Privacy Policy
Updated October 27, 2026
Roundsly: Daily Practice (“Roundsly”, “we”, “us”) is operated by Halo Dot Inc. This policy covers the website at roundslypractice.com and the Roundsly iPhone and Android apps: what we collect, why, who can see it and what you can do about it. Questions go to support@roundslypractice.com.
The short version. We keep what it takes to run your practice, your membership and the community map. We don’t sell your information, show ads, or track you across other websites or apps. Other members see the community details described below. You can delete your Roundsly account and the data linked to it; local copies, exports, provider records and subscriptions are explained separately below.
- What we collect
- Practicing without an account
- Android and Google Play
- How we use it
- What other members can see
- Services that help run Roundsly
- Tracking and Do Not Track
- Emails and notifications
- Age
- How long we keep it
- Your choices and rights
- Security
- Changes to this policy
1. What we collect
- Account: your email address and how you sign in (email and password, Sign in with Apple or Google). With Sign in with Apple you can use Apple’s Hide My Email address instead of your own. Passwords are handled by our sign-in service and stored only in hashed form.
- Profile, if you add it: a display name (the map shows your first name and last initial), specialty, practice city, a small cropped photo, and your character’s look (character, skin tone and outfit, used only to draw the picture).
- Practice: the questions assigned to you, your answers and when you gave them, finished rounds, streaks, saved questions, your learning list and settings such as rest days and reminder time and time zone.
- Membership: membership status, trial and renewal dates, whether you’ve used your free trial, a Stripe customer reference for website memberships, an App Store transaction reference for Apple memberships, and a purchase-token reference for Google Play memberships. We use these references to verify the purchase, link it to your account and record renewal, expiry or refund status. We do not receive your full card number or store payment credentials.
- Community safety: reports you make about a map pin (the reason) and the members you block.
- Messages to us: what you send to support or through “Report a problem”.
- Technical information: our hosting and sign-in providers process connection details such as IP address, device and browser type, and operational logs to deliver and secure the service. Cloudflare Web Analytics counts visits to the website’s pages without cookies or other browser storage.
- Location, only when you ask: the iPhone app and website can use a one-time location request to suggest a nearby city. The city lookup happens on your device; Roundsly does not upload or save the coordinates. Only the city you choose is saved. Android does not request device location permission.
We don’t collect health information about you, and we don’t learn your exact age. Don’t enter patient information anywhere in Roundsly, including your profile, reports and emails to support.
2. Practicing without an account
Website: your assigned questions, answers and practice history are saved in your browser when browser storage is available, and aren’t uploaded until you sign in and choose to save them. If browser saving is unavailable, the website tells you that your progress lasts only in the open tab. Clearing browser data can remove guest progress, and anyone using the same browser may be able to see its guest answers.
iPhone app: your practice stays on your iPhone and, if iCloud is on, in a backup in your own private iCloud database, which we can’t read. iPhone search, the widget and the Lock Screen round are built on your iPhone. If you join Game Center’s weekly board, Apple receives how many daily rounds you finished that week (0 to 7), under your Game Center name, never your answers or scores.
3. How we use it
We use this information to give you your daily round and grade it, save and sync your practice between the app and the website, run your membership and free trial, send the emails described below, show the community map, handle reports and blocks, answer support requests, fix problems, keep the service secure and meet legal obligations. We don’t use your information for advertising, we don’t sell it, and we don’t use your answers to train AI models.
4. What other members can see
When you’re signed in and have chosen a city, you appear on the community map that other signed-in members see on the website and in the app. Your pin shows your photo (or your character, in the skin tone and outfit you chose), your first name and last initial, your specialty and your city. It sits at the city’s center, never at an exact address or your device’s location. The one practice number other members can see is your best streak (the most days in a row you finished a round, counting up to 2 rest days a week), on your card when they tap your pin. Your email address, full last name, answers, scores and practice history are never shown to other members, and extras your character earns stay on your device.
You can hide your pin at any time with “Show me on the community map” in Community (or You › Community map in the app), and deleting your account removes it. Any signed-in member can report a pin (an inappropriate photo, an offensive name, spam or a fake profile, or something else) or block a member. The reported member does not see who submitted a report. The account service stores the reporter and target account references to handle safety and abuse. A reported photo or name is hidden from other members while it is reviewed; our moderation workflow calls for review within 24 hours. Authorized Roundsly support staff handle reports. Blocked members and you don’t see each other on the map. Map names are checked against a list of offensive words.
5. Services that help run Roundsly
These companies help run Roundsly. They handle information as described below and in their own privacy policies:
- Supabase (servers in the United States): sign-in and the account database.
- Cloudflare: hosts and delivers the website, and Web Analytics without cookies.
- Resend: sends account, membership and reminder emails.
- Stripe: website checkout and billing. Stripe keeps its own payment records under its privacy policy.
- Apple: Sign in with Apple, App Store purchases, iCloud backup, Game Center, notifications and, where the law requires it, the App Store age check.
- Google: Google Play purchases, the Android billing diagnostics described below, and Google sign-in, if you choose it. Google supplies basic identity information such as your email address, name and profile image; it doesn’t share your Google password or give access to your Gmail, files or contacts. See Google’s privacy policy for its handling of information.
We don’t sell or rent personal information, and we don’t share it for targeted advertising. We may disclose information if the law requires it, to protect someone’s safety, or to a company that takes over operating Roundsly, which would have to follow this policy. Links to clinical references open other websites with their own privacy policies.
6. Tracking and Do Not Track
Roundsly doesn’t track you across other websites or apps, and no third party collects personal information about your activity over time and across websites through Roundsly. There are no advertising cookies, pixels or tracking SDKs. Because there’s no such tracking to turn off, Do Not Track and Global Privacy Control signals don’t change how Roundsly works. If that ever changes, we’ll update this policy first and honor those signals.
7. Emails and notifications
- Account emails: sign-up confirmation and password reset.
- Membership emails: when a website membership or free trial starts, an email with its terms and how to cancel; a notice at least 3 days before a free trial ends; and Stripe’s receipts. These are part of the service and can’t be turned off while you have a membership.
- Daily reminders, if you turn them on: we save your chosen time, time zone and opt-in, and check your saved rounds so you aren’t reminded on a day you’ve finished. After your free round, reminders go out only while you have a membership. Turn them off in your profile or with the link in any reminder. Reminder delivery records (recipient, message and delivery status) are kept for up to 30 days to prevent duplicates and troubleshoot delivery.
- iPhone notifications: reminders and the free-trial notice are scheduled on your iPhone and only appear if you allow notifications.
8. Age
Roundsly is for adults 18 and older. Where the law requires it, the iPhone app asks the App Store for your age range when it opens; it learns only whether you’re 18 or older, uses that to decide whether you can continue, and doesn’t save it. We don’t knowingly collect information from anyone under 18, and if we learn we have, we delete it.
9. How long we keep it
- Your account, profile and practice: until you reset them or delete your account.
- Reports and blocks: deleted when either account is deleted.
- Reminder delivery records: up to 30 days. The record of which membership emails were sent: until you delete your account.
- Stripe, Apple and Google keep their own payment records as the law requires, including after you delete your account.
- Security and operational logs, including sign-in audit records, may remain after account deletion for security, fraud prevention or legal obligations. Any provider backup or disaster-recovery copy is separate from the active account database and follows the provider’s retention controls. Contact support for the applicable retention details; we do not promise that every provider copy is erased immediately.
10. Your choices and rights
- See and correct: your profile, practice and settings are in the app and on the website, and you can edit them there.
- Take a copy: Progress › Practice record (website) or You › Practice record (app) downloads your practice as a PDF, and the website also offers a CSV.
- Delete: sign in, open Account (website) or You › Manage account (app), and choose Delete account. This removes your sign-in and linked active account records, including rounds, answers, learning list, profile, photo, map pin, reports, blocks and email reminders. The log and provider-record exceptions are described in section 9. A website membership is canceled at the same time, so you won’t be charged again; App Store and Google Play memberships are billed by their stores and continue until you cancel with Apple or Google. You can also reset saved practice and profile details and keep your sign-in. Guest practice, other-device offline copies, iPhone practice and private iCloud backups, and files you exported are separate copies that remain until you clear them. Android attempts to remove the deleted account’s local practice and photo on the current installation and tells you if local removal fails. You can also request deletion without installing the app.
- Limit what’s shared: practice as a guest, leave profile fields empty, hide your map pin, decline location access, and turn reminders or notifications off.
- Ask us: if you can’t sign in, or want us to confirm what we hold, correct it, export it or delete it, email support@roundslypractice.com from the address on the account. We’ll reply within 30 days, and we won’t treat you differently for asking. Some states give residents these rights by law; we offer them to everyone.
11. Security
Everything travels over encrypted connections. Account data is private to your signed-in account by database rules, apart from the map pin described above, and card numbers never reach us. No system is perfectly secure; if a breach affects your information, we’ll tell you as the law requires. Roundsly’s account database is hosted in the United States. Other providers describe their processing locations in their own privacy policies.
12. Changes to this policy
We’ll post any change here with a new date. If a change materially affects how we use information we already have, we’ll email you or tell you in Roundsly at least 30 days before it applies, and we won’t start sharing information in a new way without asking you first.
Contact
Roundsly is operated by Halo Dot Inc. Questions about your data or this policy: support@roundslypractice.com. More help is on the Support page, and the Terms of Use cover membership, billing and cancellation.
Android practice and Google Play
Guest practice is saved on your Android device. Signed-in practice is sent to the Roundsly account service when you sync. Your local profile, character extras and reminder settings stay on this device apart from the community details described in section 4 or a backup you choose to export. Sign-in tokens are held in device-protected encrypted storage and excluded from Android backup and device transfer.
Memberships bought through Google Play are billed by Google. Roundsly verifies the purchase with Google and stores a purchase-token reference, its account association, membership status, expiry and renewal information. We do not receive your Google password or card number. Roundsly account records are removed when the account is deleted; Google retains its own payment records under its policies and applicable law.
Android billing diagnostics: the app includes Google’s Play Billing library. The library sends billing diagnostic events and technical information to Google to analyse billing performance and diagnose problems. This includes the app and library versions, device model and operating-system build, language, region and time-zone settings, network type and mobile-network codes, and a randomly generated identifier used to correlate events within a billing-client connection. It can send diagnostics when the app closes that connection, even if you have not completed a purchase. The app does not offer a setting to turn off this diagnostic collection. This diagnostic information is separate from the practice answers and profile information you choose to sync with Roundsly. Google’s handling and retention are described in Google’s privacy policy; we do not promise a fixed deletion period for these provider records.
When you are signed in and choose a practice city, your community pin can appear automatically with your first name and last initial, specialty, chosen city and character. If you choose to upload a photo, a small copy can appear on the pin. You can hide the pin in Community controls. This is a city-center pin, not your device location. Android does not request location permission. Photos selected for upload are re-encoded without embedded photo metadata. Reporting and blocking controls are available on member cards. Character extras, answers and accuracy are not shared.
The Android weekly consistency board has a separate opt-in. It uses your moderated community name and displays completed daily rounds in the current UTC week, capped at seven. Answers and accuracy are never displayed. Leaving the board or hiding your community profile removes you from its visible results. This feature is available only when the service is enabled.
Optional Android study reminders are scheduled locally and require notification permission. Delivery timing can be affected by Android battery settings. The home-screen widget uses the local practice summary.
You can choose to save a PDF practice record or a practice backup in a location you select. Backups include profile settings and answers, but exclude credentials and profile photos. Exported copies remain wherever you choose to save or share them. Deleting an account does not remove independently exported copies.
To delete your account and associated data, use You → Your account → Delete account, or request account deletion on the web. After server deletion succeeds, Android attempts to remove that account’s local practice and photo copies from the current installation. If it cannot, the app tells you to clear its storage in Android Settings. Guest practice is a separate local copy. Deleting an account does not cancel a Google Play subscription; cancel it separately in Google Play.