Privacy Policy

Who we are

NextRival is operated by Banana Door (“we”, “us”, or “our”). For privacy questions or requests, email contact@bananadoor.com.

Data we access or collect

Account and profile

NextRival creates an installation-based account without asking for an email address or password. We collect random account and installation identifiers, a one-way device-binding value, platform and app version, authentication records, creation and last-seen times, your editable alias, and any country or city label you choose to provide. Country leaderboard participation requires separate confirmation.

Optional Google recovery

If you choose to link Google for account recovery, Google verifies your identity and we retain a keyed one-way hash of the Google account subject identifier plus the provider and link time. We do not need or retain your Google password, and NextRival does not require your email address for this feature.

Location and motion on your device

During an active outdoor session, NextRival accesses precise foreground location and motion sensors to measure movement, detect Sprint, Stop and 180 responses, reject unusable samples, and calculate a score. Raw GPS coordinates, routes, bearing history and raw motion samples stay on your device. They are not sent to or stored by the NextRival server.

The app may send derived, privacy-safe evidence including valid and ignored distance, timing, top speed, maximum acceleration, direction-change count, GPS and motion sample counts, best GPS accuracy, active-motion time, command outcomes, response times, confidence and integrity status. These values do not contain a route.

Competition and progression

We collect matchmaking tickets, format and command-script versions, readiness, privacy-safe live progress, round evidence and scores, wins and losses, opponent type, disconnect or withdrawal events, ratings and rating changes, ranks, match history, personal records, achievements, consistency progress, leaderboard privacy choices, moderation state and related audit records. This is used to operate and explain fair competition.

Privacy-safe replays

If you consent, an accepted performance may become a replay opponent. A replay contains scalar progress, command outcomes, evidence and scores—not coordinates or a raw route. Eligible replays expire after the configured retention period, currently no more than 90 days, and are removed sooner when consent is withdrawn or the account is deleted.

Purchases and entitlements

Google Play processes Android payments. We do not receive full payment-card details. To verify and restore purchases, we process the product identifier, protected purchase token and its hash, Google order identifier where supplied, purchase and verification times, acknowledgement and entitlement state, and revocation or refund status.

Technical, security and service data

Our hosting and monitoring systems may process IP address, request time, endpoint, response status, connection and error information, service performance, rate-limit events and security identifiers. Production telemetry is configured to exclude raw coordinates, routes, raw sensor streams, authentication tokens and request bodies containing movement evidence.

How we use data

• create, authenticate, recover and secure your installation-based account;
• match rivals, synchronize starts, run sessions and calculate deterministic results;
• maintain ratings, progression, privacy-controlled leaderboards and account history;
• provide, restore and reconcile purchased cosmetics or analytics;
• detect invalid evidence, cheating, fraud, abuse and service disruption;
• diagnose failures, monitor reliability and improve NextRival; and
• comply with legal obligations and enforce applicable terms.

What other players can see

A rival may see your alias, rank, rating, optional confirmed country, readiness, privacy-safe provisional comparison, command progress and match result. Eligible leaderboard entries may show alias, rank, rating, percentile and an optional confirmed country, subject to your in-app visibility choices. Players do not receive your route, coordinates, exact location, device details, age or live-location map.

NextRival discloses whether the opponent was live, a real replay, or a calibrated synthetic performance. Synthetic rivals are not fake player accounts and do not appear on player leaderboards.

Service providers and sharing

We use service providers only where needed to operate NextRival. Microsoft Azure may host the API, database, realtime messaging, secrets and service monitoring. Google may process identity verification when you choose recovery and Google Play handles app distribution, purchases, refunds and platform security. Those providers process information under their own terms and our applicable service arrangements.

We do not sell personal data and NextRival contains no advertising SDK. We may disclose information when required by law, to protect users or the service, or during a business transfer subject to applicable safeguards.

Retention and deletion

We retain active account, authentication, competition, progression, purchase and entitlement data while needed to provide and secure NextRival. Access and refresh credentials expire or are revoked. Privacy-safe replay performances expire within the configured period, currently up to 90 days, unless removed earlier.

Deleting your account removes the active profile; installations and authentication records; linked recovery identity; ratings, privacy settings, progression and entitlements; matchmaking and match records; live progress; replays; and account-linked purchase records from active NextRival systems. A replay already referenced by another completed result may retain only a neutral “Deleted replay” label so that the other player’s result remains intelligible.

Aggregated or de-identified statistics that no longer identify you may remain. Residual copies in protected infrastructure backups are isolated from normal use and expire according to the applicable backup schedule. Narrow records may be retained longer only where required for security, fraud prevention, disputes, accounting or law. Google Play controls its own transaction records.

Security

Production connections use HTTPS. Server-side credentials and linked identity subjects are hashed; purchase tokens are protected; Android credentials use platform-protected storage; access is restricted; and APIs use authentication, rate limiting and bounded request sizes. No system is perfectly secure, but we maintain safeguards appropriate to the service and the data it handles.

Your controls and rights

In the app you can edit your profile, choose leaderboard visibility, confirm or remove country visibility, consent to or withdraw replay reuse, link or unlink Google recovery, sign out all sessions, save a JSON account export, and permanently delete your account and local race ledger.

Depending on where you live, you may also have rights to access, correct, object to, restrict, export or erase personal data. Use the in-app deletion control to erase your account. For other privacy questions or requests, email contact@bananadoor.com; we may need to verify that you control the relevant account.

Age and safety

NextRival’s initial release is intended for people aged 16 and over. We do not knowingly offer the service to children under 16. A parent or guardian who believes a child has provided data should contact us.

International processing and policy changes

Data may be processed in countries other than your own, with safeguards required by applicable law. We may update this policy as NextRival, its providers or applicable requirements change. We will update the date above and provide additional notice when a change is material.

Contact

Banana Door
Privacy and support: contact@bananadoor.com
App: NextRival · Android package: com.bananadoor.nextrival