Privacy Policy

Who we are

NextRival is operated by Banana Door (“we”, “us”, or “our”). For privacy questions or requests, email contact@bananadoor.com.

Data we access or collect

Account and profile

NextRival creates an installation-based account without asking for an email address or password. We collect random account and installation identifiers, a one-way device-binding value, platform and app version, authentication records, creation and last-seen times, your editable alias, and any country or city label you choose to provide. Country leaderboard participation requires separate confirmation.

Optional Google recovery

If you choose to link Google for account recovery, Google verifies your identity and we retain a keyed one-way hash of the Google account subject identifier plus the provider and link time. We do not need or retain your Google password, and NextRival does not require your email address for this feature.

Location and motion on your device

During an active outdoor session, NextRival accesses precise foreground location and motion sensors to measure movement, detect Sprint, Stop and 180 responses, reject unusable samples, and calculate a score. Raw GPS coordinates, routes, bearing history and raw motion samples stay on your device. They are not sent to or stored by the NextRival server.

The app may send derived, privacy-safe evidence including valid and ignored distance, timing, top speed, maximum acceleration, direction-change count, GPS and motion sample counts, best GPS accuracy, active-motion time, command outcomes, response times, confidence and integrity status. These values do not contain a route.

Competition and progression

We collect matchmaking tickets, format and command-script versions, readiness, privacy-safe progress, round evidence and scores, wins and losses, internal matchmaking classification, disconnect or withdrawal events, ratings and rating changes, ranks, match history, personal records, achievements, consistency progress, leaderboard privacy choices, moderation state and related audit records. This is used to operate and explain fair competition.

Competitive performance retention

An integrity-accepted ranked performance may be retained to support future matchmaking and competition. It contains scalar progress, command outcomes, evidence and scores—not coordinates or a raw route. Eligible performance records expire after the configured retention period, currently no more than 90 days, and are removed sooner when the account is deleted or the performance is no longer eligible.

Purchases and entitlements

Google Play processes Android payments. We do not receive full payment-card details. To verify and restore purchases, we process the product identifier, protected purchase token and its hash, Google order identifier where supplied, purchase and verification times, acknowledgement and entitlement state, and revocation or refund status.

Advertising and consent

The Android app uses Google AdMob to show restrained banner and post-result interstitial adverts and Google User Messaging Platform (UMP) to present applicable privacy choices. Google may process advertising identifiers, IP-derived approximate location, device and app information, consent choices, advert interactions, and advertising diagnostics under its own policies.

Before the first advert request, the app asks only whether the player is Under 18 or 18 or over. This answer is stored on the device and is used only to configure age-appropriate advert treatment; we do not ask for a birth date or send this age-band answer to the NextRival server. NextRival never supplies raw or derived GPS, routes, sensor data, match evidence, profile, account, or player identity as advert-request context.

Technical, security and service data

Our hosting and monitoring systems may process IP address, request time, endpoint, response status, connection and error information, service performance, rate-limit events and security identifiers. Production telemetry is configured to exclude raw coordinates, routes, raw sensor streams, authentication tokens and request bodies containing movement evidence.

How we use data

• create, authenticate, recover and secure your installation-based account;
• match rivals, synchronize starts, run sessions and calculate deterministic results;
• maintain ratings, progression, privacy-controlled public ranks and account history;
• provide, restore and reconcile purchased cosmetics or analytics;
• show and manage age-appropriate adverts and applicable privacy choices;
• detect invalid evidence, cheating, fraud, abuse and service disruption;
• diagnose failures, monitor reliability and improve NextRival; and
• comply with legal obligations and enforce applicable terms.

What other players can see

A rival may see your alias, rank, rating, optional confirmed country, readiness, privacy-safe provisional comparison, command progress and match result. Eligible leaderboard entries may show alias, rank, rating, percentile and an optional confirmed country, subject to your in-app visibility choices. Players do not receive your route, coordinates, exact location, device details, age or live-location map.

Rivals may see your selected catalogue emoji and accessibility-tested lane colour pair during a match; they do not receive your inventory or purchase history. Players cannot submit text or upload images through the Lane Designer.

Service providers and sharing

We use service providers only where needed to operate NextRival. Microsoft Azure may host the API, database, realtime messaging, secrets and service monitoring. Google may process identity verification when you choose recovery, Google Play handles app distribution, purchases, refunds and platform security, and Google AdMob/UMP provides adverts and applicable privacy controls. Those providers process information under their own terms and our applicable service arrangements.

We do not sell personal data. We may disclose information when required by law, to protect users or the service, or during a business transfer subject to applicable safeguards.

Retention and deletion

We retain active account, authentication, competition, progression, purchase and entitlement data while needed to provide and secure NextRival. Access and refresh credentials expire or are revoked. Privacy-safe competitive performance records expire within the configured period, currently up to 90 days, unless removed earlier.

Deleting your account removes the active profile; installations and authentication records; linked recovery identity; ratings, privacy settings, progression and entitlements; matchmaking and match records; progress and retained competitive performances; and account-linked purchase records from active NextRival systems. A performance already referenced by another completed result may retain only a neutral “Former rival” label so that the other player’s result remains intelligible.

Aggregated or de-identified statistics that no longer identify you may remain. Residual copies in protected infrastructure backups are isolated from normal use and expire according to the applicable backup schedule. Narrow records may be retained longer only where required for security, fraud prevention, disputes, accounting or law. Google Play controls its own transaction records.

Security

Production connections use HTTPS. Server-side credentials and linked identity subjects are hashed; purchase tokens are protected; Android credentials use platform-protected storage; access is restricted; and APIs use authentication, rate limiting and bounded request sizes. No system is perfectly secure, but we maintain safeguards appropriate to the service and the data it handles.

Your controls and rights

In the app you can edit your profile, choose rank visibility, confirm or remove country visibility, review applicable Google ad privacy choices, purchase or restore permanent ad removal, link or unlink Google recovery, sign out all sessions, save a JSON account export, and permanently delete your account and local practice history.

Depending on where you live, you may also have rights to access, correct, object to, restrict, export or erase personal data. Use the in-app deletion control to erase your account. For other privacy questions or requests, email contact@bananadoor.com; we may need to verify that you control the relevant account.

Age and safety

NextRival’s Play listing is targeted to people aged 16 and over. The app does not collect a birth date, verify age, or block gameplay by age. Its local Under 18 / 18-or-over choice exists only to apply conservative advert treatment. A parent or guardian with a privacy question may contact us.

International processing and policy changes

Data may be processed in countries other than your own, with safeguards required by applicable law. We may update this policy as NextRival, its providers or applicable requirements change. We will update the date above and provide additional notice when a change is material.

Contact

Banana Door
Privacy and support: contact@bananadoor.com
App: NextRival · Android package: com.bananadoor.nextrival