Privacy Policy

This Privacy Policy explains how Noldor Technologies (Registration Number 2015/336648/07), a company registered in South Africa ("Noldor", "we", "our", or "us"), collects, uses, stores, and protects your personal information when you use the Holodek mobile application (the "App") and the holodek.app website (the "Site"). It is published in compliance with the Protection of Personal Information Act, 2013 (POPIA) and the Electronic Communications and Transactions Act 25 of 2002 of South Africa, and is intended to satisfy the privacy disclosure requirements of the Apple App Store and Google Play Store.

1. Who we are and how to contact us

Noldor Technologies is the responsible party (controller) for personal information processed through Holodek. For any privacy-related question, request, or complaint, contact us at info@holodek.app.

2. What personal information we collect

We collect only what we need to operate the App and provide multiplayer features:

• Account information. Email address, display name, username, and (optionally) profile picture. Authentication is provided by Clerk (Clerk Inc.); if you sign in with Apple or Google, only the data those providers return to Clerk is shared with us.
• Gameplay data. Match results, scores, in-game moves, friend connections, room codes, and queue history. This is stored on our backend (Convex, Convex Inc.) so we can run matches, show your history, and match you with opponents.
• Device and diagnostic data. Crash reports, performance metrics, and basic device information (operating system, app version). Used only to diagnose problems and improve stability.
• Email-capture data. If you email info@holodek.app to be notified at launch, we store your email until you ask us to delete it or for a maximum of twenty-four months after the App's public launch, whichever is sooner.

We do not collect: precise location, contacts, photos, microphone, camera, advertising identifiers (IDFA / GAID), or browsing activity outside the App. The App does not contain third-party advertising SDKs.

3. How we use your information

• To create and authenticate your account
• To run matches, friend lists, invites, and matchmaking
• To compute scores, rankings, and per-game statistics
• To diagnose crashes and performance issues
• To communicate with you about service issues and (with your consent) product updates
• To comply with our legal obligations

4. Legal basis for processing

Under POPIA and GDPR-equivalent frameworks, we rely on:

• Contract performance — to run the App you signed up for
• Legitimate interest — to keep the service stable, secure, and free of abuse
• Consent — for optional launch-notification emails
• Legal obligation — to respond to lawful requests by authorities

5. Who we share information with

We share only with the third-party processors that make the App work:

• Clerk Inc. — authentication. Privacy policy: clerk.com/legal/privacy.
• Convex Inc. — backend database and real-time sync. Privacy policy: convex.dev/legal/privacy.
• Apple Inc. and Google LLC — for App Store / Play Store distribution and crash reporting through their respective developer platforms.

We do not sell personal information to anyone. We do not share data with advertising networks, data brokers, or analytics resellers.

6. International transfers

Our processors (Clerk, Convex) operate primarily from the United States and may store your data on servers outside South Africa. Where we transfer personal information abroad, we rely on standard contractual clauses or equivalent safeguards required by POPIA section 72.

7. How long we keep your information

• Account data: while your account is active, and for up to 90 days after deletion in our backups
• Gameplay data: linked to your account; deleted with your account
• Diagnostic data: 90 days
• Email-capture data: until you ask us to remove it, or 24 months after public launch — whichever is sooner

8. Your rights

Under POPIA (and equivalent rights elsewhere), you may:

• Request access to the personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of your account and personal information
• Withdraw consent for any consent-based processing (e.g. launch emails)
• Lodge a complaint with the South African Information Regulator at inforegulator.org.za

To exercise any right, email info@holodek.app from the address linked to your account. We will respond within 30 days. Account deletion is permanent — leaderboards, friend lists, and match history cannot be recovered after deletion.

Deleting your account. You can permanently delete your Holodek account and all associated data at any time via our account deletion form, or from Settings inside the app.

9. Security

All traffic between the App and our backend is encrypted in transit (TLS). Authentication tokens are stored in the device's secure store (iOS Keychain / Android Keystore). We follow the security practices of our processors and do not store passwords ourselves (handled by Clerk).

10. Children

Holodek is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify you in the App or by email. The "Last updated" date at the top of this page always reflects the current version.

12. Contact

Privacy questions, requests, or complaints: info@holodek.app.