Back to Rivalo

Privacy Policy

Last updated: June 2, 2026

Rivalo (“we”, “us”, “our”) builds tools for amateur football players to record matches and understand performance over time. This Privacy Policy explains what data we collect, why we collect it, how we use it, and the choices you have. By using Rivalo on iPhone or Apple Watch, you agree to this policy.

Who we are

Rivalo is a football performance tracking app. Our support contact is marlon.castro@thefndrs.com. This policy applies to the Rivalo mobile apps and the services that power them.

Data we collect

Account & profile

• Email address and authentication credentials (via Supabase Auth)
• Display name, preferred position, and optional profile fields you provide
• Profile photo if you choose to upload one

Match & workout data

When you record a match on Apple Watch, we may process:

• Start and end time, duration, and distance
• Heart rate samples, speed, sprints, intensity, and calories
• GPS route samples used for heatmaps and pitch visualization
• Workout metadata saved to Apple Health (when you grant permission)

Match context you add

• Opponent, score, outcome (win/draw/loss), competition type
• Goals, assists, notes, position, surface, and court/pitch information
• Personal goals, streaks, rivalries, and records derived from your sessions

Technical data

• Device type, app version, and basic diagnostic logs needed to operate and secure the service
• API request metadata (timestamps, error codes) — not used for advertising

How we use your data

We use your information to:

• Authenticate you and sync sessions between Apple Watch and iPhone
• Display match summaries, charts, heatmaps, personal records, and progress trends
• Calculate streaks, rivalries, court stats, goals, and post-match insights
• Send local notifications you enable (match summaries, result reminders)
• Maintain, secure, and improve the app and backend infrastructure
• Respond to support requests and legal obligations

We do not use your data for third-party advertising or sell personal information.

Apple Health & HealthKit

Rivalo on Apple Watch reads and writes workout-related HealthKit data only to record and display your football activity. Health data is used for app functionality — not for marketing, advertising, or sale to data brokers. You can revoke Health permissions at any time in the Health app or iOS Settings; some features may stop working without them.

Location data

Location may be used on Apple Watch to improve distance and route accuracy during outdoor matches and to suggest courts you have played at before. Location is tied to your sessions and is not used for unrelated tracking or ads.

How we store & protect data

• Account and session data are stored in encrypted cloud infrastructure (Supabase PostgreSQL)
• Authentication tokens are handled via industry-standard JWT flows
• Local credentials on device use the iOS Keychain where applicable
• We apply reasonable technical and organizational measures; no system is 100% secure

Sharing with third parties

We share data only with service providers needed to run Rivalo, such as:

• Supabase — authentication and database hosting
• Apple — App Store distribution, HealthKit, Watch connectivity, push notification infrastructure
• Cloud hosting — API and backend services that process your requests

These providers process data on our behalf under contractual obligations. We may also disclose information if required by law or to protect rights, safety, and security.

Data retention

We retain your account and session data while your account is active. If you request account deletion, we will delete or anonymize personal data within a reasonable period, except where retention is required by law or for legitimate security backups.

Your rights & choices

• Access & correction: Update profile fields in the app or contact us
• Deletion: Email marlon.castro@thefndrs.com to request account deletion
• Health permissions: Manage in iOS Settings → Health → Rivalo
• Notifications: Manage in iOS Settings → Notifications → Rivalo

Depending on your region, you may have additional rights (access, portability, objection). Contact us and we will respond within applicable legal timeframes.

Children

Rivalo is not directed at children under 13 (or the minimum age in your jurisdiction). We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.

International transfers

Your data may be processed in countries other than where you live. We take steps to ensure appropriate safeguards when data is transferred internationally.

Changes to this policy

We may update this Privacy Policy from time to time. We will post the revised version on this page with an updated “Last updated” date. Continued use after changes means you accept the updated policy.