Rung Royal: Court Piece — Privacy Policy
Effective: 14 October 2026 · Essby Fintech Innovations Private Limited ("we")
This policy covers the Rung Royal app on Android and iPhone and the game server at play.vybepay.com.
It says what we collect, why, who else receives it, how long we keep it, and how you delete it.
What we collect, and why
- A random app ID. On first launch the app creates a random identifier with no name or email attached.
Our server uses it to count how many people are playing, to keep your place on the leaderboard under the name you
chose in the app (or a generated nickname), and for friends, invites, blocks and reports (below).
- Your profile on our server: the name you chose, your XP, your avatar, your weekly standing, your
friends list and the players you blocked, all kept with your app ID.
- Play Games / Game Center (optional). If you sign in, your saved game is stored in your own Google or
Apple account (we only write and read it), and your XP is posted to the platform's leaderboards. The app also
sends our server a one-way hash (SHA-256) of your Play Games or Game Center player ID — never the ID itself,
and never your email address — so a reinstall or a second phone finds the same profile, friends and cloud
save. The hash is used for nothing else and never shown to anyone.
- Friends. Players who sit together at a private table (a code the host shared, or an invite)
become friends: each sees the other's name and whether they are online. Players matched at a public table do
not become friends. An invite to a table expires after 10 minutes.
- Blocks and reports. You can remove a friend, block a player, and report a player's name, voice or
behaviour. A block is kept with your app ID and the other player is not told. A report keeps your app ID, the
other player's app ID and name, the kind of report, the table and match it came from, and the time, so we can
review it (see our rules of the table). When several players report the same
name, it is shown as a generated nickname. Names with abusive words are shown as a generated nickname too.
- Multiplayer. When you host or join a table, your display name and game moves pass through our server
(Google Cloud, Mumbai region). While a game is in progress the table is also kept in our cloud storage, so a
server restart does not end it; it is deleted when the table ends, and anything left over within three hours.
- Push-to-talk voice. The app uses your microphone only while you hold the talk button. The clip goes
through our server to the other players at a private table, or at a public table only to players who are your
friends; it is never stored, and a block stops it both ways.
- Invite links. If you open an invite link on a phone without the app and tap the store button, the
server keeps that phone's network address and the room code for up to 30 minutes, in memory only, so the game
can offer you the same seat on first launch.
- Game numbers. To give every game a unique ID, the app asks our server once for a device number. We
keep the number, a random key the app made for this install, and your app ID.
- Your email address (optional). In Settings → Account you can give us an email address and
tick a box to get offers, events and news about Rung Royal. Nothing in the game needs it and nothing is locked
without it. We keep the address with your app ID, your app language, your phone's platform (Android or iPhone),
the app version and when you agreed. We use it only to send you those emails — a few a month at most — and never
sell it or share it with anyone else (if we use an email-sending service, it acts only for us). To stop, tap
Remove my email in the same place, or use the unsubscribe link in any email: the address is deleted from
our server, not just switched off.
- Feedback. If you type a reason when leaving a game, that line (up to 140 characters) is sent with no
identifier attached. We keep only the latest 500.
- On your device only: your preferences, statistics, achievements, saved games and the reminders the app
schedules on your phone (local notifications; nothing is sent to a server for them).
- Analytics and crash reports. Google Firebase Analytics records how the app is used (screens, games
played, ad and purchase events). These events are not anonymous: they are tied to a Firebase app-instance ID
and, on Android, to your device's advertising ID (where you have not turned it off). Firebase Crashlytics sends
crash reports with the device model, OS version and a Crashlytics installation ID.
- Advertising. Ads are served by Google AdMob together with Unity Ads, InMobi and Liftoff (Vungle). They may collect device
identifiers (such as the advertising ID), approximate location derived from your network address, and ad
interactions, as described in Google's,
Unity's,
InMobi's and
Liftoff's privacy policies. On iPhone, ads are personalised
only if you allow tracking. Where the law gives you the choice, Settings → Account → Privacy
choices lets you change it. Buying "Remove Ads" stops all ad serving.
- Purchases are handled by Google Play and the App Store. We receive a confirmation that you bought an
item, never your payment details.
- Server logs. Like any web server, ours records each request's network address, time and path.
Who else receives data
Only the service providers named above: Google Cloud (our server and storage), Google Firebase (analytics and
crash reports), Google Play Games or Apple Game Center (if you sign in), and the ad networks Google AdMob, Unity
Ads, InMobi and Liftoff (Vungle). We require each of them to give your data the same or equal protection as this policy does,
and they may use it only to provide their service to us or as their own policies describe. Other players see
only your chosen name (or nickname), avatar, XP and online status. We do not sell your data.
How long we keep it
| Data | Kept |
|---|
| Your profile (name, XP, avatar, standing, friends, blocks, the hashed Play Games / Game Center ID) |
Until you delete it; a profile that has not been used for 120 days is erased automatically |
| Reports (made by you or about you) | 180 days, then erased. If you delete your data, your app ID
and name are removed from them first |
| Your email address (only if you gave it) | Until you remove it (Remove my email, an unsubscribe
link, or Delete my data); then it is deleted at once |
| Table invites | 10 minutes, in memory |
| A game in progress | Until the table ends; at most three hours |
| Voice clips | Never stored |
| Invite-link match (network address and room code) | 30 minutes at most, in memory |
| Game-number record | Kept so no two games share an ID; your app ID is removed from it when you delete your data |
| Feedback lines (no identifier) | The latest 500 |
| Deletion requests sent from our website | 180 days |
| Server request logs | 30 days (Google Cloud Logging) |
| Analytics and crash reports | Under Google's retention settings for our Firebase project
(analytics events at most 14 months; crash reports 90 days) |
How we protect it
- Every connection between the app and our server is encrypted (HTTPS / TLS).
- Our storage is reachable only by the game server's own service account and our administrators; the
administrator views require a secret key. Other players never receive your app ID, only an opaque code.
- We collect no phone number, contacts, photos or precise location, and an email address only if you choose
to give one in Settings.
Deleting your data
In the app: Settings → Account → Delete my data. It erases, at once, everything
our server holds for you — profile, friends, blocks, invites, the hashed account link, your email address if you
gave one — removes your app ID
from reports and game numbers, and, if you are signed in, erases your cloud save. Then the app starts fresh.
Without the app: use the form or the email address on play.vybepay.com/delete.
We act within 30 days.
Uninstalling the app deletes everything stored on your phone. You can also withdraw consent for personalised
ads at any time (Privacy choices, or your phone's tracking setting) and stop analytics by deleting the app.
Children
Rung Royal is not directed at children under 13, and we do not knowingly collect personal data from them. If you
believe a child under 13 has given us data, email us and we will delete it.
What we don't do
- We do not sell your data or use it for anything not listed here.
- We do not offer real-money gaming, gambling, or wagering of any kind. Rung Royal is a free simulated card game.
Changes and contact
When this policy changes, the date above changes with it. Questions or requests:
support@vybepay.com.