Rich WorldPrivacy policy
Last updated 15 October 2026.
1. Who is responsible for your data
Rich World is made by Wellmate Group Ltd, registered in England and Wales (company number 17434611), 27 Stow Hill, Pontypridd, Wales CF37 1RZ. We are the data controller for the personal data described here. Contact us about privacy at privacy@wellmategroup.co.uk, or about anything else at daniagwunobi1@gmail.com.
2. What we collect, and why
| Data | Why | Legal basis |
|---|---|---|
| Your email address, or the account identifier from Google or Apple sign-in. If you play as a guest without signing in, only a random account identifier | To create your account and let you sign in securely | Contract |
| Whether you passed our 18+ check. We check your date of birth once and do not keep it. If the answer is under 18, we also note that against the app install (a random code, not your device's hardware), so a new account cannot be started on it | Rich World is for adults only | Legal obligation and legitimate interests |
| Your display name (a game name, not your real name) and the country you choose | Shown to other players on the Rich List, in the lobby and in matches | Contract |
| Gameplay records: scores, head-to-head matches and their moves, your Gold Coin balance and history (including Gold Coins you send or receive and any short message you add), holdings, businesses, competition entries, follows and blocks | To run the game, settle matches fairly and keep accurate records | Contract |
| A random identifier for each installation of the app. It is not linked to your phone's hardware, but from app version 1.1 it is kept in your phone's secure storage, so it may stay the same if you delete and reinstall the app | To detect cheating and multiple accounts, and to give the welcome bonus only to the first accounts on a device | Legitimate interests (fair play and security) |
| A one-way hashed version of your IP address at sign-up. We never store the IP address itself, and we delete the hash after 30 days | To detect fake accounts, for example many accounts created from one place in a short time. It is only used to flag accounts for a person to review, never to block anyone automatically | Legitimate interests (fraud prevention) |
| Whether your email address is verified (for accounts that sign in with email and password) | New accounts verify their email before sending Gold Coins or playing for them, to stop fake accounts | Legitimate interests (fraud prevention) |
| App integrity checks: from app version 1.1, Google Play Integrity (Android) and Apple App Attest or DeviceCheck (iPhone), through Firebase App Check, confirm that requests come from the genuine Rich World app on a real device. We receive only a short-lived pass/fail token, not information about your device's contents | To protect the game and other players from modified apps, bots and fake accounts | Legitimate interests (security and fraud prevention) |
| Chat in matches: the preset phrases and emotes you send (and, where text chat is switched on, the messages you type) | To let players talk during a game, and to filter and moderate what is said | Contract, and legitimate interests (keeping players safe) |
| Reports you make, moderation decisions about your account or messages, and appeals you file | Moderation, and handling your appeal | Legitimate interests and legal obligation (Online Safety Act 2023) |
| A push notification token for your device, and which notification groups you switched off | To tell you when it is your move, when someone challenges you, and about your season pass. You can turn notifications off in Settings or in your phone's settings | Consent (your phone asks first) |
| Error reports from the app: the error message, the app version and whether it is Android or iPhone. They do not include your messages or anything you typed | To find and fix crashes | Legitimate interests (keeping the app working) |
| Purchases: if you buy Remove ads, we receive the store's order or transaction ID and the product (not your card details) to unlock it on your account | To turn ads off for the Rich World account that bought it, let you restore it on another device, and turn ads back on if the purchase is refunded | Contract |
| Which version of our terms you accepted, and when | To show that you agreed to the terms | Contract and legal obligation |
| Version 1.0 of the app only: usage statistics (Google Analytics for Firebase), only if you switched this on in Settings. Version 1.0.1 and later do not collect them | To improve the game | Consent |
| Advertising data handled by Google AdMob: your device's advertising identifier, IP address and how you interact with ads | To show the ads that keep Rich World free, and optional "watch an ad" rewards | Consent for personalised ads; legitimate interests for non-personalised ads and ad-fraud prevention |
3. Ads and your consent
Rich World is free to play. It is paid for by a small number of ads from Google AdMob, never by players. We keep ads light: a banner on a few screens, an occasional full-screen ad between games, and rewarded ads only when you choose to watch one. Where the app offers it, a Remove ads subscription (monthly or yearly) turns off banners and full-screen ads while it is active; rewarded ads stay available if you want them.
When you start using Rich World we tell you that it shows ads. If you are in the UK, the European Economic Area or Switzerland, Google's consent form asks whether ads may be personalised using your data before any ad is shown. If you do not agree, you still get ads, but they are not personalised. You can change your choice at any time in Settings → Ad privacy choices. On iPhone we do not ask to track you across other companies' apps and websites. On Android you can reset or delete your advertising ID in your device settings.
4. What we do not do
- We do not sell your personal data, ever, to anyone.
- You cannot buy Gold Coins with real money, and Gold Coins cannot be cashed out. The only thing you can buy is Remove ads, which never gives Gold Coins or anything else in the game.
- We do not use your data to train artificial intelligence models.
- We do not knowingly let anyone under 18 play; anyone who fails our age check is blocked.
5. Who processes your data for us
Cloudflare (our game servers, database and this website), Google Firebase (sign-in, push notifications through Firebase Cloud Messaging, app integrity checks through Firebase App Check, and optional analytics in app version 1.0 only), Apple (sign-in, push notifications, App Attest / DeviceCheck app integrity checks and App Store payments for Remove ads on iPhone), Google Play (Play Integrity app integrity checks and Google Play payments for Remove ads on Android), Google AdMob (ads), and Google (sign-in). Some of them process data outside the UK, for example in the European Union and the United States. Those transfers are covered by appropriate safeguards, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses.
6. How long we keep things
| Data | Retention |
|---|---|
| Your account and gameplay records | While your account exists |
| Results other players depend on (finished matches, competitions, Gold Coins they received from you) | Kept under "Deleted player", with no link to you, after you delete your account |
| Chat messages | Deleted automatically after 30 days |
| Error reports | Deleted automatically after 30 days |
| The hashed IP address from sign-up | Deleted automatically after 30 days |
| The app installation identifier and which accounts used it | While those accounts exist; your link to it is removed when you delete your account |
| Push notification tokens | Until you sign out, delete your account, or the token stops working |
| Remove ads purchase records (the store's order or transaction ID, the product and the store) | While your account exists; after you delete your account they are kept without a link to you, so the purchase can be restored on a new account and refunds can be handled |
| Moderation, appeal and fraud records | Kept without a link to your account after deletion |
| Server logs | Up to 30 days |
7. Your rights
Under the UK GDPR and the Data Protection Act 2018 (and the EU GDPR if you live in the EU) you can access your data, correct it, delete it, restrict or object to how it is used, and ask for a copy to take elsewhere. You can delete your account at any time in Settings → Delete account, or see how to delete your account. For other requests, email privacy@wellmategroup.co.uk. You can complain to the Information Commissioner's Office at ico.org.uk, or to your local data protection authority.
8. Security
All traffic between the app and our servers is encrypted. Every request is checked on our servers, not by the app's screens. Balances can only be changed by our servers, never by the app. We never store passwords in readable form; sign-in is handled by Google Firebase, Google and Apple.
9. Children
Rich World is for adults aged 18 and over. It is not directed at children, and we do not knowingly collect personal data from anyone under 18.
10. Changes
We will update this page when the game changes and change the date at the top. Where a change materially affects how your personal data is handled, we will tell you in the app.
11. Who we are
Wellmate Group Ltd, registered in England and Wales, company number 17434611. Registered office: 27 Stow Hill, Pontypridd, Wales CF37 1RZ. Privacy: privacy@wellmategroup.co.uk. Support: daniagwunobi1@gmail.com.