Privacy

Plain language. We'll keep this in sync with how the product actually works — when either changes, we update both.

What we collect

·Your .edu email, used to verify you're a student and to sign you in.
·Your school, derived from your email domain (one click to claim).
·Your match history on RivalU (which game, when, score, and the points it earned for your school).
·If you link a Riot account: your public Riot ID and the last 5 ranked matches' results from Riot's API. We never see your Riot password.

What we don't collect

·Your real name, unless you give it to us (e.g. on a Captain application).
·Your contacts, your phone's location, or your address book.
·Anything from your school account besides the email used to sign in. We don't read your inbox.
·Your password — we use magic-link / 6-digit-code sign-in, no passwords stored.

Third-party services we use

·Supabase — auth + database hosting (US region).
·Resend — transactional email delivery (your sign-in code).
·Riot Games API — only if you choose to link an account.
·Vercel — hosting + privacy-friendly analytics (no cross-site tracking).

Delete your account

Email hello@rivalu.app from your verified .edu address with the subject “Delete my account”. We'll wipe your profile, match history, and any linked Riot ID within 7 days, and confirm by email when it's done. Aggregate school totals (which don't identify you individually) stay.

Questions

Email us at hello@rivalu.app. If you want the verification details, see About.