Privacy Policy

Daily Rival is a daily game you play against your friends. This page says what we store about you, why, who else sees it, and how to delete it. In effect from 2026-11-01.

1. Who is responsible

Daily Rival is published by Federico Romiti, Carrer de Martí 8, piso 1, puerta 1, 46005 Valencia, Spain (“we”). We decide how your personal data is used, which makes us the “controller” under data-protection law.

For anything about your data, write to support@playdailyrival.com.

2. What we store

Your account:

• your email address, used only to sign you in with a one-time code
• the display name, avatar emoji and colour you choose
• your time zone and reminder settings

What you do in the game:

• the groups you are in, when you joined and left them, and the invite codes you created
• each attempt, in your groups’ rounds, the Daily and bonus rounds: when it started and ended, the moves you made, and the result (score and your answers, including in some games the guesses the game turned down and the first answer you typed)
• your streak, the reactions you leave on results, and any reports you send us
• which missed rounds and bonus rounds you unlocked with an ad, including the ad network’s reference for that reward

On your device only: your preferences (sound, haptics, motion, sharing), your sign-in session, and the reminder notifications, which are scheduled by your phone and never pass through our servers.

When something goes wrong: if the app hits an error while you are signed in, it sends us the error message, where in the app it happened, the app version and your platform (iOS, Android or web), linked to your account. We keep these for 90 days to fix bugs.

We do not ask for your contacts, location, photos, microphone or camera, and the app contains no analytics or tracking tools of our own.

3. What other players see

Groups are private: only people with a group’s invite code can join it. Members of a group you are in can see your display name and avatar, your streak, whether you have played a round, your score and answers once they have played that round themselves (or it has ended), and your reactions.

Someone who opens an invite link sees the group’s name, emoji and number of members before joining, nothing about you.

The Daily is one round that every player gets. Other players only ever see counts from it (how many people have played and how their score compares), never your name, avatar, score or answers. Bonus rounds are visible only to you.

If you leave a group, your past results stay on its board. If you delete your account, they are removed.

4. Ads (mobile app)

If you choose to play a round you missed, or the daily bonus round, the mobile app shows one video ad from Google AdMob. Nothing in Daily Rival shows ads otherwise, and the web version shows none.

To show the ad and measure it, Google’s software in the app collects data from your device: its advertising identifier (if you allow it), IP address and the approximate location that can be derived from it, device and app information, and how you interact with the ad. Google uses this as described in its own privacy policy (policies.google.com/privacy) and at business.safety.google/privacy.

We send Google two things with the ad request: your account’s internal id and the id of the round you are unlocking. Google sends them back to our server once you have watched the ad, which is how the round is unlocked. We never send Google your email address, name or scores.

Your choices: in the EEA, the UK and Switzerland the app asks for your consent before the first ad, and you can change it at any time under Profile → Ad privacy choices. On iPhone, Apple also asks whether the app may track you; you can change that in Settings → Privacy & Security → Tracking. If you say no, you still get ads, just not personalised ones.

5. Why we use your data

• To provide the game you signed up for (running your account, your groups, rounds, scores and boards): this is necessary for our contract with you.
• To keep the game fair and working (checking moves on the server, rate limits, error reports, handling reports about players): this is our legitimate interest in a secure, fair service.
• To grade the questions (in OUTLIER and HIVEMIND, how rare an answer is comes from how many players give it): we count answers across all players, without names or account ids, and only keep a typed answer in those counts when at least three players gave it. This is our legitimate interest in fair, accurate questions.
• To show personalised ads and, on iPhone, to use your advertising identifier: only with your consent, which you can withdraw at any time.
• To comply with the law, where it requires us to keep or disclose something.

We do not sell your personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.

6. Who processes it for us

• Supabase (database, sign-in and server functions). Your data is stored in Ireland (EU), on Supabase (AWS eu-west-1).
• Resend (delivers the sign-in emails, so it processes your email address).
• Google AdMob (ads in the mobile app, as described above). Google acts on its own responsibility for the data its software collects.
• Apple and Google distribute the app and may collect data about your download and device under their own policies.

Some of these companies are based in the United States or process data there. Where personal data leaves the European Economic Area, it is covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

7. How long we keep it

• Your account and game data: until you delete your account.
• Error reports: 90 days.
• Reports about players: up to 12 months after they are closed.
• Backups: deleted data can remain in encrypted backups for up to 30 days before it is overwritten.

8. Your choices and rights

In the app you can change your name, avatar and reminder settings (Profile), leave any group (group settings), and delete your account (Profile → Delete account). Deleting your account removes your profile, memberships, attempts, results and reactions straight away; it cannot be undone.

You also have the right to ask us for a copy of your data, to have it corrected, to have it erased or its use restricted, to receive it in a portable format, and to object to uses based on our legitimate interests. Write to support@playdailyrival.com; we answer within one month.

If you believe we have handled your data unlawfully, you can complain to the data-protection authority of the country where you live.

9. Children

Daily Rival is not for children. You must be at least 16 years old to create an account. If you believe a younger child has given us data, write to support@playdailyrival.com and we will delete it.

10. Security

Data travels encrypted between the app and our servers. Answers and scores are checked on the server, and the database only lets a signed-in player read what the game shows them. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

11. Changes to this policy

If we change how we use your data, we update this page and its date. For changes that matter, we tell you in the app before they take effect.

12. Contact

Federico Romiti, Carrer de Martí 8, piso 1, puerta 1, 46005 Valencia, Spain. Email: support@playdailyrival.com.