Privacy Policy | NXTTHNG

Dunans Castle Limited ("we," "us," or "our") publishes and operates the NXTTHNG productivity application (the "App"). This Privacy Policy explains what personal data we collect through the App, why we collect it, how we use and share it, and the rights available to you under the UK and EU General Data Protection Regulation ("GDPR"), as well as the privacy requirements of the Apple App Store and Google Play Store.

By downloading, accessing, or using NXTTHNG, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please do not use the App.

1. Data Controller

The data controller responsible for your personal data is:

Company: Dunans Castle Limited

Registered address: Dunans Castle, Glendaruel, Colintraive, Argyll, PA22 3AD, Scotland, United Kingdom

Data Protection Contact: C. S. Dixon-Spain

Email: charles.dixonspain@gmail.com

If you have any questions about this Privacy Policy or our data practices, please contact us using the details above.

2. Information We Collect

2.1 Information You Provide Directly

When you create an account or use NXTTHNG, we collect:

Account information: your name, email address, and password (stored in encrypted/hashed form).
User-generated content: tasks, notes, projects, files, comments, and other content you create, upload, or store within the App, including content synced across your devices via our cloud service.
Communications: information you provide when you contact us for support or feedback.

2.2 Information Collected Automatically

When you use NXTTHNG, we and our service providers automatically collect:

Device information: device type, operating system and version, unique device identifiers, and app version.
Usage data and analytics: features used, session length, in-app navigation, and interaction patterns, used to understand and improve the App.
Diagnostic and crash data: crash logs and performance/error diagnostics used to identify and fix bugs.

We do not use this data for third-party advertising, and NXTTHNG does not display third-party ads or use advertising trackers (such as the IDFA) for cross-app or cross-site tracking.

2.3 Information from Third Parties

If you choose to sign in using a third-party service (for example, Sign in with Apple or Google Sign-In), we receive the basic profile information (such as name and email address) that you authorize that service to share with us.

3. How We Use Your Information

We use the personal data described above to:

Provide, operate, and maintain the App, including account creation, authentication, and cloud sync of your content across devices.
Personalize your experience and remember your preferences and settings.
Monitor, analyze, and improve the performance, security, and functionality of the App.
Diagnose technical issues and provide customer support.
Communicate with you about updates, security notices, and support requests.
Comply with our legal obligations and enforce our terms of use.

4. Legal Basis for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases to process your personal data:

Performance of a contract: processing necessary to provide the App and its features to you under our terms of use.
Legitimate interests: processing necessary for our legitimate interests in securing, maintaining, diagnosing, and improving the App, provided those interests are not overridden by your rights.
Consent: where we ask for your consent (for example, for certain optional analytics or communications), you may withdraw that consent at any time.
Legal obligation: processing necessary to comply with applicable law.

5. How We Share Your Information

We do not sell your personal data. We share personal data only in the following circumstances:

Service providers: with vetted third-party providers who perform services on our behalf, such as cloud hosting/storage, crash reporting, and analytics, under contractual obligations to protect your data and use it only as instructed.
Legal requirements: where required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Dunans Castle Limited, our users, or others.
Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, subject to the protections of this Privacy Policy.
With your consent: where you have directed us to share information, such as by inviting a collaborator to shared content within the App.

6. International Data Transfers

Your data may be processed in countries outside the UK or European Economic Area (EEA), including where our cloud hosting providers operate servers. Where we transfer personal data internationally, we use appropriate safeguards required under GDPR, such as the UK International Data Transfer Agreement, the EU Standard Contractual Clauses, or transfers to jurisdictions recognized as providing an adequate level of protection.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, including to provide the App, comply with legal obligations, resolve disputes, and enforce our agreements. Account information and user-generated content are retained for as long as your account remains active, and are deleted or anonymized within a reasonable period after account deletion, except where longer retention is required by law.

8. Your Rights Under GDPR

If you are located in the UK or EEA, you have the following rights regarding your personal data:

Right of access: request a copy of the personal data we hold about you.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your personal data, subject to certain exceptions.
Right to restrict processing: request that we limit how we use your data.
Right to data portability: request your data in a structured, commonly used, machine-readable format.
Right to object: object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
Right to lodge a complaint: with a supervisory authority, such as the UK Information Commissioner's Office (ICO) at ico.org.uk, or your local EU data protection authority.

You can exercise most of these rights directly within the App's account settings, or by contacting us at charles.dixonspain@gmail.com. We will respond to verified requests within the timeframes required by law.

9. Children's Privacy

NXTTHNG is not directed to children under the age of 16, and we do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, please contact us and we will take steps to delete such information.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Apple App Store Disclosures

In accordance with Apple's App Store guidelines, our App Privacy ("nutrition label") disclosure summarizes the data types described in Section 2 above. NXTTHNG:

Does not use data for third-party advertising or share data with data brokers.
Does not track you across other companies' apps and websites, and therefore does not require an App Tracking Transparency (ATT) prompt.
Collects account information, user content, usage data, and diagnostics linked to your identity solely to provide app functionality, as described above.

If Apple's Sign in with Apple is used, we process only the information you authorize Apple to share with us, in accordance with Apple's requirements.

12. Google Play Data Safety Disclosures

In accordance with Google Play's Data Safety requirements, we confirm that NXTTHNG:

Collects the data types described in Section 2 (account information, user content, device/usage data, and diagnostics).
Encrypts data in transit between the App and our servers.
Provides an in-app mechanism to request deletion of your account and associated data.
Does not share personal data with third parties for their own advertising purposes.

A corresponding Data Safety form is maintained on the App's Google Play Store listing and is kept consistent with this Privacy Policy.

13. Cookies and Similar Technologies

If you access any web-based features associated with NXTTHNG (such as a companion website or web dashboard), we may use cookies or similar technologies for authentication, security, and analytics purposes. Where required, we will request your consent for non-essential cookies through a cookie banner.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes through the App or by other appropriate means, and will update the "Effective date" above. Continued use of the App after changes take effect constitutes acceptance of the revised policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Data Controller: C. S. Dixon-Spain, on behalf of Dunans Castle Limited