Privacy Policy

Last updated: May 18, 2026

1. Introduction

This Privacy Policy describes how RRingo ("we", "us", "our") collects, uses, stores, and discloses information about you when you use the RRingo mobile apps, web app, and related services (collectively, the "Service"). RRingo is a free, real-time multiplayer Housie/Tambola social game. There is no real money, no deposits, and no withdrawals.

By creating an account or using the Service, you agree to this Privacy Policy. If you do not agree, do not use the Service.

2. Information We Collect

2.1 Information you give us

  • Account profile: email address, display name, password (hashed), and optional avatar.
  • Group membership data: which groups you belong to, your role in each (player, organiser, admin), and invite codes you redeem.
  • Game participation: tickets you play, numbers called and auto-marked on your tickets, claims you submit, wins you earn, and the in-game events recorded for fairness audits.
  • Communications: messages you send to support, feedback you submit, and bug reports.

2.2 Information collected automatically

  • Device information: device model, operating system version, app version, and a stable device identifier.
  • Push-notification tokens: an opaque identifier from Apple Push Notification Service or Firebase Cloud Messaging so we can notify you about game starts and wins.
  • IP address: used for security, abuse prevention, and basic diagnostics. IPs are not used to track you across sessions.
  • Usage telemetry: screens viewed, taps, and events such as tickets played, claims submitted, and games joined.

2.3 Information from third parties

  • Social sign-in: if you sign in with Google or Apple, we receive your name, email, and a unique provider ID — nothing else.

3. How We Use Your Information

We use the information we collect to:

  • Provide the Service — create your account, generate Housie tickets, validate claims, and record wins.
  • Detect and prevent fraud, abuse, collusion, and cheating in live games.
  • Send transactional notifications (game start, prize won).
  • Send service notices (terms updates, security alerts).
  • Respond to your support requests and feedback.
  • Comply with applicable legal obligations.
  • Improve the Service — analyse aggregate usage, fix bugs, and ship new features.

4. Where Your Data Is Stored

RRingo uses the following infrastructure providers:

  • Supabase (PostgreSQL) hosted in US-East (Virginia) — primary database for accounts, groups, games, tickets, and game events. Encrypted at rest and in transit.
  • Firebase Hosting (Google Cloud) — serves the RRingo web app at rringo.web.app.
  • Apple Push Notification Service and Firebase Cloud Messaging — deliver push notifications to iOS and Android devices.

If you are located outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States. We rely on Standard Contractual Clauses and similar mechanisms where required for cross-border transfers.

5. Sharing Your Information

We do not sell your personal data. We share information only in the following limited circumstances:

  • Within a group: other members of a group you join can see your display name, avatar, and aggregate participation (games joined, prizes won). Winner names are masked to non-organisers (e.g. P***a S.) for privacy.
  • Service providers who process data on our behalf, including Supabase (database), Firebase (hosting and push), Sentry (crash reporting — planned), and Amplitude (product analytics — planned). Each is contractually bound to use your data only for the purposes we specify.
  • Legal compliance: when required by law, subpoena, or to protect the rights, property, or safety of RRingo, our users, or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, with the same protections as this Policy.

6. No Real Money

RRingo is a free social game. There is no real money involved at any point:

  • Tickets are free — there are no purchases, deposits, or withdrawals.
  • Prizes are in-app fun and bragging rights only; they have no cash value and cannot be cashed out.
  • We do not collect or store payment-card details for gameplay.
  • Wins are recorded server-side purely so leaderboards, stats, and fairness audits stay accurate.

7. Fair & Friendly Play

RRingo is designed for friendly, social play:

  • Number draws and claim validation happen server-side, so every round is fair.
  • Anti-collusion and anti-cheating checks protect the integrity of live games.
  • An immutable game-event log records every number called and every claim.

These controls persist server-side and keep games fair for everyone in the group.

8. Data Retention

We retain personal data for as long as your account is active and for the periods listed below:

  • Profile, group memberships: retained while your account is active; deleted (anonymised) on account closure — see Section 10.
  • Game participation history (tickets played, claims, wins, game events): retained for the lifetime of the group so historical games stay consistent for the other players; anonymised at the user level on account deletion.
  • Push tokens, session tokens: deleted on sign-out or token rotation, whichever is sooner.
  • Logs & crash reports: 90 days.

9. Your Rights

Depending on your jurisdiction (notably under GDPR, the UK Data Protection Act, and the California Consumer Privacy Act), you have the following rights:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to export — request a portable export of your data via Settings → Privacy → Export My Data. We email you a JSON file within 30 days.
  • Right to correction — update inaccurate data via Settings.
  • Right to deletion — request account deletion (see Section 10).
  • Right to object — to certain processing, including marketing communications.
  • Right to restrict — processing in certain circumstances.
  • Right to lodge a complaint — with your local data-protection authority.

To exercise these rights, email support@aspl.net. We respond within 30 days.

10. Account Deletion

You can delete your RRingo account at any time:

  • In-app: Settings → Account → Delete Account. The action requires biometric or password re-authentication.
  • By email: send a request from your registered email to support@aspl.net. We respond within 30 days.

On deletion we perform a soft delete that anonymises your personal data: we null out your email, display name, avatar, and push token, and set your account to a deleted state. You can no longer sign in. Historical game data and game events are retained in anonymised form so historical games stay consistent for the other players who participated. You can request a complete erasure where you have a legal right to one (e.g., a verified right-to-be-forgotten claim under GDPR).

See our Data Deletion page for a step-by-step guide.

11. Security

We protect your data with the following controls:

  • Encryption in transit (TLS) and at rest (AES-256).
  • Row-Level Security policies in PostgreSQL — players cannot read each other's tickets or claims.
  • Server-side validation of all game-state mutations.
  • Rate limiting on all sensitive endpoints (ticket generation, claim).
  • Biometric or password re-authentication for destructive identity actions (delete account, change email).
  • Point-in-Time Recovery on the production database.

No security system is perfect. If you believe your account has been compromised, contact support@aspl.net immediately.

12. Cookies & Local Storage

The RRingo web app uses cookies and browser local storage to:

  • Keep you signed in.
  • Remember your cookie-consent preference.
  • Cache static assets for performance.

The marketing website (this site) uses a single localStorage entry to record your cookie-banner acceptance. We do not use third-party advertising cookies. Analytics cookies (Amplitude — planned) will be opt-in where required by law.

13. Third-Party Services

RRingo integrates with the following third-party services. Each has its own privacy policy:

14. Children's Privacy

RRingo is a family-friendly game, but accounts are not directed at young children. We do not knowingly collect personal data from children under 13 (or the minimum age in your country). If you believe a child has provided us with personal data, contact support@aspl.net and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and through an in-app notice. The "Last updated" date at the top of this page reflects the current version. Continued use of the Service after a change constitutes acceptance.

16. Contact

If you have questions about this Privacy Policy or our practices, contact us at: