Privacy Policy

The short version:

• We collect your email for authentication.
• We collect your name and institution to better understand our users. We may personally reach out to discuss your experience.
• We allow Google Auth for login, and you control what you share.
• Stripe handles all payment processes and information; we don’t store any billing data.
• You can request to delete your account and data anytime.
• We don’t use cookies for tracking or advertising, just for gameplay and login.
• We don’t share your data with third parties.
• If we make changes to this policy, we’ll notify you in-app with 30 days’ notice.

The long version:

Personal Information We Collect

We collect the following personal information from you:

• Name
• Email address
• Institution/Organisation

This information is necessary for authentication and development purposes.

Note: We do not store payment informtion. Payment processing is handled by Stripe, and all sensitive payment data is processed securely on their platform.

Purpose of Collecting Personal Information

We collect your personal information for the following purposes:

• Authentication: To verify your identity and provide secure access to Rapua using Google Auth.
• Future Development: To understand and cater to our core user base by collecting institution/organisation information.
• Communication: To notify you of important updates related to the game or your account.

All personal data is provided explicitly by the user and is not collected without your consent.

Data Retention and Deletion

Personal information is stored indefinitely unless you request deletion. Gameplay-specific data, such as team codes and check-ins, may be deleted after a period of inactivity to free up space.

Users can request to delete their account and personal data by contacting us at nathan@rapua.nz. We will respond to all requests for access, correction, or deletion of personal information as soon as reasonably practicable and within 20 working days, in compliance with the New Zealand Privacy Act 2020.

International Data Transfers

Your personal information is stored on servers located in Australia. While this means your data is processed outside of New Zealand, we ensure that it is afforded the same level of protection as required under the New Zealand Privacy Act 2020.

Sharing of Personal Information

We do not share your personal information with any third parties except for the following:

• Google Auth: For authentication, with user consent.
• Stripe: For payment processing, with no sensitive payment information stored on our servers.

No other third-party services or integrations are used.

Data Security

We take all reasonable steps to protect your personal information from unauthorized access, misuse, or loss. Passwords are salted and hashed according to best practices, and all data is securely stored and processed.

Your Rights

You have the right to:

• Request a copy of any personal information we hold about you.
• Request corrections if you believe your personal information is inaccurate.
• Request the deletion of your personal data at any time.

We will respond to these requests within 20 working days, in compliance with the New Zealand Privacy Act 2020. Please contact nathan@rapua.nz for any requests or inquiries regarding your data.

Cookies

We use cookies solely for:

• Authentication: To manage your login session.
• Gameplay: To enhance your experience and manage in-game interactions.

No third-party cookies are used for advertising or tracking purposes.

Future Changes to This Privacy Policy

We may update this privacy policy to reflect changes in our practices. Users will be notified of any significant changes within the app, with at least 30 days’ notice before the changes take effect. Please review the policy periodically for updates.

Contact Information

For any questions regarding this privacy policy, or if you’d like to request a copy of your personal information or have it corrected, please contact us at nathan@rapua.nz.