Privacy policy

Nordisk Handel och Utveckling AB (Swedish company registration number 559065-4108) is the data controller for the processing of personal data in the Ravly app and on the website playravly.com. Contact us at support@playravly.com with any questions about your data.

• Contact form: name, email address, subject, your message and the time of submission.
• Newsletter: email address, your consent and the time of registration.
• Local storage: your choice in the cookie banner and your language choice are stored in your browser.

We never ask for national identity numbers, payment details or sensitive personal data through the website. The website uses no analytics and no advertising.

• To reply to you: legitimate interest in answering enquiries you submit yourself.
• Newsletter: your consent. You can withdraw it at any time by emailing support@playravly.com.
• Essential local storage: legitimate interest in keeping the website working and shown in the right language.

Contact messages and newsletter data are kept only for as long as they are needed for the purpose, and for no more than 24 months. Data is deleted earlier if you unsubscribe, withdraw your consent or request deletion, unless the law requires longer retention. This is our own retention rule for the website forms and is handled by us, not by an automatic job in the database.

The data is stored in a database at our provider Supabase. The website's form database is a separate database from the app's database. The forms on the website can only create new records; they cannot read existing data. Only an authorised administrator at our company can read and delete records. Data is not shared with third parties for marketing and is never sold. The form database's primary database is located in Ireland (region eu-west-1). The region refers to the primary database. The provider's support, security and sub-processor activities may take place in other countries.

No registration with email and password is needed to play. When the app starts, a technical user identity is created at our provider Supabase and a matching App User ID is sent to RevenueCat. The identity is used to link purchases, restored purchases and room membership to your installation. It does not contain your name or email address, but it is a pseudonymous identifier, not full anonymity.

The app's primary database is located in London, United Kingdom (region eu-west-2). The region refers to the primary database. Providers' support, security and sub-processor activities may take place in other countries, see section 11.

When you create or join a private room, Supabase processes the room code, the nickname you enter, room membership and the answers, votes and secret roles the game requires. Rooms are private and are not used for public profiles or matchmaking with strangers.

Rooms are removed by a scheduled job that runs every hour. The job deletes rooms whose validity has expired and rooms that have been ended for more than 24 hours. Active rooms extend their validity. We do not state a total retention period for all providers here.

Purchases are made through the App Store (and possibly Google Play in the future) under the store's terms. Ravly never receives card details or store passwords. RevenueCat processes purchase status, purchase history and transaction and user identifiers in order to unlock content, restore purchases, provide support and produce purchase statistics.

The pseudonymous purchase identity held at Supabase Auth and RevenueCat is kept for as long as it is needed for access to your purchases, restoring purchases, support or legal obligations. You can request deletion at support@playravly.com. Data that must be kept by law or as proof of a transaction may need to be retained.

Settings, favourites and local game data may be stored on your device. The content of rounds played in One phone mode is not sent to our room servers. The app may still communicate with our service providers at start-up, for purchases, restoring purchases and advertising.

Camera permission is only requested when you choose to scan a QR code to join a room. You can always enter the room code manually instead. The app does not use the microphone, contacts or precise location.

Ravly uses Google AdMob (Google Mobile Ads) for advertising in the mobile app. The app requests non-personalised full-screen ads at natural breaks after a finished game in One phone mode, never in the middle of a round. Ads are not shown while taking part in a Party Room.

The ads SDK may process approximate location based on IP address, device and advertising identifiers depending on platform and consent, ad interactions, usage and performance data, and diagnostics for ad delivery, measurement, security and reliability. Non-personalised ads do not mean that no data is processed.

Google User Messaging Platform (UMP) handles applicable consent choices for advertising. You can open the ad privacy options through the app's Settings. Consent signals may be processed by Google and its partners.

Party Favorites and All Access remove ads, meaning ads are not displayed. The ads SDK may still be initialised in the current version of the app.

More information is available in Google's privacy policy and in Google's data disclosure for Google Mobile Ads on iOS.

• Supabase: website form data and the app's user identity and rooms.
• RevenueCat: purchase status and identifiers for unlocks in the app.
• Google (AdMob, UMP): advertising and consent management in the app.
• Apple App Store: payment, receipt and refunds under the store's own terms.

Some providers and their sub-processors may process personal data outside the EU/EEA, for example Supabase, RevenueCat and Google (AdMob, UMP). For such transfers, the safeguards set out in each provider's agreement and data processing agreement apply, such as adequacy decisions, the EU-US Data Privacy Framework and/or the European Commission's standard contractual clauses. Not all processing therefore takes place in a single region, even though the primary databases are located in Ireland and the United Kingdom respectively.

• Right of access and information about the data we hold about you.
• Right to rectification of inaccurate data.
• Right to erasure and to restriction of processing.
• Right to object to processing based on legitimate interest.
• Right to data portability.
• Right to withdraw consent at any time.

Contact support@playravly.com and we will help you in line with this policy and applicable rules. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

We may update this policy as the service changes, for example ahead of launch or when new features are added. The date at the top shows when it was last changed.