Privacy policy

The controller of your personal data is SIA "Korp Agency", reg. No. 40203595782, legal address: "Jugla 1" - 8, Stopiņu pagasts, Ropažu novads, LV-2130, Latvia. For questions about data processing, write to info@ramble.global.

Sign-up form for businesses. Name, email address and company name (required), phone number and website (optional). We need the required fields to contact you; without them the form cannot be sent. Purpose — to contact you and prepare an offer for a Ramble campaign. Basis — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or, if you apply on behalf of a company, our legitimate interest in contacting the company you represent (Article 6(1)(f) GDPR). We keep it for up to 24 months after our last contact; if we sign a contract — for the term of the contract and as long as the law requires.

IP address when you send the form. Purpose — protection against spam and abuse of the form. Basis — our legitimate interests (Article 6(1)(f) GDPR). It is deleted automatically within about 5 minutes.

Technical data. When you open the website, our hosting provider's servers process your IP address and browser data in order to show and protect the site. Basis — our legitimate interests (Article 6(1)(f) GDPR). This data is kept briefly, in line with the provider's terms.

Analytics — only with your consent. If you accept analytics cookies, the website uses Google Analytics to understand which pages are visited and how the site is used. For this it processes a pseudonymised device identifier, the pages you visit, the type of device and browser, and your approximate location (country or city level). Advertising features and Google signals are switched off. Basis — your consent (Article 6(1)(a) GDPR). Google Analytics data is kept for up to 14 months. You can withdraw your consent at any time (see the cookie policy).

Telegram account data. Your Telegram user ID, name, username and language setting, which Telegram passes to the app when you open it. Purpose — to create your account and run the game. Basis — performance of the contract (Article 6(1)(b) GDPR). Without this data we cannot provide the game. We keep it for as long as you have a Ramble account.

Profile data you provide yourself (for example your email address). Purpose — your profile and contacting you. Basis — performance of the contract. We keep it for as long as you have a Ramble account.

Location and movement. Your device's GPS location and the distance you walk. Purpose — to show you on the map, find the nearest rewards, check whether you are on the spot and credit Gold for the distance walked. Basis — performance of the contract; you allow access to your location in Telegram and in your device settings and can switch it off at any time, but the main game features will then not work. We keep location data for no longer than 12 months, then delete or anonymise it.

Game data. Campaigns viewed and completed, task answers, coupons collected and used, Gold, diamonds, XP, level, leaderboard position and invited friends. Purpose — running the game, handing over rewards and leaderboards. Basis — performance of the contract. We keep it for as long as you have a Ramble account. Other players see your Telegram name or username and game results on the leaderboards.

Fair-play and security data. Device type, operating system, app version and signs of fraud (for example GPS spoofing or multiple accounts). Purpose — to prevent fraud and protect players and businesses. Basis — legitimate interests. We keep it for no longer than 12 months. We also check for signs of fraud automatically: such a check may temporarily hold back a reward claim, but a decision to close an account is always taken by a person. We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you.

Campaign statistics for businesses. Businesses see the results of their campaigns in aggregated form (for example how many players viewed, collected and used a reward, and combined survey answers), from which no individual player can be identified. Basis — our legitimate interest in reporting campaign results to businesses (Article 6(1)(f) GDPR).

Contact details you choose to give a business. If in a task you choose to give a business your contact details (for example by signing up for its news), we pass them to that business with your consent (Article 6(1)(a) GDPR). The business then processes them as a controller under its own privacy policy; you can withdraw your consent by contacting the business.

After your account is deleted. When your account is deleted (at your request, after you withdraw from the agreement or because we close it), we delete or anonymise your Telegram account, profile, game and location data within 30 days. Fair-play and security data and correspondence are kept for the periods stated in this policy.

When you write to us, we process your email address and the content of your message to reply and resolve your question. Basis — performance of the contract or our legitimate interests, and for complaints also a legal obligation. We keep the correspondence for up to 3 years after the matter is resolved.

We do not sell personal data. It is only received by:

• IT service providers that run the website and app on our behalf — website hosting (Lovable), database and server functions (Supabase), our email service, delivery of email notifications (Resend) and, if you consent, analytics (Google Ireland Limited). They process the data only on our instructions and under data processing agreements;
• Telegram, on whose platform the app runs; Telegram processes data under its own privacy policy;
• businesses — only aggregated statistics, or contact details you choose to give them (see section 3);
• other players — your Telegram name or username and game results on the leaderboards;
• public authorities and courts where the law requires it.

Some service providers or their sub-processors may process data outside the European Economic Area, for example in the United States. In that case data is transferred on the basis of a European Commission adequacy decision (such as the EU–US Data Privacy Framework) or standard contractual clauses approved by the European Commission. You can get a copy of these safeguards by writing to info@ramble.global.

On the website we only use the browser storage it needs to work and — only with your consent — Google Analytics cookies. Which cookies we use, how long they are kept, who receives the data and how to change your choice is explained in the cookie policy.

The Ramble app may be used from the age of 18. We do not knowingly collect data from minors; if we find out that an account belongs to someone under 18, we close it and delete the data.

Under the GDPR you have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data erased ("right to be forgotten");
• restrict processing;
• receive your data in a machine-readable format and pass it to another controller;
• object to processing based on our legitimate interests;
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

Right to object. You can object at any time to processing based on our legitimate interests (for example fraud prevention or protecting the form). We then stop the processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or the data is needed to establish, exercise or defend legal claims.

To use these rights, write to info@ramble.global. We will reply within one month (in complex cases we may extend this by two further months and will tell you if we do); to protect your data, we may ask you to confirm that the account is yours.

You have the right to lodge a complaint with the Data State Inspectorate of Latvia (Elijas iela 17, Riga, LV-1050) or with another EU supervisory authority in your country of residence.

We protect data with technical and organisational measures: encrypted connections (HTTPS), access limited to those who need it for their work, and trusted service providers.

We may update this policy, for example when the service or the law changes. The date of the version in force is shown at the top of the page; we will announce significant changes in the app or on the website.

SIA "Korp Agency", reg. No. 40203595782, "Jugla 1" - 8, Stopiņu pagasts, Ropažu novads, LV-2130, Latvia. Email: info@ramble.global.