile photo (optional) when you register.
Usage data: habit completions, streaks, XP, duel results, milestone badges, and app interactions.
Device information: device type, operating system, and app version for diagnostic purposes.
Payment information: if you subscribe to Premium or Circle Host, payment is processed by Apple App Store or Google Play. We do not store credit card numbers or payment details on our servers.

2. How We Use Your Information

To create and manage your account.
To operate core app features: habit tracking, duel matchmaking, XP progression, and social feeds.
To send transactional emails (e.g., OTP verification, duel results, milestone alerts) via Resend.
To improve the Service through aggregate, anonymized analytics.
To respond to support requests sent to support@rivalto.app.

3. How We Share Your Information

We do not sell your personal information. We may share data with:

Supabase: our database and authentication provider (data stored in the EU/US).
Resend: transactional email delivery.
Apple / Google: for in-app purchase and subscription management.
RevenueCat: for subscription status management across platforms.
Law enforcement: if required by applicable law or valid legal process.

No other third parties receive your personal data.

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

5. Your Rights & Data Deletion

You have the right to:

Access the personal data we hold about you.
Request correction of inaccurate data.
Request deletion of your account and associated data.
Opt out of non-transactional communications.

To exercise any of these rights, contact us at support@rivalto.app. We will respond within 30 days.

6. Children's Privacy

Rivalto is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at support@rivalto.app and we will delete it promptly.

7. Security

We use industry-standard security measures including encrypted connections (HTTPS/TLS), secure authentication (Supabase Auth), and row-level security on all database tables. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Continued use of the Service after changes constitutes acceptance of the revised policy.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at: support@rivalto.app