Belote Academy Privacy Policy

This policy explains what information the Belote Academy mobile game (“the app”), published by Rubilion LLC (“we”), collects, how it is used, and the choices you have. It applies to the Android and iOS versions of the app and to the game server they connect to.

Information we collect

Account information

If you sign up with an email and password: your email address and a one-way hash of your password. We never store your password itself.
If you sign in with Google: your Google account ID and email address, as shared by Google after you approve the sign-in. We do not use the name Google may share, since you pick your player name in the app. We do not receive your Google password, contacts or any other Google data.
If you sign in with Apple: your Apple account ID and the email address Apple shares with us, which can be a private relay address if you choose to hide your real one. We do not use the name Apple may share, since you pick your player name in the app. We do not receive your Apple ID password.
If you play as a guest: a randomly generated guest ID. No email or name from outside the app is needed.

Game profile and activity

The player name and avatar you choose.
A profile photo, if you upload one (see Profile photos).
Game data: games played, wins and losses, level and experience, reputation, in-game coins, items you unlock or receive, and the tables and card decks you pick.
Social features: your friends list, friend requests, players you block, and the ratings players give each other after a match.

Information stored only on your device

Settings such as language, sound and music volume, and the gender you pick on first launch. These stay on your device and are not sent to our server.

Technical information

Our server records basic request logs (for example, which address of the server was called and when, and the IP address of the connection) to keep the service running and secure.
Crash and error reports, if the app or our server runs into a problem (see Crash reports).

How we use information

To create and secure your account and keep you signed in.
To run online games, matchmaking, friends, leaderboards and the other features of the app.
To show your player name, avatar, level, reputation and game results to other players where the game displays them.
To prevent abuse, fix problems and keep the service working.

We do not sell your information and we do not use third-party analytics. Crash reports are used only to find and fix bugs. The only ads in the app are optional reward videos from Google AdMob, described under Advertising.

Profile photos

Signed-in players can upload a photo to use as their avatar. Before a photo is saved, our server resizes it and removes all metadata, such as camera details and location. An automated check that runs on our own server then looks for nudity, and photos that fail it are refused and never stored.

Accepted photos are stored with Amazon Web Services (Amazon S3, in the EU) and shown to other players wherever your avatar appears. Players can report a photo they find inappropriate. Once enough players report it, it is hidden from everyone until you replace it. We keep a record of who reported which photo to stop the same player from reporting twice.

When you replace or remove your photo, or delete your account, the stored photo is deleted.

Crash reports

The app and our server use Sentry, a crash reporting service, to tell us when something goes wrong. A report contains the error and where in the code it happened, a short trail of the steps the app took just before it (such as which screen was open and which server addresses were called, not what you typed or said), technical details about your device (model, operating system, app version, language) and your player ID, so we can match it to our server logs. Sentry also receives the IP address of the connection that sends the report. Reports do not contain your email, password, messages or payment details.

Each device sends a given error only once per app version. Reports are processed by Sentry in the EU (Germany) on our behalf and kept only for a limited time. Builds used for development do not send reports.

Advertising

At the end of an online match the app offers a prize, and you can choose to watch a short video ad to claim it or to double it. Nothing plays unless you tap to watch, and the app shows no other ads.

The videos come from Google AdMob. To show them, measure them and prevent ad fraud, Google may collect information from your device, such as its advertising identifier (where your device allows it), IP address, device model and operating system, and how you interact with the ad. Google uses this under its own policy: How Google uses information from apps that use its services. We do not receive this information, only totals such as how many ads were shown.

EEA, UK and Switzerland: before any ad is requested, the app shows Google’s consent form. You can consent, refuse, or choose purposes and partners one by one. If you refuse, you may still see ads that are not personalized. To answer the form again, clear the app’s data or reinstall it.
Everywhere: you can reset your advertising identifier or limit ad personalization in your device settings (Android: Settings -> Google -> Ads, or Security & privacy -> Ads; iOS: Settings -> Privacy & Security -> Tracking).

What other players can see

Your player name, avatar or profile photo, level, reputation, ratings and game statistics are visible to other players inside the game. Your email address is never shown to other players.

We share information only:

With service providers that host the game server, its database and profile photos (Amazon Web Services), who process it on our behalf.
With Google or Apple, only to complete “Sign in with Google” or “Sign in with Apple” when you choose it.
With Sentry, which processes crash and error reports for us (see Crash reports).
With Google AdMob, when you choose to watch a reward video (see Advertising).
With Google Play and the App Store, to process and confirm purchases you make (see Purchases).
When required by law.

Purchases

The app sells packs of in-game chips for real money. Purchases are made through Google Play on Android and through the App Store on iOS, and are paid for under their terms. We never see or store your card or other payment details.

When you buy a pack, the store sends us a confirmation that we check before adding the chips to your account. We keep a record of each purchase: the product, which store it came from, the store’s order and transaction identifiers, your account and the time. We use it to deliver what you bought, to make sure a purchase is never counted twice, and to answer refund and support requests.

Chips, coins, items and boosts have no real-world value and cannot be cashed out, sold or transferred outside the game.

Data retention and deletion

We keep your account data for as long as your account exists. You can delete your account at any time in the app: Settings -> Delete account. This permanently removes your account and the data that belongs to it, including your profile, profile photo, photo reports made by or about you, items, purchases of in-game items, friends and ratings you received. Ratings and reputation you gave other players stay as part of their totals. Deleted data may remain in encrypted backups for a limited time until those backups are replaced.

Guest accounts can be deleted the same way.

Security

Connections between the app and our server are encrypted (HTTPS / secure WebSocket). Passwords are stored only as one-way hashes, and sign-in tokens are stored hashed on the server.

Children

The app is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

Changes to this policy

We may update this policy. The date at the top shows when it was last changed. Continued use of the app after a change means you accept the updated policy.

Contact

Questions or requests about your data:

Rubilion LLC
10 Shevchenko St, Building 46
Yerevan 0050, Armenia
support@rubilion.com

Privacy Policy