RYVLS privacy

What this covers

The RYVLS app and the pages on this site. It says what is kept, why it is kept and how long for. It is written to be read, so where a term has a plain word, the plain word is used.

What the camera does

No video and no photographs leave your phone. Frames are read on the device to count the repetitions and are thrown away as they go, and the counting works with the connection switched off.

One thing does get sent. When a set would take a record, the last fifteen seconds go up as a list of body points: a stick figure, not a picture, with no face and no background in it. It is there so a person can check a record before it stands, and it is thrown away once that is done.

What is kept about you

Your account

Email address, username, display name and the picture you chose

Your play

Attempts with their count, their length and the version that counted them, and the records they set

Where you were

The position of your phone at the start and the end of an attempt, to check you were at the spot

A record, checked

The last fifteen seconds of a set as body points, and only for a set that would take a record

Your device

A notification token and the time zone it is in, so that nothing arrives in the middle of your night

What other people see

Your username, your display name and your picture
The records you hold, the spots and districts that follow from them, and the badges you earned
The moment a record changed hands, in the activity feed and on the page of that place

Who else handles it

Four, and that is the whole list.

Resend

Sends the mail. It gets the address a login code is going to, and the code that is in it

OpenAI

Makes the spoken counting cues. It gets the sentence to be said and nothing else: no recording, no body points, nothing that says who asked for it

Laravel Cloud

Runs the app and holds the database, in Frankfurt, inside the European Union

Apple and Google

Their own accounts and their own listings. What happens inside a store happens under their terms and not these

Resend and OpenAI are American companies, so a mail address and a sentence to be spoken leave the European Union. Everything else stays in Frankfurt. [The agreement each of those two transfers rests on goes here.]

How long it is kept

A count, a time, a challenge and a spot stay for as long as your account does, because a leaderboard without its history is not a leaderboard. Everything else has a date on it. A job runs every night and does the forgetting, so none of this waits on somebody remembering.

The body points behind a record: thirty days after it was settled
Where exactly you stood, and how accurately: ninety days, after which it becomes the position of the spot itself
Which phone it was and which version of the app: a year
An attempt that was rejected: a year
A login code: a day, although it stops working after ten minutes
A notification token nobody has used: a year
The log that keeps you from getting the same message twice: thirty days
A report that has been dealt with: a year

Ending your account

In the app: Settings, Account, Delete account. Without the app: the page for it. Your account and everything on it goes. The sets themselves stay on the board as numbers with no name attached, which that page explains in full before you start.

Asking us something

RYVLS is made by OnlineChamp, a sole trader at Weidemaat 48 in Meppel, the Netherlands, registered with the Chamber of Commerce under 61094633. That is who decides what happens with everything on this page. Write to support@ryvls.app and a person reads it. If the answer is not good enough, you can take it to the Autoriteit Persoonsgegevens, which is the Dutch data protection authority.

Anything in square brackets is where the reviewed wording goes. This page is the shape of it, not the text of it.