Privacy policy
Daau is a card game for playing with people you know. We keep what the game needs to work (your account, your games, your friends and your messages) and nothing for advertising. We don’t sell your data, show ads or use outside analytics.
Daau is published by Imoj Kharel (United States), “we” in this policy. Questions go to info@nextgenx.io.
What we keep, and why
| What | Why |
|---|---|
| A random ID for this phone, made by the app and kept in your phone’s keychain (iPhone) or Block Store (Android). It is not your phone’s serial number or advertising ID. | To sign you in without a password, and to find your account again after a reinstall. |
| Game Center player ID (iPhone, if you use Game Center). | To find your account again, and to suggest Game Center friends who also play Daau. |
| Apple or Google account ID, if you save your account with Sign in with Apple or Google. We ask Apple for no name or email address. From Google we keep only the account ID. | So you can sign in on a new phone. For Apple, we also keep a token, encrypted, so we can tell Apple when you delete your account. |
| Your profile: display name, @username, the face you picked from the game’s set, and whether people can find you by your @username. Old @usernames are kept for 30 days after you change one. | So friends can find and recognise you, and so old links still reach you. |
| Your games: your Daau cash, games played and rounds won, the last 200 people you played with, settle-later scores, and the rooms you create or are invited to. | To run the games, show your stats, and suggest people you’ve played with. |
| Friends and circles: friend requests, friends, blocks and mutes, the circles you’re in, and invites. | To run friends, circles and invites, and to keep blocked people away from you. |
| Messages: chat in private messages, circles and private rooms, reactions, the quick phrases you send at tables, and which messages you’ve read. | To deliver them to the people you send them to. Table chat is deleted 7 days after the room closes. |
| Reports: who you reported, why, and the reported message with the five before it. | To check reports and enforce the community rules. |
| Notifications: your phone’s push token, your notification settings and quiet hours, and your time zone’s offset from UTC. | To send the notifications you’ve chosen, and none during your quiet hours. |
| Technical records: IP address, app version and error logs on our game server. | To keep Daau running and secure, and to limit abuse (for example, how often an address can do something). |
We don’t collect your contacts, location, photos or real name. The camera is only used, if you allow it, to scan someone’s Daau card on your phone; the picture never leaves your phone.
Who can see what
- Anyone in Daau can see your name, @username, face and stats, and the games you’ve played together. If you turn off “Find me by @username”, people can’t search for you.
- Friends also see when you’re online or in a room (unless you turn off “Show when I’m online”), and can invite you and message you, as your privacy settings allow.
- People in a circle or room with you see what you write there. Settle-later scores are shown only to people who have played with you.
- Someone you block can’t find you, see you, message you or invite you, and isn’t told.
- Invite links show a short preview to whoever opens them, even without Daau: for a room, the host’s first name and face, the game, the stake and the seats; for a profile that can be found by @username, the name, @username and face; for a circle, its name, crest and size. Daau card links show nothing about you.
Who we share it with
Only the companies that help run Daau, for that purpose:
- the company that hosts our game server, which stores the data above;
- Apple (Game Center, Sign in with Apple and iPhone notifications) and Google (Google sign-in and Android notifications through Firebase Cloud Messaging), which receive what they need to sign you in or deliver a notification;
- Cloudflare, which runs this website and invite links. The website sets no cookies and has no analytics.
We share information with authorities only when the law requires it, or to protect someone from serious harm. These companies may process data outside your country; we only use providers with recognised safeguards.
Your choices and rights
- Download your data: in Daau, open Me › Account & sign-in › Download my data. You get a file with your account and everything Daau stores for you.
- Change it: edit your name, face and @username in Me, and your privacy and notification settings in Me › Privacy & safety and Me › Notifications.
- Delete your account: Me › Account & sign-in › Delete account. It happens at once: your profile, @username, friends, messages, circle memberships and push tokens are deleted, and Apple is told to forget the sign-in. Settle-later scores stay with the other players under “A deleted player”, and reports stay with us for safety. Copies in server backups and logs go when those expire. Without the app, see Delete your account.
- Turn off notifications in Daau or in your phone’s settings at any time.
Depending on where you live, you may also have the right to ask what we hold about you, to correct it, to object to how we use it, or to complain to your data protection authority. Write to info@nextgenx.io and we’ll answer within 30 days.
Children
Daau is for people aged 18 and over. If you believe a younger child has an account, write to us and we’ll delete it.
Security
Connections to Daau are encrypted, the Apple token is stored encrypted, and only the people who run Daau can reach the server. No system is perfectly safe; if something goes wrong that affects you, we’ll tell you.
Changes
If we change this policy in a way that matters, Daau will show you the new version before you play again.