Privacy Policy - Next Round

1. Who this policy covers

This policy covers the Next Round mobile apps for Android and iOS (the "Apps"). It explains information processed by the Apps and their integrated services. It does not describe separate practices for other websites or services unless they link to this policy.

The responsible party is K2026053345, a business registered in South Africa and trading as HiDesign. For privacy requests, contact support@hidesign.co.za or write to 77 Drysdale Rd, Johannesburg, Johannesburg, Gauteng, 2191, South Africa.

2. Accounts and information you enter

The Apps do not provide user account registration or sign-in. During gameplay, you may enter any player labels you choose. They are not verified and may be invented names or nicknames; if you enter a real person's name, it may identify that person. The Apps do not connect these labels to a sign-in account or verified real-world identity. The Apps also process game selections and settings such as selected packs, cards, themes, and language.

The Apps send gameplay events to Firebase Analytics. These events include the player labels entered for a game together with a generated game/session identifier, player count, pack and card identifiers or names, game mode, screen and feature interactions, ad-related actions, and subscription-screen or plan-selection events. We use these events to understand gameplay and inform product decisions, including considering a future feature that could show which players appear together most often; that feature is not currently available. We do not use these labels to verify a person's identity or associate them with a Next Round account. However, the game/session identifier and analytics SDK identifiers can distinguish events and app installations, so we do not describe this information as guaranteed anonymous. Do not enter a full legal name or sensitive information as a player label.

Game play and settings are primarily handled on the device. The Apps do not provide a feature for uploading photos, contacts, messages, or audio recordings. If you contact us by email, we receive the email address and the information you choose to include in your message.

3. Device, usage, and diagnostic information

The Apps include Google Firebase Analytics, Crashlytics, Performance Monitoring, and Remote Config. Depending on the service and device, these services may process app instance or installation identifiers, advertising identifiers, app version, device model and operating-system details, IP address or an approximate region derived from it, screen and feature usage, diagnostic events, crash traces, and performance measurements. Firebase Remote Config is used to retrieve app configuration. Crash reports may include technical context about what the app was doing when an error occurred.

The iOS App also initializes Microsoft Clarity. Microsoft describes its mobile SDK as collecting interaction information such as taps and gestures, app layout and screen information, device and app details, country or region, and errors to create session replays and heatmaps. Microsoft says the SDK sanitizes personal information and does not capture screenshots or video. Input-field masking and other capture rules depend on SDK behavior and project configuration; do not enter sensitive information into the Apps.

The Apps do not request access to your precise location, contacts, camera, microphone, or photo library in the code reviewed for this policy. Network providers may still receive an IP address when the Apps connect to their services.

4. Advertising and purchases

Both Apps use Google Mobile Ads (AdMob), including banner, rewarded, or interstitial ads. Google may process advertising or device identifiers, IP address, device and app details, ad requests, impressions, and interactions to deliver, limit, measure, and protect advertising. The data used and whether an ad is personalized can depend on your device settings, location, Google settings, and applicable consent signals. Google may use service providers and advertising partners under its own terms and privacy disclosures.

Subscriptions are handled through Google Play Billing on Android and Apple StoreKit on iOS. The relevant store processes payment details. The Apps do not receive your full payment-card number, but may receive purchase or subscription status and product information. Subscription-screen analytics can include the selected product or plan and, depending on platform, price and currency. Store account, billing, and purchase data are also subject to the applicable store's privacy terms.

5. Why we use information

• To provide gameplay, settings, content, and subscription features you request.
• To understand app usage and improve game flows and features.
• To diagnose crashes, detect reliability and performance problems, and maintain security.
• To deliver and measure advertising, including rewarded ads.
• To process and restore purchases through Google Play or Apple.
• To respond to privacy, support, or legal requests.

We do not sell personal information. We do not use player labels to contact players, verify their identity, or create app accounts.

6. Service providers and recipients

• Google provides Firebase services and Google Mobile Ads. Depending on the service, Google may act as a service provider or process information under Google's own terms and policies.
• Microsoft provides Clarity for the iOS App and processes interaction and diagnostic information for analytics and session replay features.
• Google Play and Apple provide app distribution and purchase services and process information needed for those services.

These providers may use affiliates and subprocessors as described in their own terms. Their notices are available from the Google Privacy Policy, Microsoft Privacy Statement, and Apple Privacy Policy.

7. POPIA and your choices

We process personal information in accordance with South Africa's Protection of Personal Information Act, 2013 (POPIA), and other applicable laws. The legal basis depends on the purpose and information involved, including providing a feature you request, a lawful business interest, consent where required, or a legal obligation. Use of an App is not treated as blanket consent to every type of processing.

The current Apps enable Firebase analytics and diagnostics at startup, and the iOS App initializes Clarity at startup. The Apps do not currently provide an in-app setting to disable or withdraw from these analytics and diagnostics. The iOS code reviewed does not request Apple's App Tracking Transparency authorization. Device-level ad privacy settings may limit some advertising uses, but do not disable all app analytics or diagnostics. These facts do not themselves establish that every processing activity has a valid lawful basis; the settings and consent approach must be reviewed separately.

POPIA rights apply to personal information relating to an identifiable person. The Apps do not create accounts or keep a directory that maps player labels to real identities. However, player labels are sent with generated game/session identifiers, and service providers may process installation, device, or network identifiers. We therefore do not claim that every event is anonymous or that no personal information could be processed. We assess each request based on the information involved and whether we or a provider can reasonably identify it as relating to you.

• Access: You may ask whether we hold personal information about you and request access to that information, subject to POPIA, applicable access procedures, and lawful limits.
• Correction, deletion, or destruction: You may ask us to correct, delete, or destroy personal information that is inaccurate, irrelevant, excessive, outdated, incomplete, misleading, obtained unlawfully, or that we are no longer authorised to retain or process, as provided for by POPIA. This right applies to information we can identify and control; information held by a provider may require a request to that provider.
• Objection: You may object, on reasonable grounds, to processing where POPIA provides that right. You may object at any time to processing for direct marketing. The Apps are not currently used to send direct marketing.
• Withdraw consent: If a particular processing activity relies on your consent, you may withdraw that consent. Withdrawal does not affect processing that took place before withdrawal or processing supported by another lawful basis.
• Complain: You may raise a concern with us or lodge a complaint with the Information Regulator of South Africa.

To exercise these rights, use the contact process in the next section. Because there are no accounts or real-name profiles, we may not be able to locate a particular analytics or diagnostic event using your identity alone. We may ask for limited details, such as the app and device involved and an approximate date, to assess a request; please do not include sensitive information unless it is necessary. We will explain if information cannot reasonably be identified, is controlled by a provider, or may lawfully be retained. Nothing in this policy limits rights provided by POPIA.

8. Requests, retention, and deletion

Because the Apps do not create accounts, there is no account to delete. Uninstalling an App or clearing its storage removes local app data from that device, but does not automatically delete information already sent to Google, Microsoft, Apple, or Google Play. The Apps do not currently include an in-app control for deleting individual analytics or diagnostic events.

To make a POPIA request, email support@hidesign.co.za with the subject "Next Round privacy request". Describe the request and identify the relevant app or device where possible. We may ask for proportionate information to verify the request. We will handle requests within applicable legal timeframes and explain if a request cannot be fulfilled in full. If we cannot identify the requested event data from the details available, we will explain that; you may need to contact a provider directly for information it controls.

Local settings remain on the device until cleared or removed with the App. Diagnostic, analytics, advertising, and session data are retained by each provider according to the service's configuration, retention controls, and terms. Retention periods differ by service; we do not currently provide an app-level control to delete these records. We will retain information under our control only for as long as reasonably needed for the purposes above or as required by law.

9. International transfers

Google, Microsoft, Apple, and their service providers may process information in countries outside South Africa, including the United States. Where a cross-border transfer is subject to POPIA section 72, it must be made only when a permitted condition and safeguards apply. Using an App does not, by itself, constitute consent to an international transfer. Contact us for information about a particular request or transfer.

10. Security

App connections to the services described above use encrypted network connections where supported by those services. We take reasonable steps to limit access to information under our control. No electronic transmission or storage method is completely secure. The providers' security controls and retention terms also apply to information they process.

11. Children

The Apps are intended for adults and are not directed to children under 18. The Apps do not ask for a user's age, and we do not knowingly seek personal information from children. If you believe a child has provided personal information, contact us at support@hidesign.co.za so we can assess the request and take appropriate steps.

12. Store disclosures and policy changes

Google Play's Data safety section and Apple's App Privacy information are separate disclosures and must accurately reflect the Apps, including third-party SDK behavior. This policy does not replace those store forms. We may update this policy when our processing changes or when needed to reflect legal requirements. The latest version and its effective date will be posted at this URL.

13. Contact

Responsible party: K2026053345, trading as HiDesign
Email: support@hidesign.co.za
Postal address: 77 Drysdale Rd, Johannesburg, Johannesburg, Gauteng, 2191, South Africa