Privacy Policy

Rounds is a household task and errand manager operated from South Africa. The responsible party (data controller) for the personal information processed through Rounds is the Rounds team. You can contact our Information Officer at roundsappsa@gmail.com.

We collect only what we need to run the app:

• Account details: your name (or display name) and email address.
• Household membership: the household you belong to, your role, and invite codes you create or accept.
• Shopping lists and tasks: items you add, categories, prices, due dates, and completion status.
• Location data: your approximate device location (foreground and, when you enable it, background) used to trigger nearby-store reminders, plus locations of stores and malls you save.
• Photos: any images you upload, for example warranty receipts or item photos.
• Warranty information: item names, purchase dates, expiry dates, store names, and receipt photos.
• Device identifiers: a device ID, browser type, operating system, and push notification token so we can deliver alerts to the right device.
• Diagnostic data: anonymous error logs to help us fix bugs. These do not contain household content.

Under POPIA we process your personal information for these specific, lawful purposes:

• To provide the service you signed up for: creating an account, sharing lists with household members, tracking warranties.
• Location-based reminders: matching your device location against stores on your lists so the nearest household member gets a nudge.
• Household coordination: letting members see who is closest to a needed store and who completed which task.
• Warranty tracking: reminding you before a warranty expires.
• Service communications: account, security, and transactional emails.
• Compliance and security: preventing abuse, debugging, and meeting our legal obligations.

Our legal basis under POPIA is your consent (given when you sign up and when you grant location or notification permissions), the performance of our agreement with you, and our legitimate interests in keeping the service safe and reliable.

On mobile, Rounds can request permission to access your location in the background. We use this only to detect when you are close to a store or mall on your household's lists, so we can trigger a reminder. Specifically:

• Background location is never sold, shared with advertisers, or used to build a marketing profile.
• It is never shared with third parties outside the infrastructure providers that run the app.
• An approximate location may be shared with members of your own household so Rounds can notify whoever is closest to a needed store. This is visible only to your household.
• You can revoke location permission at any time in your device settings. Geofence reminders will stop working; the rest of the app continues to work.

Personal information is stored in a managed PostgreSQL database hosted on Supabase infrastructure, with data encrypted in transit (TLS 1.2+) and at rest. Photos are stored in object storage with the same provider. Application logic runs on Cloudflare's edge network. Row Level Security policies enforce that you can only read and write data belonging to your household.

We do not sell your personal information and we do not share it with advertisers or data brokers. Inside the app, lists, tasks, warranties, and approximate location are shared only with the members of your household.

We use the following operators (sub-processors) to run the service:

• Supabase — database, authentication, file storage, realtime sync.
• Cloudflare — hosting and edge delivery.
• Google — OAuth sign-in (only if you choose Google to sign in) and Google Places for store search.
• Paystack — payment processing for Pro and Family subscriptions (South Africa).

Some of these operators may process data outside South Africa. Where this happens, we rely on the operator's contractual safeguards and POPIA's cross-border transfer provisions.

Rounds uses essential cookies and local storage for authentication and to remember your preferences. We do not use third-party advertising cookies or tracking pixels. If we enable optional analytics (for example to understand which features are used), we ask for your consent first via the cookie banner and you can withdraw it at any time.

We keep your personal information for as long as your account is active. If you delete your account, we delete or anonymise your personal information within 30 days, except where we are required to keep certain records (for example payment records for tax purposes). Backups containing your data are cycled out within 90 days.

You can permanently delete your Rounds account and all associated personal data from inside the app at any time:

1. Sign in to Rounds.
2. Tap your avatar to open the Household screen.
3. Scroll to the bottom and tap Delete my account.
4. Confirm with Delete everything.

Deletion is immediate and irreversible. We remove your auth record, your shopping lists, list items, warranties, household memberships, survey responses, notification history, location records, push tokens, and any photos you uploaded (avatars, item photos, receipt photos). Lists or items created by other household members are not affected. If you would prefer us to delete your account on your behalf, email roundsappsa@gmail.com.

You have the following rights in relation to your personal information:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct information that is inaccurate, incomplete, or out of date.
• Deletion — ask us to delete your account and personal information.
• Objection — object to processing based on our legitimate interests, and withdraw consent at any time (for example by revoking location or notification permissions).
• Portability — request an export of your lists and personal information.
• Complaint — lodge a complaint with the Information Regulator (South Africa) at inforegulator.org.za.

To exercise any of these rights, email roundsappsa@gmail.com. We will respond within a reasonable period, normally within 30 days.

Rounds is intended for adults managing a household. We do not knowingly collect personal information from children under 18 without the consent of a parent or guardian. If you believe a child has provided personal information without consent, contact us and we will delete it.

Our Information Officer (Data Protection Officer) for POPIA purposes can be reached at:

We may update this Privacy Policy from time to time. Material changes will be communicated in the app or by email. The "Last updated" date at the top of this page always reflects the latest revision.