Privacy Policy

1. Introduction

Redoublet.com ("we", "our", or "us") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, and protect your information when you use our website and mobile application for bridge game analysis.

2. Data Controller

The data controller responsible for your personal data is:

Redoublet.com
Operated by Quirinus and Christiaan Tersteeg
Boylestraat 9, 1098PC Amsterdam, the Netherlands

Contact:
[email protected]
[email protected]

3. Data We Collect

We collect and process the following categories of personal data:

Account & Profile Data:

• Email address
• Username / display name
• Firebase Authentication account and user ID
• Language preference
• Platform (iOS or Android)

App Usage Data:

• Game history and bidding sequences
• Game statistics and bridge hands played
• Group memberships
• Trainer and admin role assignments
• App usage patterns and preferences

Camera & Card Detection Data:

• Photos of bridge cards (sent to our server for detection, deleted after processing)
• Camera permission status

Technical Data:

• Device information (device type, operating system)
• Push notification tokens (via Expo)
• Crash reports and error diagnostics (via Sentry)
• IP address (collected implicitly via API calls)

Subscription & Purchase Data:

• Subscription status and purchase history (managed by RevenueCat)
• In-app purchase transaction data (processed by Apple App Store / Google Play Store)

4. Camera Usage and Photo Processing

Our app uses your device's camera to scan and detect bridge cards. Important information about this feature:

• Camera access is only requested when you choose to use the card scanning feature
• Photos are sent to our secure API for card detection and analysis
• Images are processed immediately and deleted from our servers after processing
• We do not store or retain photos after card detection is complete
• Card detection data is used solely to analyse your bridge game
• All data transmission is encrypted using industry-standard protocols (HTTPS/TLS)
• You can revoke camera permissions at any time through your device settings

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Contract performance: To provide our bridge analysis services to you (Article 6(1)(b) GDPR)
• Consent: For optional features such as push notifications and marketing communications (Article 6(1)(a) GDPR)
• Legitimate interests: To improve our services, ensure security, and analyse app usage (Article 6(1)(f) GDPR)
• Legal obligation: To comply with applicable laws and regulations (Article 6(1)(c) GDPR)

6. How We Use Your Data

We use your personal data to:

• Provide and maintain our bridge game analysis services
• Manage your account and authenticate your identity
• Process in-app purchases and manage subscriptions
• Send push notifications about app updates and game activity
• Analyse and improve our services and user experience
• Provide bridge game analysis via our automated robot system
• Monitor and fix technical issues through crash reporting
• Respond to your inquiries and provide support
• Comply with legal obligations

7. Data Sharing and Third-Party Services

We do not sell your personal data. We share data with the following third-party service providers who assist in operating our services:

• Firebase / Google Cloud — Authentication, database, cloud functions, and push notification infrastructure. Data shared: account data, user ID, app usage data. Privacy Policy
• Sentry — Error and crash reporting. Data shared: crash logs, device information, IP address. Privacy Policy
• RevenueCat — Subscription and purchase management. Data shared: user ID, purchase and subscription data. Privacy Policy
• Expo — Push notification delivery. Data shared: push notification tokens, device information. Privacy Policy
• Apple App Store / Google Play Store — App distribution and in-app purchase processing. Data shared: purchase transaction data. See Apple Privacy Policy and Google Privacy Policy

We may also share your data with legal authorities when required by law.

8. International Data Transfers

Some of our third-party service providers (including Firebase/Google Cloud, Sentry, RevenueCat, and Expo) are based in the United States. This means your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When such transfers occur, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission and/or reliance on adequacy decisions, to protect your data in accordance with GDPR requirements.

9. Data Retention

We retain your personal data for the following periods:

• Account data: Retained for as long as your account is active. Deleted upon account deletion request.
• Game history and statistics: Retained for as long as your account is active.
• Card detection photos: Deleted immediately after processing (not stored).
• Crash reports and diagnostics: Retained for up to 90 days.
• Subscription and purchase data: Retained as required by applicable tax and accounting laws (typically up to 7 years).
• Push notification tokens: Retained until you disable notifications or delete your account.

When data is no longer needed, it is securely deleted or anonymised.

10. Your Rights (GDPR)

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your personal data
• Restriction: Request limited processing of your data
• Portability: Receive your data in a portable format
• Object: Object to certain types of processing
• Withdraw consent: Withdraw consent at any time where processing is based on consent

Account Deletion: You can delete your account directly from within the app via Settings > Delete Account. You may also request deletion through our account deletion page. When you delete your account, we permanently remove your profile data, game history, group memberships, and associated personal data. Certain data (such as purchase records) may be retained as required by law.

To exercise any of these rights, please contact us at [email protected].

11. Automated Decision-Making

Our app uses an automated bridge analysis system ("Robot") that evaluates bidding and play decisions. This system provides analysis, scores, and recommendations based on bridge game theory. The robot's analysis may affect competition rankings and game scores within the app. This automated processing is performed to deliver the core functionality of our service. You are always free to disregard the robot's analysis, and no decisions with legal or similarly significant effects are made solely through automated means.

12. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption of data in transit (HTTPS/TLS), secure cloud infrastructure (Firebase/Google Cloud), access controls, and regular security reviews. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

13. Cookies

Our website uses essential cookies to ensure proper functionality. We also use analytics cookies to understand how visitors interact with our website. You can control cookie preferences through your browser settings.

14. Children's Privacy

Our services are not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe we have collected data from a child under 16, please contact us immediately.

15. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes by posting the new policy on this page, updating the "Last updated" date, and where appropriate, notifying you via email or in-app notification.

16. Complaints

If you have concerns about how we handle your personal data, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, www.autoriteitpersoonsgegevens.nl) or your local supervisory authority.