Skip to main content

© Rebuslopet.no. All rights reserved.

Privacy policy – Rebusløpet app

Types of Data collected

Among the types of Personal Data that Rebusløpet collects, by itself or through third parties, there are: first name; last name; phone number; email address; username; password; User ID; Usage Data; Purchase History; Transaction Identifiers.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanation texts displayed prior to the Data collection. Personal Data may be freely provided by the User, or, in case of Usage Data, collected automatically when using Rebusløpet.

In-App Purchases and Payment Information

Rebusløpet offers in-app purchases processed through the Apple App Store and Google Play Store. We do not collect or store your payment card details. All payment processing is handled by the respective platform providers (Apple/Google).

To manage subscriptions and verify purchases across devices, we use RevenueCat. RevenueCat processes transaction data (such as receipt information and expiration dates) to ensure you have access to the features you have purchased. This data is linked to your User ID, but does not include sensitive financial information.

Mode and Place of Processing the Data

Methods of processing

The Owner takes appropriate security measures to prevent unauthorized access, disclosure, modification, or unauthorized destruction of the Data.

Legal basis of processing

Processing occurs based on consent, performance of a contract (e.g., providing the service you purchased), legal obligation (e.g., bookkeeping requirements), or legitimate interest.

Place

Data is processed at the Owner’s offices and other locations where processing parties (like Firebase and RevenueCat) are based. Transfers outside the EU are protected by legal safeguards such as Standard Contractual Clauses.

Retention time

Data is kept as long as necessary to fulfill purposes. Transaction and billing data are retained for the period required by applicable accounting and tax laws (typically 5 years in Norway according to the Bookkeeping Act).

The Purposes of Processing

  • Provide and operate the Service
  • Authenticate users
  • Process and verify In-App Purchases
  • Manage infrastructure and backend
  • Send notifications and updates
  • Monitor performance and perform analytics
  • Distribute via platform services (App Store/Google Play)

Detailed Information on the Processing of Personal Data

  • Firebase Cloud Firestore & Storage – Backend infrastructure and data hosting
  • Firebase Authentication – User registration and secure login
  • RevenueCat – In-app purchase management and receipt validation
  • Apple App Store & Google Play Store – Payment processing and platform services
  • Firebase Performance Monitoring & Google Analytics – Infrastructure monitoring and analytics
  • Firebase Cloud Messaging – Sending push notifications

Location Data

Rebusløpet uses your device’s location (GPS) to determine when tasks become available based on your physical proximity to specific locations. This is essential to the core gameplay experience.

Location data is only used while the app is in use and is never stored permanently or shared with third parties.

Camera Access

The app uses the device’s camera to allow users to take and upload photos as part of answering tasks. Photos are only uploaded to our secure storage after your explicit confirmation.

Push Notifications

Rebusløpet may send push notifications for game updates and administration. Users can disable these in device settings at any time.

The Rights of Users

  • Access, rectify, or request erasure of their Data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with Datatilsynet

Contact Information

Owner and Data Controller:
Guribye Design
Dalerudveien 6b, 0687 Oslo, Norway
Email: post@rebuslopet.no

Latest update: April 7, 2026