App privacy policy

Monopoly Run “Live” is a not-for-profit event run by volunteers for Scouts and Guides across the UK. The data controller for the information described here is Matt Collins, who runs the event on behalf of the organising team. Our contact details are at the end of this page.

The app is the game. It signs your team in with a code from your team pack, confirms you are at a property when you check in, tracks your bank balance, shows the leaderboard for your game, and lets you submit quiz answers and challenge photos. It also has a live chat to Control for help on the day.

The app collects only what the game needs:

• Your team. Your team name, your group’s name, your bank balance, your check-ins, your quiz answers and your progress through the game. These are recorded against the team, not against any individual player. The app also receives the two contact phone numbers your leader gave for the team when booking, so Control can reach you.
• Location. Your phone’s position when you open a property page and when you check in. See the next section.
• Challenge photos. Photographs your team takes in the app and submits for challenges.
• Live chat. Anything you send to Control through the in-app chat, including any photos or voice messages you attach.
• Your device. The phone’s model and operating system version, a random identifier the app creates for your install, and a token that lets us send push notifications to that phone.
• Crash and error reports. If the app crashes or a request fails, a technical report is sent so we can fix it. It includes the device details above, what the app was doing and which team was signed in.

The app has no fields for your name, email address, phone number or date of birth, and it does not read your contacts. The only thing you type in is your team code.

The app asks for permission to use your location while you are using it. It reads your position at two moments: when you open a property page, to show how far away you are, and when you press check in, to confirm you are there. It does not track you continuously and does not use your location in the background.

When you check in, the app sends your position, its accuracy and whether the phone reports the location as simulated, together with the property you are checking in at. We keep a record that your team checked in at that property and when. We do not keep the coordinates. Only the one nominated phone per team performs check-ins.

Team challenges involve taking a photograph in the app and submitting it. Photos are taken with the camera, not chosen from your library. The app also saves a copy to your phone’s own photo gallery, which stays on your phone and is under your control.

Submitted photos are stored on our servers in London. They are viewed by the Control team while marking, and the team can see its own entries in the app. Anyone in your team who cannot appear in photographs should stay out of shot; teams are not penalised for members missing from a challenge photo. After the run, the group leader is sent a link to a results page for each team, which includes that team’s photos. The page is protected by the team code rather than a password, so treat the code as private. Each photo also has a web address that works without a login, so anyone the link is shared with can open it.

Because of who takes part, photographs will usually contain young people. When marking, Control can flag a photo as suitable for publicity. We may use flagged photos in our own material, such as this website and our social media, to promote future runs. If you do not want your group’s photos used in this way, tell us through the help centre and we will not use them.

The chat in the app is provided by Crisp, a helpdesk service based in France. When you open a chat, the app passes Crisp your team name, group name, team login code, the team’s contact phone numbers and a link to your team’s page on our dashboard, so Control can help without asking who you are. If you attach a photo or voice message, the app asks for camera, microphone or photo library access at that point. Conversations are kept in our helpdesk so we can look back at problems.

We use this information to run the game your group has booked: signing you in, confirming check-ins, scoring challenges, keeping the leaderboard up to date, sending you notifications during the run and answering you in live chat. We use crash reports to keep the app working.

Our lawful basis under UK GDPR is legitimate interests: running the event your group has booked, keeping the app working and keeping players safe on the day. For the leader who made the booking, it is also performance of our contract with them. We do not use anything collected in the app for marketing.

We do not sell personal data, and the app carries no advertising. The app talks to these services:

• Amazon Web Services, in London, which hosts our servers, database and challenge photos and sends our email.
• Google Firebase, for push notifications, remote settings, crash reports and confirming that requests come from a genuine copy of the app.
• Sentry, for crash and error reports.
• Crisp, for live chat with Control, as described above.
• Laravel Cloud, which hosts the server that pushes live updates such as the leaderboard and announcements to the app.
• Google Maps, to draw maps in the app.

Google and Sentry may process data in the United States. Where they do, the transfer is covered by the UK addendum to the standard contractual clauses. We may also share information if the law requires it.

The app does not show advertising and contains no advertising or analytics tracking. It does not sell data. It does not track your location in the background. It does not read your contacts, calendar, messages or photo library. Face ID and fingerprint login are handled by your phone and never leave it.

Your team login is stored in your phone’s secure storage, and your login expires shortly after your team’s finish time. Everything the app sends travels over an encrypted connection. Access to submitted photos and chat is limited to the Control team. No method of storage or transmission is completely secure, and we will tell you if a problem affects your data.

• Game records. Check-ins, quiz answers, bank balances, device records and push notification tokens are kept until we clear the booking system and the game after each run, ahead of the following year’s bookings opening in November. Groups register afresh every year.
• Challenge photos. Kept after the run for marking queries and the results page, then deleted ahead of the following year’s run. Photos flagged for publicity may be kept longer for that purpose.
• Live chat. Conversations are kept in our helpdesk until the following year’s run.
• Crash reports. Deleted by Sentry and Google after 90 days.
• Results. Published results show team name, group, position and bank balance only, and stay on this website as an archive.

Most players are under 18, and the minimum age is 10. Places are booked by an adult leader for their group, and the team login is issued to the team rather than to individuals. The app does not ask for a player’s name, and check-ins, quiz answers and photos are recorded against the team.

During the run, leaders see the same team information as their players. After the run, the leader is sent the results page described above. A parent, carer or young person can ask us for a copy of what we hold or ask us to delete it, using the contact details below. We may check with the group leader to confirm the request relates to their team.

You can ask for a copy of the information we hold, ask us to correct it, ask us to delete it, and object to or restrict how we use it. To do so, contact us through the help centre. We will reply within one month. Because the app holds information by team rather than by person, we may need your team name and group to find it.

You can also complain to the Information Commissioner’s Office at ico.org.uk.

When we change this policy, the new version is published here with the date it takes effect. Earlier versions stay available from the list on this page.

Use our help centre. During the run, the live chat in the app is quickest.