1. Introduction
RiskIT (the "App," the "Service," "we," "us," or "our") is a social party-game application operated by Israel Diaz, Founder and Developer of RiskIT, as an individual sole proprietor based in California, United States. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights and choices you have regarding your information.
This Policy applies to your use of the RiskIT mobile application and the website located at https://risk-it-app.com (together, the "Service"). By creating an account or using the Service, you acknowledge that you have read and understood this Privacy Policy. This Policy should be read together with our Terms of Service.
2. Definitions
- "Account" means the personal account you create to access RiskIT.
- "Personal Information" means information that identifies, relates to, or could reasonably be linked with you.
- "Stake" means a dare, challenge, or forfeit generated by our AI features or created by a user within the App.
- "Friend" means another RiskIT user you are connected with for the purpose of comparing scores on a leaderboard.
- "Service Provider" means a third-party company that processes information on our behalf, such as our hosting or subscription vendors.
- "Process" means any operation performed on Personal Information, such as collecting, storing, using, or deleting it.
3. Information We Collect
3.1 Information You Provide to Us
| Category | Examples | Why We Collect It |
|---|---|---|
| Account credentials | Email address and password | To create and secure your Account and let you sign in |
| Profile information | Display name, username, and profile picture | To personalize your Account and show you on friend leaderboards |
| Phone number | Mobile phone number | Account verification and security only (see Section 3.4) |
| User-created content | Stakes and challenges you write in the App | To provide gameplay features and store your custom content |
| Social connections | Friend requests you send and accept | To build your leaderboard and enable friend features |
| Reports and safety data | Reports you submit about other users, and users you block | To review reports, enforce our rules, and keep the community safe |
| Support communications | Emails and messages you send to support | To respond to your requests and provide customer support |
3.2 Information Collected Automatically
When you use the Service, we and our Service Providers automatically collect limited technical information, which may include a device identifier, app version, operating system version, general diagnostic and crash data, and basic usage information (such as which game modes are opened). This information helps us keep the App running, fix bugs, and understand how features are used.
3.3 Purchase Information
When you buy a RiskIT Premium subscription, the purchase is processed by Apple through the App Store using Apple In-App Purchase. We do not receive or store your full payment card number. We receive a purchase receipt and subscription status from Apple and our subscription-management provider, RevenueCat, so that we can unlock and maintain your Premium features. See our Subscription Terms for details.
3.4 A Note About Your Phone Number
4. How We Use Information
We use the information described above to:
- Create, operate, secure, and maintain your Account and the Service;
- Provide gameplay, including AI-generated and user-created Stakes and our pass-the-phone game modes;
- Display friend leaderboards and process friend requests you send or accept;
- Process and manage your Premium subscription through Apple and RevenueCat;
- Review reports, enforce our Community Guidelines, and take safety and moderation action, including blocking;
- Send you service-related notifications and, where you have not opted out, push notifications;
- Send marketing or promotional emails, from which you may opt out at any time (see Section 10);
- Diagnose problems, prevent fraud and abuse, and improve the Service; and
- Comply with legal obligations and enforce our agreements.
5. Legal Bases for Processing (GDPR)
Although RiskIT launches in the United States only, where the EU General Data Protection Regulation ("GDPR") or the UK GDPR applies to you, we rely on the following legal bases to process your Personal Information: (a) performance of a contract, to provide the Service you request; (b) legitimate interests, such as securing the Service, preventing abuse, and improving our features, provided these interests are not overridden by your rights; (c) consent, for example for marketing emails and push notifications, which you may withdraw at any time; and (d) legal obligation, where processing is required by law.
6. Service Providers
We rely on a small number of trusted third-party providers to operate RiskIT. These providers process information only on our instructions and under agreements that require them to protect your information.
| Provider | Role | Information Involved |
|---|---|---|
| Supabase | Cloud database, authentication, and file storage | Account credentials, profile information, profile pictures, user-created content, friend and safety data |
| RevenueCat | Subscription management and receipt validation | Purchase receipts, subscription status, and an app-generated user identifier |
| Apple (App Store) | App distribution, In-App Purchases, and push notification delivery | Purchase and subscription data; push notification tokens |
Each provider maintains its own privacy practices. We encourage you to review Apple's, Supabase's, and RevenueCat's privacy policies for information about their handling of data.
7. How We Share Information
We do not sell your Personal Information, and we do not share it for cross-context behavioral advertising. We share information only in these limited circumstances:
- With Service Providers, as described in Section 6, to operate the Service;
- With other users, limited to your public profile (display name, username, and profile picture) and your position on leaderboards you share with Friends;
- For safety and legal reasons, when we believe disclosure is reasonably necessary to comply with law, enforce our Terms of Service, or protect the rights, safety, or property of any person; and
- In a business transfer, if RiskIT is involved in a merger, acquisition, or sale of assets, subject to this Policy.
8. Data Retention
We keep your Personal Information for as long as your Account is active or as needed to provide the Service. When you delete your Account (see Section 11), we delete or de-identify your Personal Information within a reasonable period, except where we are required or permitted to retain certain information to comply with legal obligations, resolve disputes, prevent fraud or abuse, or enforce our agreements.
9. Data Security
We use administrative and technical safeguards designed to protect your information, including encrypted transmission, access controls, and the security features provided by Supabase and Apple. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your password confidential.
10. Your Choices & Controls
- Profile: You can edit your display name, username, and profile picture in the App at any time.
- Push notifications: You can enable or disable push notifications in your device settings.
- Marketing emails: Every marketing email includes an unsubscribe link, and you may opt out at any time. We will still send you essential service messages (for example, security or billing notices).
- Blocking and reporting: You can block or report other users directly in the App.
- Access and correction: You may contact us to access or correct your Personal Information.
11. Account & Data Deletion
12. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), gives you the following rights:
- Right to know what Personal Information we collect, use, and disclose;
- Right to access a copy of the Personal Information we hold about you;
- Right to delete the Personal Information we have collected from you, subject to legal exceptions;
- Right to correct inaccurate Personal Information;
- Right to opt out of the "sale" or "sharing" of Personal Information; and
- Right to non-discrimination for exercising your privacy rights.
We do not sell or share your Personal Information as those terms are defined under the CCPA/CPRA, and we do not knowingly process the Personal Information of consumers under 16 for sale or sharing. To exercise any of these rights, email support@risk-it-app.com. We will verify your request using the email address associated with your Account and respond as required by law. You may use an authorized agent to submit a request on your behalf, subject to verification.
13. European Privacy Rights (GDPR)
Where the GDPR or UK GDPR applies to you, you have the right to access, correct, delete, restrict, or object to our processing of your Personal Information; the right to data portability; and the right to withdraw consent at any time. You also have the right to lodge a complaint with your local data protection authority. To exercise these rights, contact us at support@risk-it-app.com.
14. Age Requirement
RiskIT is intended for users who are 17 years of age or older. The Service is not directed to children, and we do not knowingly collect Personal Information from anyone under 17. If we learn that we have collected Personal Information from a person under 17, we will delete it. If you believe a person under 17 has provided us with Personal Information, please contact support@risk-it-app.com.
15. Where We Operate
RiskIT is offered in the United States only and our information is processed in the United States. If you access the Service from outside the United States, you do so on your own initiative and are responsible for compliance with local laws.
16. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last Updated" date above and, where appropriate, provide additional notice through the App or by email. Your continued use of the Service after an update means you accept the revised Policy.
17. Contact Us
If you have questions about this Privacy Policy or your Personal Information, contact:
RiskIT
Israel Diaz, Founder & Developer
Email: support@risk-it-app.com
Website: https://risk-it-app.com