RuckUp Privacy Policy
Effective date: [date]. DRAFT — to be reviewed by a lawyer before publication.
This policy explains what personal data the RuckUp app collects, how we use it and how we protect it. Data controller: [company name, tax ID, address]. Data is processed in accordance with the Law of the Republic of Uzbekistan "On Personal Data".
1. What we collect
| Data | Why |
|---|---|
| Email, username, password (stored encrypted) | Account, sending the sign-in code |
| Phone number | Account profile; not shown to other players |
| Profile photo (optional) | Shown on your profile and in lists |
| Google account details (if you sign in with Google): name, email, photo | Registration and sign-in |
| Apple ID details (if you sign in with Apple): name, email (may be an address hidden by Apple), Apple user identifier | Registration and sign-in |
| Game data: tournaments, results, duels, PTS and XP | Rating and statistics |
| Chat messages | Delivering messages |
| Location — only when starting a PTS duel | Checking that you are at the club; coordinates are not stored |
| Push notification token (Firebase) | Sending notifications |
| App error reports (Firebase Crashlytics): device model, OS version, error details | Finding and fixing the causes of crashes |
| Online status and last activity time | Showing friends that you are online |
| A club's request on the website (optional): club name, city, number of tables, contact person's name and phone | Contacting the club to connect it |
2. Who can see it
- Other users: your username, photo, level, PTS and game statistics, friends list and online status.
- The RuckUp website: the top five of the rating (username, status, PTS) and approved clubs (name, address, number of tables) are shown on the website too.
- Your email and phone number are not shown to other users.
- The club organising a tournament: details of the players registered for that tournament.
- Service providers: Google Firebase (push notifications and error reports), the email delivery service and the server hosting provider — only to run the Service.
- We do not sell data or share it with third parties for advertising.
3. Retention
Data is kept while your account is active. When you delete your account, access is closed immediately and personal data is deleted or anonymised within [30] days. Tournament results may be kept in anonymised form for statistics.
4. Security
Data is sent over an encrypted connection (HTTPS), passwords are stored hashed, and access to the server is restricted.
5. Your rights
You can view, correct (Profile → Personal Information) and delete your data (Profile → Settings → "Delete Account", or [https://ruckup.sosgroup.uz/account-deletion?lang=en]). You can turn off location and notification permissions in your phone settings at any time.
6. Children
The Service is not intended for children under 13. [Confirm the age limit with a lawyer.]
7. Changes and contact
We will notify you in the app when this policy is updated. Questions and requests: [support@ruckup.sosgroup.uz].