RebelsFunding Legal

Coach Rebel Privacy Policy

Data efetiva: 24 agosto 2026

This Privacy Policy explains how personal data is collected, used, stored, shared and deleted when the Discord application and bot known as Coach Rebel (O "Aplicativo") is used, including the Rebel XP system, community activities, invite functions, reward claims, moderation tools and AI-assisted replies.

The App is operated by RIFM, sro, with its registered office at Landererova 8, Bratislava - Staré Mesto 811 09, Slovak Republic, Company ID: 48 116 700, registered in the Commercial Register, Section Sro, Insert No. 166242/B ("RIFM", "we", "us" or "nosso").

This Policy applies specifically to Coach Rebel. Processing connected with the RebelsFunding website, RF Client Zone, RF-Trader, purchases and other RebelsFunding services is described in the RebelsFunding Data Protection Policy.

1. Controller, scope and Discord

RIFM is the controller of personal data that it receives or creates through Coach Rebel. Privacy, access, correction, objection and deletion requests may be submitted using the contact details shown at the end of this Policy.

Coach Rebel operates through Discord and receives permitted data through Discord's APIs. Discord separately processes account, device, usage, message and other platform data under its own Política de Privacidade. We do not control processing independently performed by Discord, and this Policy does not replace Discord's policies.

2. Personal data we process

Depending on the function used, the user's choices and the permissions granted to the App, we may process:

Discord user ID, username, display name, avatar, server membership, roles, permissions and account creation time;
server ID, channel ID, message ID, role ID, interaction ID, invite code, timestamps and related technical identifiers;
member join, leave, rejoin and role-update events needed for onboarding, access management, invite verification, moderation and anti-raid protection;
messages written in selected channels where Coach Rebel or Rebel XP is enabled, messages directed to or mentioning the App, and limited recent conversation context;
commands, button clicks, reactions, forms, poll votes, quiz answers, role requests and other App interactions;
price predictions, participation records, results, differences, rankings, response times and activity timestamps;
Rebel XP season, total XP, level, rank, progress, streaks, activity source, transaction history, daily limits, verified or pending invites, reward progress and final results;
technical message fingerprints, hashes or derived similarity signatures used to detect duplicate, copied or substantially similar XP activity, together with the related user, message, channel and time identifiers;
invite relationships and verification data, including the apparent inviter, invited member, invite use, join and leave time, account age, verification status, rejection reason and competition score;
social-task data, including the user's social username or profile link, submitted proof URL, task, review status, reviewer and rejection reason;
reward data, including reward level, reward name, claim status, private promotional code, assignment time and claim history;
a RebelsFunding email address if a user voluntarily submits it through the Evaluation Trader role request form;
moderation and security data, such as warnings, timeouts, kicks, bans, reasons, moderator identifiers, anti-raid alerts and report records; and
temporary session, rate-limit, error, audit and diagnostic data needed to operate, secure and troubleshoot the App.

We receive this data directly from users, through Discord's APIs, from authorised server administrators or moderators, from an external service selected by the user, or automatically when the App creates an operational, XP, activity, reward, invite or security record.

Coach Rebel does not request Discord passwords, authentication tokens, payment card details, crypto wallet seed phrases, private keys or full identity documents. Do not submit these or other sensitive information through the App. Where an official form requests limited information, provide only what is expressly requested.

3. Finalidades e bases legais

We process personal data only where necessary to:

provide a requested reply, command, role, activity or other App function;
welcome members, manage access and operate the RebelsFunding Discord community;
operate voluntary Rebel XP participation, calculate provisional XP and levels, maintain profiles and display rankings;
validate activity, apply cooldowns and limits, detect duplicate or artificial participation and protect fair play;
administer and review reward claims, promotional codes, social tasks and submitted proof;
operate invite verification and an Invite Competition where the function is enabled and permitted;
run polls, quizzes, games, price predictions and other community activities;
provide AI-assisted informational and educational replies;
moderate servers, detect raids or abuse, enforce rules and protect users and systems;
review role requests, reports, complaints and correction or deletion requests;
maintain, secure, test and troubleshoot the App; and
comply with law or establish, exercise or defend legal claims.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide a function requested under the Coach Rebel Terms of Service, Article 6(1)(f) GDPR for our legitimate interests in operating and protecting the community, preventing fraud, maintaining accurate activity records and resolving disputes, Article 6(1)(c) GDPR where processing is required by law, or Article 6(1)(a) GDPR where we expressly request consent for an optional function.

We do not sell Discord API data, disclose it to data brokers or advertising networks, or use it for unrelated advertising. We do not use Discord data to make binding decisions about purchases, KYC, payouts, trading-rule violations, RCF cooperation or other customer or financial matters.

Rebel XP is a community gamification system. Automated scoring creates provisional community records. Where a promotional reward is offered, final eligibility and issuance may be subject to separate human review or another independent check and will not be based solely on automated profiling of a Discord user or the user's relationships.

4. Discord permissions, intents and message content

Coach Rebel may use the following Discord events and intents where required for enabled functions:

Guild Members Intent: member events, onboarding, roles, access management, invite verification, moderation and anti-raid protection;
Message Content Intent: selected channels where Coach Rebel or Rebel XP is enabled, so the App can understand questions, direct mentions, relevant conversation context and qualifying XP messages;
Guild Message Reactions: polls, role interactions, specified official-post reactions and related community functions; and
Guild Invites: invite snapshots, apparent inviter detection, verification and an enabled Invite Competition.

The App keeps a rolling in-memory context of up to thirty recent messages for each enabled channel. Newer messages replace older messages and the context is cleared when the App process restarts. It is used to understand the current conversation and is not maintained by RIFM as a permanent message archive.

A normal AI request may use the current message and up to eight recent context messages from the same channel. XP validation may create a technical fingerprint or derived signature, but the XP database is not intended to store a permanent full-text copy of every scored message.

Coach Rebel is not configured as a general direct-message chatbot. The App may send a directly related Discord direct message where a user initiated a function, for example to notify the user that submitted social proof was approved or rejected.

XP scoring applies only in designated channels and during an active season, and only to users who meet the published participation and role requirements. Users may use the available opt-out mechanism or contact us to stop optional future XP processing.

5. AI-assisted replies and OpenAI

Coach Rebel uses the OpenAI API to generate certain replies. When an AI reply is requested, the App may send the current message, limited recent context from the same channel and the usernames associated with those messages to OpenAI.

We do not intentionally include Evaluation Trader email addresses, payment information, passwords, Discord tokens, identity documents, private reward codes or unrelated profile data in a normal AI request. Users should still avoid including sensitive or confidential information in messages sent to the App.

We do not use Discord message content to train our own AI models and do not opt in to voluntary sharing of Coach Rebel API inputs or outputs for OpenAI model training. OpenAI states that API data is not used to train its models by default unless the API customer expressly opts in.

Where supported, Coach Rebel configures OpenAI Responses API requests with optional response storage disabled. OpenAI may still retain limited customer content in abuse-monitoring logs under its applicable data controls, generally for up to thirty days unless different approved controls apply or longer retention is required to investigate abuse or comply with law. Further information is available in OpenAI's API Data Controls.

6. Rebel XP processing and public visibility

During an active Rebel XP season, the App may automatically evaluate whether an activity satisfies published technical conditions, including the activity type, channel, minimum content, evidence, cooldown, daily limit, duplicate or similarity rule, role and whether the action was already processed.

An eligible activity may create an XP transaction containing the Discord user ID, season, source, source reference, amount, XP before and after the transaction, level before and after the transaction, reason and time. Moderators may review and correct material results.

Depending on the published season rules, public Discord panels or announcements may display a participant's Discord mention, display name, avatar, rank, level, total XP, progress, cosmetic achievement, unlocked reward name, season winner and final TOP 3.

Private promotional codes, proof URLs, internal anti-abuse indicators, detailed moderation information and other information designated as private are not intended to be displayed publicly. Reward claims are normally shown to the relevant user through an ephemeral or private response.

7. Feature-specific processing

Roles and onboarding. Discord user ID, membership, role and permission data may be used to assign, remove or review roles and provide access to selected community areas.

Evaluation Trader requests. If a user submits this optional form, the App processes the submitted RebelsFunding email together with the Discord user ID and review status. The request is sent to a restricted review channel for authorised reviewers.

Enquetes e questionários. The App may associate a Discord user ID with a vote or answer, score, response time and ranking while the activity and its results remain available. Results may display an aggregate result, Discord mention, username, ranking or score.

Price predictions. The App processes Discord user ID, prediction, submission time, actual result, difference and rank. Completed results may include display name, winner information and relevant channel, message and moderator identifiers.

Invite functions. Where enabled, the App may compare stored invite-use information with a member join event, identify an apparent inviter and verify account age, continued membership, role, inviter eligibility, leave and rejoin activity and competition timing. Invite records may show pending, verified or rejected status and a reason.

Social tasks. A user may voluntarily submit the user's social username, profile link or proof URL. The submission may be posted in a restricted review channel and associated with the reviewing staff member, decision, time, rejection reason and awarded XP.

reais. A successful claim may associate a private promotional code with a Discord user, season and reward level. The user may retrieve claimed codes through a private reward history. Public logs may record that a reward was claimed without revealing the private code.

Moderation and security. The App may process member and moderator identifiers, action, reason, duration, report and event information. Relevant records may be posted to a restricted security or review channel.

8. Storage and retention

We keep personal data only for as long as reasonably necessary for the relevant function, fair-play review, security, dispute handling, legal compliance or legal claims. The following periods are normal targets and may be shortened where data is no longer needed or extended where a documented legal, security, fraud or dispute reason applies:

Discord-hosted messages, reactions, review posts, moderation logs and result posts remain subject to Discord and server deletion practices and may remain until deleted by a user, moderator, RIFM or Discord;
the rolling message context is limited to thirty recent messages per enabled channel and is cleared when the App process restarts;
OpenAI retention is described in Section 5;
temporary sessions, cooldowns and in-memory operational records expire, are removed by the App or are cleared when the process restarts;
active price predictions are stored until completion or cancellation, and completed prediction history is maintained as a rolling record of no more than one hundred completed activities;
XP message fingerprints and daily-limit records are normally deleted or anonymised no later than ninety days after the relevant season claim period ends;
identifiable XP profiles, transactions, leaderboard records and finalist records are normally retained during the season and for up to twelve months after its claim period ends;
pending, verified and rejected invite records are normally retained only for the verification, season, competition and dispute period and for no longer than twelve months after the relevant competition or season ends;
social proof URLs and social account information are normally deleted within ninety days after approval, rejection or the end of a permitted resubmission period, while limited review metadata may be retained for up to twelve months;
role-review information is normally deleted within ninety days after the decision unless needed for an active dispute or abuse-prevention purpose;
an assigned promotional code and claim record may be retained while the code remains valid and for up to twenty-four months after claim for user access, support, duplicate prevention, fraud review and legal claims; and
moderation, security, report and technical records are normally reviewed for deletion within twelve months, unless an active incident, restriction, dispute, legal obligation or legal claim requires longer retention.

When data is no longer needed, we delete or anonymise it. We will also update or delete Discord API data we control following a valid request from the user or Discord, unless retention is required by law or justified by an overriding lawful reason.

9. Recipients and international transfers

Personal data may be processed by or disclosed to:

Discord, as the platform through which the App operates;
OpenAI, as the provider used for AI-assisted replies;
hosting, infrastructure, database, backup, security and technical providers needed to operate the App;
authorised RIFM personnel and authorised server administrators or moderators;
an external platform selected by the user when the user voluntarily opens a link or completes a social task; and
professional advisers, courts, public authorities or law enforcement where legally required or necessary to protect rights and handle legal claims.

We do not sell Discord user data or disclose it to data brokers or advertising networks. Service providers may process data only for the relevant service and under applicable confidentiality, data-protection and security obligations.

Discord, OpenAI or another technical provider may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, Standard Contractual Clauses approved by the European Commission or another lawful safeguard.

10. Segurança

We use reasonable technical and organisational safeguards designed to protect personal data, including restricted administrative access, role and permission controls, protected review and security channels, separation of credentials from source code, encryption in transit, encryption of stored API data and backups where applicable, monitoring, duplicate controls and access limited to persons who need the data for an authorised purpose.

No system can guarantee absolute security. If an incident creates a legal duty to notify affected users, Discord or a supervisory authority, we will make the required notification and take reasonable remediation steps.

11. Automated actions and human review

The App may automatically assign a role, apply a cooldown or daily limit, detect duplicate or similar activity, calculate provisional XP and levels, update a leaderboard, identify an apparent invite source, verify published invite conditions, close an activity, detect unusual joins, post a security alert or execute a moderation command initiated by an authorised moderator.

These actions are community administration and gamification functions. They are not intended to produce legal or similarly significant effects under Article 22 GDPR and do not make binding decisions about purchases, customer accounts, payouts, KYC, refunds, trading-rule violations, RCF cooperation or financial services.

Where an automated result materially affects XP, ranking or access to a promotional reward, a user may request human review. An authorised reviewer may confirm, correct or reverse the result after considering the relevant activity and rules.

12. Your rights, deletion and opt-out

Subject to applicable law, You may request access, correction, deletion, restriction, objection, portability where applicable, withdrawal of consent where processing is based on consent, and human review of a material automated result. You may also lodge a complaint with a competent supervisory authority.

Send requests using the contact details shown below and use the subject "Coach Rebel Privacy Request". Include Your Discord user ID and the relevant server name so we can locate the correct records. Never send Your Discord password or authentication token. We may request reasonable information to verify Your identity.

Where an XP opt-out command, button or setting is available, You may use it to stop future optional XP scoring and public leaderboard participation. You may also contact us. Opting out does not automatically delete historical data, so submit a deletion request if You also want eligible historical records removed.

We normally respond within one month, subject to extensions permitted by law. A request to RIFM covers only data controlled by RIFM. For data independently controlled by Discord, use Discord's account tools or contact Discord. Deleting App data may not automatically delete content still stored on Discord where we cannot lawfully or technically remove it.

You may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Galvaniho Business Centrum II, Galvaniho 7/B, 821 04 Bratislava, Slovak Republic, or another competent authority where applicable.

13. Age, sensitive data, changes and contact

The App is not intended for anyone below the minimum age required to use Discord in the user's country. A parent or legal guardian who believes that a child has provided data improperly may contact us.

Do not use Coach Rebel to disclose health data, biometric data, political or religious beliefs, sexual orientation, criminal records, government identification numbers, passwords, payment credentials, private reward codes or other special or highly sensitive personal data. The App is not designed to process such information.

We may update this Policy to reflect changes to the App, Rebel XP, Discord requirements, providers, technology or law. The latest version will be published on this page with its effective date. Material changes may also be announced through the App or an official RebelsFunding Discord server.

This Privacy Policy should be read together with the Coach Rebel Terms of Service.

RIFM, s.r.o. / RebelsFunding
Landererova 8, Bratislava - Staré Mesto 811 09
Slovak Republic
IČO / Company ID: 48 116 700
[email protected]
rebelsfunding.com/contact