Who we are
Rally: Sports Trivia ("Rally") is made by Arvin Soltani Motlagh, an individual developer trading as Deadball Studio ("we", "us"). We decide how your personal data is used for Rally and for this website, which makes us the controller under data protection law. Contact us about this policy or your data at support@deadballstudio.uk.
This policy covers the Rally iPhone app and deadballstudio.uk. Rally does not sell your personal data.
What we collect and why
Your account
When you choose Get started, Rally creates a guest account with a random account identifier. If you use Sign in with Apple, Apple gives us a stable identifier for your Apple Account and, if you allow it, an email address, which may be an Apple private relay address. We never receive your Apple password. We use this to create your account, sign you in and restore your progress on another iPhone.
Legal basis: performing our agreement with you (the terms of use).
Your profile and games
We store the username you choose, your home sport, your optional country flag, your Player's appearance and jersey number, the items you own, your Stripes and RP balances and their history, XP, level, achievements, streaks and streak freezes, login rewards, and the players you add as friends. For each game we store your attempts, the answers you pick, the server's timing of each answer, scores, power-ups used and Weekly League results.
We use this to run the game: to score answers on our server, keep your progress, rank leaderboards and the Weekly League, stop replays and cheating, and answer support requests. The country flag is a badge you choose; it is not a reading of your location.
Legal basis: performing our agreement with you, and our legitimate interest in keeping the game fair and secure.
Security and activity records
Our servers count requests per account to stop abuse, and record the date your account was last active so we can remove guest accounts nobody uses (see How long we keep data). Our hosting providers keep short technical logs, including IP addresses, to run and protect their networks.
Legal basis: our legitimate interest in running a secure, reliable service.
What we do not collect
Rally does not ask for your location, and it does not collect your contacts, photos, microphone or camera input, health data or payment card details, and it has no in-app chat.
What other players see
Other players can see your username, Player, level, Weekly League tier and optional flag, and your scores where you appear on a leaderboard, in your Weekly League group or on someone's friends board. A share ticket you choose to share shows your username, Player, score, result marks and flag, but never the questions or answers. Anyone who knows your username can add you to their friends board.
Ads and purchases
The current version of Rally shows no ads and sells nothing. A future update will add both. We will update this policy before it ships; this section describes what we plan.
Ads (planned)
Rally will show optional rewarded ads and occasional full-screen ads served by Google AdMob. Where the law requires it, Google's consent form will ask for your choices before ads are personalised, and Apple's App Tracking Transparency prompt will ask before any tracking across other companies' apps and websites. If you decline, Rally still works and you may still see ads that are not personalised.
Google and its partners may then process your device's advertising identifier (only if you allow tracking), IP address and the general location inferred from it, ad views and taps, and app diagnostics, to show, measure and, with your consent, personalise ads. For some of this Google acts as a separate controller under its own privacy policy. When you finish a rewarded ad, our server records that a reward was granted so it cannot be claimed twice. We will never use your answers, friends or Player to build advertising profiles.
Legal basis: your consent for personalised ads and tracking; our legitimate interest in funding a free game for non-personalised ads.
Purchases (planned)
Purchases will go through Apple. Apple handles your payment details and we never receive your card number. We will receive the transaction details needed to verify a purchase, grant RP or Remove Ads, restore it, and handle refunds Apple reports to us.
Legal basis: performing our agreement with you, and our legal duty to keep transaction records.
On your device
If you turn on Reminders and allow notifications, Rally schedules reminders on your iPhone for a day you have not played. They are local notifications: we do not send push notifications and receive nothing about them. Your Haptics, Sounds and Music settings also stay on your iPhone. Your sign-in session is kept in the iPhone's Keychain.
The website and contact form
deadballstudio.uk uses no analytics, advertising or tracking cookies. Cloudflare, which hosts it, may set strictly necessary security cookies and keeps short technical logs.
When you use the contact form or email us, we receive your name, reply email address, topic and message. A form submission also records the time, the page it came from and your browser's user agent. We use these to answer you and send an acknowledgement to the address you give. To block spam, the form uses Cloudflare Turnstile, which checks signals from your browser and device, and our server keeps a one-way hash of your IP address for up to two days to limit repeated submissions. Please do not send passwords, sign-in codes or payment details.
Legal basis: our legitimate interest in answering enquiries and protecting the form from abuse.
Service providers
These companies process personal data for us under contract, only to provide their service:
- Supabase: account sign-in, our database and server functions, hosted in Singapore.
- Apple: Sign in with Apple, the App Store and, when they arrive, in-app purchases. Apple also hosts our support mailbox.
- Cloudflare: website hosting, security, Turnstile and the contact form's server code.
- Resend: sends the contact form's emails.
- Google: AdMob and its consent tools, once ads launch (see Ads and purchases).
We may also disclose data if the law requires it, to protect players or our rights, or to a buyer if Deadball Studio or Rally changes hands, in which case this policy continues to apply to your data.
International transfers
Your game data is stored in Singapore. Cloudflare, Resend, Apple and Google may process data in the United States and other countries. Where data leaves the UK or the European Economic Area for a country without an adequacy decision, we rely on our providers' data processing terms, which include the European Commission's standard contractual clauses and the UK addendum or equivalent safeguards. Contact us for more detail.
How long we keep data
| Data | Kept for |
|---|---|
| Accounts signed in with Apple, with their game data | Until you delete the account |
| Guest accounts, with their game data | Until you delete the account, or automatically after 12 months without any activity |
| Contact form messages and support emails | 12 months after our last reply |
| Our database backups | 30 days, then deleted |
| Our hosting provider's backups | Its own retention period |
| Contact form IP hashes | Up to 2 days |
| Purchase records (once purchases launch) | As long as tax and accounting law requires |
| Service providers' technical logs | Their own short retention periods |
Deleting your account
In Rally, open Profile, then Settings, and choose Delete account under Purchases and data. If your account uses Sign in with Apple, Apple asks you to confirm again and Rally revokes its access to your Apple Account. Your account and everything linked to it (profile, Player, items, balances, games, streaks, friends and league history) are deleted from our database straight away, and from our own backups within 30 days. Our hosting provider's backups expire on its own schedule. Stripes, RP and items cannot be recovered after deletion.
Deleting the app does not delete your account. A guest account cannot be recovered once the app is deleted or you sign out, unless you linked it to Sign in with Apple; it is then removed automatically after 12 months without activity. If you cannot open the app, email support@deadballstudio.uk with your username.
Your rights
Depending on where you live, including the UK and the European Economic Area, you have the right to:
- get a copy of your personal data, and receive data you gave us in a portable format;
- have inaccurate data corrected;
- have your data deleted;
- restrict or object to how we use it, including use based on our legitimate interests;
- withdraw consent at any time, without affecting what happened before (for ads, through the consent options in Rally and your iPhone's tracking settings; for reminders, in Settings);
- complain to a data protection authority, such as the Information Commissioner's Office in the UK or the authority where you live or work.
Email support@deadballstudio.uk to use these rights. To protect your account, we may ask you to confirm details only the owner would know, such as your username and recent activity. We reply within one month, or tell you if we need longer as the law allows. We do not make decisions with legal or similarly significant effects about you by automated means.
California residents
Under the California Consumer Privacy Act, in the last 12 months we collected identifiers (account identifiers, username and, with Sign in with Apple, an email address), internet or other electronic network activity (gameplay records) and, when purchases launch, commercial information (purchase records), for the purposes described above. We do not collect sensitive personal information as defined by that law, and we do not sell personal information.
When ads launch, personalised advertising through Google may count as "sharing" for cross-context behavioural advertising. You will be able to opt out by declining personalised ads in the consent options and by not allowing tracking in your iPhone's settings. You have the right to know what we collect, to correct it, to delete it, and to opt out of sharing, and we will not treat you differently for using these rights. You can use them, or appoint an authorised agent to, by emailing support@deadballstudio.uk.
Children
Rally is for players aged 13 and over, in line with its App Store age rating. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, email us and we will delete it.
Security
Data travels over encrypted connections. Scores, balances and rewards are decided on our server, and each player can read only their own private records. Access to our systems and their keys is limited to us. No service can be perfectly secure; if a breach puts your data at risk, we will tell you and the relevant authority as the law requires.
Changes
We will update this policy when Rally changes, including before ads and purchases launch. The date at the top shows the latest version. We will explain significant changes in the app or on this page before they take effect.