Privacy Policy — RVACH

Last updated: 2026-05-23

This Privacy Policy describes how RVACH ("the App", "we", "us", or "our") handles information when you use our mobile application on iOS. RVACH is a football prediction tournament app that lets you forecast match results, compete on global leaderboards, and run private leagues with friends. To make that work, we need a user account and a server-backed profile, so some of your data is stored in the cloud rather than only on your device.

By installing or using RVACH you agree to the practices described below. If you do not agree, please uninstall the App and request account deletion as described in section 9.

1. Who we are

RVACH is developed and operated by PYF App, an independent two-person iOS studio. For any privacy-related questions, requests, or complaints you can contact us at:

2. Summary at a glance

  • You need an account to use RVACH (Email/Password or Google Sign-In).
  • Your profile, predictions, leagues, achievements, and avatar are stored in our cloud backend (Google Firebase) so they can sync across devices and power leaderboards.
  • Your display name, avatar, and prediction history (after a match has finished) are visible to other users on leaderboards and inside leagues you join.
  • We use third-party services for authentication, cloud storage, crash reporting, and live football data.
  • We do not sell your personal data, we do not show ads, and the App contains no real-money betting.
  • You can delete your account and associated data at any time from the App or by emailing us.

3. Data we process

3.1 Information you provide directly

  • Account information — email address and password (if you sign up with Email/Password) or your basic Google profile (email, display name, photo URL) if you sign in with Google. Used to authenticate you and to identify your account across devices.
  • Profile information — display name (nickname), avatar image, and favourite team. Stored in our cloud database so it can be shown on leaderboards and inside leagues.
  • Predictions and gameplay — the scores and play-off winners you predict for each match, the points you earn, achievement progress, and prediction history. Stored in our cloud database so we can calculate your standings.
  • Leagues you create or join — league name, league settings, the 6-digit invite code, and the list of members. Stored in our cloud database so other members can see it.
  • Support correspondence — if you contact us via email or the in-app support link, we will receive your email address and the contents of your message in order to respond.

3.2 Information collected automatically

| Category | Examples | Purpose | | --- | --- | --- | | Identifiers | Firebase Authentication user ID (UID), internal user ID in Firestore | Associate your account with your data and across devices | | User content | Display name, avatar image, favourite team, predictions, league names, achievement state | Operate the prediction game, populate leaderboards and league pages | | Diagnostics | Crash logs, stack traces, app version, OS version, device model, build flavor | Detect, diagnose, and fix bugs and stability issues | | Technical metadata | Firestore timestamps, network metadata (IP address) processed by Firebase to handle your requests | Operate and secure the backend, prevent abuse |

We do not collect your real name, precise location, contacts, microphone audio, browsing history outside the App, government identifiers, health or financial information. We do not use third-party advertising SDKs and we do not track you across other companies' apps or websites.

The App requests access to your photo library and/or camera only when you choose to set or change your avatar. The selected image is uploaded to Firebase Storage and linked to your profile. No other photos are accessed or uploaded.

3.3 Live football data

Match fixtures, results, line-ups, and standings shown inside the App are fetched from API-Football via our Cloud Functions backend. This is public sports data and does not contain any information about you.

4. How we use the data

  • To operate the App — create and authenticate your account, store your predictions, calculate points, run leaderboards, manage leagues, and unlock achievements.
  • To enable social features — show your display name and avatar to other members of leagues you join and on global leaderboards; display your predictions to others after a match has finished.
  • To keep the App reliable — automatic crash and error reports through Firebase Crashlytics.
  • To respond to you — when you contact support.
  • To comply with the law — when we are required to keep or disclose information in response to a lawful request.

We do not use your data to build advertising profiles, and we do not run third-party advertising inside the App.

5. What other users can see

RVACH is a social prediction game. To make leaderboards and leagues work, the following information is visible to other users:

  • Your display name and avatar appear on global leaderboards and inside any league you join.
  • Your points, rank, and tier are visible to anyone on the corresponding leaderboard.
  • Your predictions for a match become visible to other users after the match has ended (so nobody can copy your forecast before kickoff).
  • The league name and the 6-digit invite code are visible to every member of that league.

Your email address and authentication details are never shown to other users.

6. Legal bases for processing (EEA / UK users)

  • Performance of a contract — to provide the App's core functionality (account, predictions, leaderboards, leagues).
  • Legitimate interests — to keep the App secure, stable, and improved, in a way that does not override your privacy rights (for example, crash reporting).
  • Consent — for optional permissions such as access to your photo library or camera when setting an avatar. You may withdraw consent at any time in your device settings.
  • Legal obligations — where we are required to retain records or respond to lawful requests.

7. Third-party services we use

We rely on the following processors. Each of them processes data under its own terms and privacy policy:

  • Google Firebase (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Crashlytics) — account management, database, file storage, server-side logic, and crash reporting, operated by Google. Firebase Privacy & Security.
  • Google Sign-In — optional sign-in provider. Google Privacy Policy.
  • API-Football (api-sports.io) — provides public football fixtures, results, line-ups, and standings. Only requests for public sports data are made; no personal data about you is shared with API-Football. API-Football Privacy Policy.
  • Apple App Store (iOS) — distributes the App and may process limited installation, update, and diagnostic information under its own policies.

These providers may process data on servers outside your country, including the United States and the European Union. They are contractually required to protect your data and to comply with applicable data-protection laws.

8. Data retention

  • Account and profile data (email, display name, avatar, favourite team) is retained for as long as your account exists.
  • Predictions, points, achievements, and league memberships are retained for as long as your account exists, so your history and leaderboards stay intact.
  • Avatar images in Firebase Storage are retained until you replace them or delete your account.
  • Crash reports are retained by Firebase Crashlytics for up to 90 days by default.
  • Backend logs (Cloud Functions and Firestore operational logs) are retained according to Google Cloud's default policies, typically up to 30 days.
  • Support emails are retained for as long as needed to address your request and for a reasonable period afterwards for reference.
  • When you delete your account, your personal data is removed from our active systems within a reasonable period; some information may persist in backups for a limited time before being overwritten.

9. How to delete your data

  • In-app: open the Profile screen and use the account deletion option to permanently delete your account, predictions, achievements, avatar, and league memberships.
  • By email: write to rvach.support@gmail.com from the address associated with your account and ask us to delete it. We will action the request within a reasonable timeframe.
  • Uninstalling the App alone does not delete your account — your data will remain in our cloud backend until you delete the account explicitly.

10. Your rights

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction or deletion of your personal data.
  • Object to or restrict certain processing.
  • Receive a portable copy of the data you provided.
  • Withdraw consent (where processing is based on consent).
  • Lodge a complaint with your local data-protection authority.

To exercise any of these rights, email us at rvach.support@gmail.com from the address associated with your account so we can verify your identity and locate the relevant records.

California residents (CCPA / CPRA)

We do not sell or share personal information for cross-context behavioral advertising. California residents have the right to know, delete, correct, and limit the use of their personal information, and to be free from discrimination for exercising these rights.

11. Children's privacy

RVACH is not directed at children under 13 (or under 16 in the EEA / UK). We do not knowingly collect personal data from children. If you believe a child has used the App and provided personal data, please contact us and we will delete the relevant records.

12. Security

We use industry-standard measures to protect data in transit (HTTPS / TLS) and at rest. Firestore and Cloud Storage are protected by security rules that prevent users from reading or modifying other users' private data. However, no method of electronic storage or transmission is 100% secure. You are responsible for keeping your device, OS, and store account secure and for not sharing your password.

13. International transfers

Our third-party processors are located in different countries, including the United States. Where personal data is transferred outside your country of residence, those providers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or comparable mechanisms.

14. Changes to this Policy

We may update this Privacy Policy from time to time. When we make material changes, we will revise the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of RVACH after the update means you accept the revised Policy.

15. End-User License Agreement

RVACH is licensed under Apple's Standard End-User License Agreement (EULA), available at apple.com/legal/internet-services/itunes/dev/stdeula. By installing the App, you agree to be bound by those terms.

Contact

Questions? Write to us: rvach.support@gmail.com.