Updated: 5th of November, 2024
The N-Back Challenge mobile applications and the N-Back Challenge website are owned and operated by Rivuspurus OÜ (Sepapaja 6, Tallinn 15551, Estonia; registry code 14016097).
In this privacy policy, we will refer to the N-Back Challenge mobile applications, the N-Back Challenge website, and the services they provide, as the “Services”.
The purpose of the Services is set out in the first section of the N-Back Challenge Terms of Use. Please refer to that document.
This privacy policy addresses the following topics:
- What “personal data” means;
- What data we collect and for what purpose;
- Cookies on the N-Back Challenge website;
- How we store your data and for how long;
- How we protect your personal data;
- Your data protection rights;
- Data transfers;
- Age limits;
- How to contact us;
- Changes to our privacy policy.
What “personal data” means
“Personal data” means any information relating to an identified or identifiable natural person. In simpler terms, one might say that “personal data” is any information that is clearly about a particular person.
What data we collect and for what purpose
Rivuspurus OÜ is the controller of the data collected. Rivuspurus OÜ collects data both directly and indirectly via our usage of third-party tools.
The data we directly collect include:
| Data | Purpose | Legal basis |
|---|---|---|
|
| Contract. |
|
| Contract. |
|
| Contract. |
|
| Contract. |
|
| Contract; legitimate interest. |
Rivuspurus OÜ also collects data via third-party tools, including:
| Third-party tool: data collected by this tool | Purpose | Legal basis |
|---|---|---|
|
| Contract. |
|
| Consent (website); legitimate interest (mobile applications). |
|
| Legitimate interest. |
Please review the information these service providers provide about data collected via these tools as well as their respective privacy policies.
Please note that personal data, including your Game Center/Play Games image, your Game Center/Play Games display name, and certain accomplishments of yours, such as your highest n-back level overall, your highest n-back level with all advanced settings set to their scientific defaults, your longest streak, and your total session, may be provided to the Game Center Leaderboards and Google Play Games Leaderboards, respectively, and that via the Apple Game Center Leaderboards and the Google Play Games Leaderboards, these data may show up in the leaderboards of other users.
For more information, please review Apple Game Center & Privacy, which includes information about Game Center leaderboards; the Google Privacy Policy; Google Play Help on how to change your privacy and other settings, which includes information about how to change the settings for leaderboards; Firebase’s key security and privacy information; and the Privacy Notice of SmartBear, owner of Bugsnag.
We collect and process data when you use our Services. For example, we collect your basic account information when you first log into the game, we process your game progress after each N-Back round, and we record your application settings whenever you change them.
Cookies on the N-Back Challenge website
Cookies are a mechanism for websites to remember little bits of information between web pages or visits. They are tiny pieces of text that are placed and stored on your device when you visit a website.
We use Google Analytics which is a web analytics tool that helps us understand how users engage with the N-Back Challenge website. Google Analytics uses cookies to collect information about, for example, the number of visitors to our website, the source from where visitors come, and the pages they visit. This information is used to compile reports which disclose website usage patterns without identifying individual visitors. This supports our marketing research and allows us to improve the Services. We do not use cookies to target ads.
You can opt out of Google Analytics without affecting how you visit our site. To opt out of being tracked by Google Analytics across all websites you use, you can use this tool.
In addition, we use strictly necessary cookies, namely cookies which allow us to remember whether you accepted or rejected the statistical cookies. These cookies cannot be turned off.
How we store your data and for how long
Rivuspurus OÜ stores the data we collect directly via Firebase services. We use Firebase Realtime Database, Firebase Authentication, and Firebase Firestore Database. The data collected by third-party tools are stored by these.
Rivuspurus OÜ will keep your data until you request for your account to be deleted or for your data to be erased. Such requests will be executed within 30 days of receipt: we delete the data in Firebase services and we request Google Analytics to delete their data. After we execute the deletion of data in Firebase services, the data may persist for 30 days in the backup systems. Information about non-consumable purchases in the application and scores in Game Center leaderboards and Google Play Games leaderboards can’t be deleted.
Third-party tools store data for periods of time as per their retention policies. For more information, please review the retention periods for Firebase services including Firebase Crashlytics. For customizable retention periods in Google Analytics, we generally opt for 14 months.
How we protect your personal data
We are committed to protecting your personal data. We implement appropriate technical and organizational measures to help protect the security of your personal data. However, please note that no system is ever completely secure, and that our small organization has less of an abundance of resources compared to mid-sized or even large companies. We have put various safeguards in place including pseudonymization, encryption, and access policies to guard against unauthorized access of personal data in our systems.
Your data protection rights
We would like to make sure you are aware of your data protection rights. You have the following rights in relation to your personal data, unless provided otherwise by local law:
The right to be informed: the right to be informed about the collection and use of your personal data.
The right of access: the right to request Rivuspurus OÜ for copies of your personal data.
The right to rectification: the right to request that Rivuspurus OÜ correct any information you believe is inaccurate, and the right to request that Rivuspurus OÜ complete the information you believe is incomplete.
The right to erasure: the right to request that we erase your personal data.
The right to restrict processing: the right to request that Rivuspurus OÜ restrict the processing of your personal data.
The right to object to processing: the right to object to our processing of your personal data.
The right to data portability: the right to request that Rivuspurus OÜ transfer the data that we have collected to another organization, or directly to you.
Rights in relation to automated decision-making and profiling: the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.
Other rights: the right to request that we refrain from including your data in Google Analytics.
If you would like to learn more about the GDPR rights, please consult Chapter 3 of the GDPR.
Should you wish to exercise your right of access, you can make a request for data export by visiting the in-app settings, opening the privacy controls view, and then tapping the data export button at the bottom of the view. Alternatively, you can reach out to us via email at export@nbackchallenge.com.
Should you wish to exercise your right to erasure, you can request the deletion of your account and its associated data by visiting the in-app settings, opening the privacy controls view, and then tapping the account deletion button at the bottom of the view. Alternatively, you can reach out to us via email at delete@nbackchallenge.com.
If you make a request, we have 30 days to respond to you, counting from the day we receive your request. Should you wish to exercise any additional rights or have any inquiries concerning your rights, please reach out to us at privacy@nbackchallenge.com.
You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. We provide links to the Estonian Data Protection Inspectorate, a list of EEA Supervisory Authorities, and the UK’s Information Commissioner’s Office. If you need any assistance regarding your rights, please contact us at our email: privacy@nbackchallenge.com
Data transfers
Rivuspurus OÜ does not sell personal data. Data are shared with third-party tools as outlined in this Privacy Policy, including Firebase, Apple Game Center, Google Play Games Services, Google Analytics, and Bugsnag. Data may also be shared with our IT services contractors as they work on our product.
Our Service is global by nature and your data may therefore be transferred internationally. To protect your data, we aim to store your data within the European Union and our data processors Firebase, Google Analytics, and Bugsnag use adequate safeguards such as standard contractual clauses approved by the European Commission. You can find details about international data transfers by our third-party tools in their respective legal documentation. For more information, please review the Firebase Data Processing and Security Terms, the Crashlytics Data Processing and Security Terms, and the SmartBear Data Processing Addendum. Also, we have standard contractual clauses with our IT services contractors outside the European Union.
Age limits
The age limits for using the Services are set out in the first section of the N-Back Challenge Terms of Use. Please refer to that document.
How to contact us
If you have any questions about this privacy policy or the data we collect, or if you would like to exercise one of your data protection rights, please do not hesitate to contact us at our email: privacy@nbackchallenge.com
Changes to our privacy policy
Rivuspurus OÜ keeps its privacy policy under regular review and places any updates on the N-Back Challenge website.