Legal
Privacy Policy
1. Information We Collect
We collect information you provide directly, information generated when you use the app, and limited device information needed to deliver the service.
| Category | What we collect | How it's obtained |
|---|---|---|
| Account | Full name, mobile number, email address, profile photo, account type (customer or employee) | Provided by you at registration or through Google / Facebook sign-in |
| Organisation | Organisation ID, membership status, role (e.g. manager, employee), approval history | Entered by you or assigned by an admin |
| Communications | Messages, images, files, voice and video call records (duration, participants) | Created when you use the messaging or calling features |
| Location | Precise location shared as a message attachment | Only when you explicitly choose to share your location |
| Device & technical | Push notification token (FCM), device OS and model, IP address, app version | Collected automatically to deliver notifications and maintain security |
| Usage | Login timestamps, session activity, feature interaction logs | Collected automatically as you use the app |
2. How We Use Your Information
We use your information only for the purposes listed below. We do not use it to build advertising profiles or sell it to data brokers.
- Providing the service — delivering messages, enabling calls, managing group membership, and showing chat history.
- Notifications — sending push notifications for new messages, call invites, and admin approvals using your device's FCM token.
- Organisation management — processing join requests, admin approvals, role assignments, and QR/invite-link membership flows.
- Account security — verifying your mobile number via OTP, linking sign-in providers (Google, Facebook), and detecting suspicious login activity.
- Support — responding to help requests and troubleshooting service issues.
- Legal compliance — meeting applicable law, regulations, or enforceable government requests.
- Service improvement — aggregated, anonymised analytics to understand how features are used (no individual profiling).
3. How We Share Your Information
We do not sell your personal information. We share it only in the following circumstances:
- Within your organisation — members of your organisation can see your display name, profile photo, and role. Messages you send to a group or direct chat are visible to all participants in that chat.
- Rsphire support staff — authorised staff may access account or message data strictly to resolve support requests or investigate policy violations.
- Service providers — third-party processors (cloud hosting, push notification infrastructure, video-call providers) that handle data only on our behalf under confidentiality agreements.
- Legal requirements — when required by law, court order, or to protect the rights, property, or safety of our users or the public.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your data may transfer to the successor entity under the same protections described here.
4. Data Retention
We keep your data for as long as your account is active or as needed to provide the service. Specific retention periods:
| Data type | Retained for | Reason |
|---|---|---|
| Account profile | Until account deletion is processed (up to 30 days) | Service delivery |
| Messages & files | Duration of account; up to 30 days after deletion request | Organisation record-keeping |
| Audit logs | Up to 7 years | Legal and compliance obligations |
| Anonymised analytics | Indefinite (no personal identifier) | Product improvement |
| Push notification tokens | Until you sign out or delete your account | Notification delivery |
5. Your Rights and Choices
Depending on where you live, you may have the following rights regarding your personal information:
- Access — request a copy of the personal data we hold about you.
- Correction — update your name, mobile number, email, or profile photo in the app's profile settings at any time.
- Deletion — request deletion of your account and associated personal data. See our Delete Account page for the full process.
- Portability — request an export of your data in a machine-readable format.
- Withdraw from an organisation — leave any organisation at any time from your app settings; your messages in that organisation's channels may remain visible to other members per that organisation's policies.
- Notification preferences — disable push notifications at any time through your device's system settings.
- Sign-in provider linking — link or unlink Google and Facebook sign-in from your profile settings.
To exercise any right not available through the app's settings, email us at support@cloudsolitaire.net. We will respond within 30 days.
6. Security
We implement technical and organisational measures designed to protect your information against unauthorised access, loss, or misuse. These include:
- TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage for sensitive fields (tokens, credentials).
- Role-based access controls limiting which staff can access production data.
- Mobile number verification via one-time passwords (OTP) for authentication.
No system is completely secure. If you discover a potential security vulnerability, please disclose it responsibly to support@cloudsolitaire.net.
7. Children
Solitaire is intended for users who are at least 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately and we will delete it.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email at least 14 days before the changes take effect. Continued use of Solitaire after the effective date constitutes acceptance of the revised policy.
The "Effective date" at the top of this page always reflects the date of the most recent revision.
9. Contact Us
For privacy-related questions, data requests, or complaints, reach us here:
Response time
Within 30 days for rights requests; faster for general queries.