Privacy
Last updated 14 November 2026. Rankiz is a social game for good habits: friends compete on verified steps and send positive “flames”. This policy explains what we process, why, and your rights under the GDPR (AVG).
Who we are
[Controller name — set LEGAL_CONTROLLER_NAME], [Registered address — set LEGAL_ADDRESS], KvK [KvK number — set LEGAL_KVK], is the controller. Contact: privacy@rankiz.online.
The short version
- Health data is used only to run the game. It is never sold, never used for advertising or marketing, and never shared with data brokers.
- We read daily step totals only from Apple Health — no heart rate, workouts, weight or anything else. Manually added steps don't count.
- Location is used only during a walk you start. Live sharing is off at the start of every walk and only the friends you pick can see you. We keep only your latest position while sharing and delete it the moment sharing stops. Your route never leaves your phone.
- Public boards are off by default and show only your character and @handle. Photos are friends-only and checked before friends see them.
- Links you share are public to whoever opens them. A challenge or squad link shows your first name, your character and the step number on the card. Your personal link (rankiz.online/c/your-handle) shows your first name, character and last week's steps to anyone who has your handle; set Who can challenge me to Nobody in the app to switch it off.
- No contact-list upload, no ads, no tracking across apps, no sale of data. Nothing in Rankiz can be bought.
What we process and why
| Data | Purpose | Legal basis | Kept |
|---|---|---|---|
| Apple ID identifier, first name, @handle, character, date of birth | Your account; the 16+ age check | Contract (art. 6(1)(b)) | Until you delete your account |
| Daily step totals from Apple Health, their source devices and sync times | Boards, challenges, streaks, points | Explicit consent (art. 9(2)(a)) — the Health permission and the per-squad sharing switch | Until deletion; you can turn it off any time |
| Walk stats (distance, duration, neighbourhood name); latest position only while you share live | Walk cards and opt-in live walking with friends you pick | Consent (art. 6(1)(a)) per walk | Stats until deletion; live position deleted when sharing ends, expires within 10 minutes |
| Poll picks, flames, reactions, squad memberships, reports and blocks | The social game and keeping it safe | Contract; legitimate interest in safety (art. 6(1)(f)) | Until deletion; reports up to 12 months |
| Optional profile photo (320 px) | Showing you to friends | Consent | Until you remove it or delete your account |
| Product events (e.g. “invite shared”), a random install ID, push token | Measuring whether the app works for people; notifications you allow | Legitimate interest; consent for push | Events 400 days; tokens until revoked |
| Invite page visits (rankiz.online/c/… and /s/…): the link code, where the link was shared (e.g. TikTok) and the device type (iPhone, Android or other). No cookies; no IP address or browser string is stored. The App Store button copies the invite link to your clipboard so the app can restore it when you tap Paste; we never read your clipboard. Fonts are served from our own domain, so nothing is sent to Google. | Knowing which invites and channels work | Legitimate interest | 400 days |
| Device attestation key (Apple App Attest) | Proving step uploads come from the genuine app (anti-cheat) | Legitimate interest in fair competition | Until deletion |
Poll picks are anonymous to the people you pick: they only see which squad it came from. We keep the sender internally to enforce safety rules and handle reports. Hints use game data (pet, level, first letter) and never reveal a name; they are disabled in squads under five people.
Who processes data for us
Vercel (hosting, EU region Frankfurt), Neon (database, EU region Frankfurt) and Apple (Sign in with Apple, push notifications, App Attest). Where a provider is based outside the EEA, transfers rely on the EU Standard Contractual Clauses or the EU–US Data Privacy Framework. We don't use advertising or analytics SDKs.
Your rights
You can access, correct, export and delete your data. In the app: Me → ⚙️ → Download my data (a full export) and Delete account, which deletes your profile, steps, walks, photos, flames and push tokens and revokes Sign in with Apple. You can withdraw consent any time (Health, squad sharing, live location, public boards, push). You may complain to the Autoriteit Persoonsgegevens.
Age
Rankiz is for people aged 16 and over, the Dutch digital-consent age. We check your date of birth at sign-up and never show your birthday to others.
Changes
We'll tell you in the app before material changes take effect.