🎵 NextWave Music Sim

Introduction

Welcome to NextWave Music Sim ("we," "our," or "the Game"). We are committed to protecting your privacy and ensuring transparency about how we collect, use, and safeguard your information. This Privacy Policy explains our practices regarding data collection and usage when you play NextWave Music Sim.

By using NextWave Music Sim, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Account Information

When you create an account or sign in, we collect:

• Google Account Information (if using Google Sign-In): Email address, display name, and profile picture
• User ID: A unique identifier automatically generated by Firebase Authentication
• Display Name: The artist name you choose for your in-game profile

1.2 Game Profile Data

To provide the game experience, we store:

• Artist Statistics: Fame, money, energy, creativity, fanbase, loyal fanbase, skills (songwriting, lyrics, composition, experience, inspiration)
• Career Information: Career start date, age, primary music genre, genre mastery levels (0-100%), unlocked genres
• Verification Status: Whether you've applied for or received verified artist status
• Location Data: Your in-game current region (e.g., USA, Europe, Asia, Africa, Latin America, Middle East, India, Oceania, Canada) - this is fictional game data, not real GPS location

1.3 Game Content You Create

We store content you create within the game:

• Songs: Titles, genres, quality ratings, custom lyrics, release dates, streaming statistics, cover art, diss tracks, featured artists
• Albums/EPs: Album information, track listings, sales data, certifications (Gold, Platinum, Diamond)
• Social Media Posts: Posts you create on in-game EchoX social platform
• NexTube Videos: Music videos and content uploaded to in-game NexTube platform
• Chat Messages: Direct messages and conversations with other players via StarChat
• Comments: Comments on songs, videos, and social posts
• Avatar Customization: Your selected skin tone, hairstyle, facial features, clothing, and accessories
• Bio/Profile: Biographical information you add to your artist profile

1.4 Gameplay Activity

To manage game progression and multiplayer features, we track:

• Financial Transactions: In-game currency earned and spent (not real money), bank investments, loans
• Tours and Concerts: Performance history, tour schedules, venue bookings, ticket sales
• Collaborations: Partnerships with other players on songs and albums, royalty splits
• Relationships: In-game friendships, romances, and rivalries with other players or NPCs
• Beefs: Public feuds or rivalries initiated within the game
• Side Hustles & Gigs: Part-time jobs (barista, rideshare, retail) and gig performances with rarity tiers
• Crew Membership: Participation in player-created music crews, crew songs, crew challenges
• Achievements: Certifications, chart positions, milestones, GigFinder streaks
• Last Activity Date: When you last played to manage game time progression and fame decay
• Last Release Date: When you last published content to prevent spam

1.5 Uploaded Media

When you upload custom content:

• Cover Art Images: Custom album/song cover images uploaded via our image picker
• Profile Pictures: Custom avatar images (if using custom upload feature)
• Crew Symbols: Custom logos for music crews
• Audio Files: Music recordings, vocal tracks, instrumentals, or other audio content you upload for your songs

These files are stored securely in Firebase Cloud Storage with unique identifiers and access controls. Audio files are processed and stored in compressed formats to optimize storage and streaming performance.

1.6 Automatically Collected Information

We automatically collect:

• Device Information: Platform type (web, Android, iOS, Windows), browser type, screen resolution
• Analytics Data: Firebase Analytics collects anonymous usage patterns, screen views, feature interactions, session duration, and app crashes to improve game performance
• Authentication Tokens: Session tokens to keep you logged in securely
• Server Timestamps: Game time synchronization data to ensure fair multiplayer gameplay (1 real hour = 1 in-game day)
• Performance Metrics: App load times, network latency, Cloud Function execution times

1.7 Multiplayer & Social Data

To enable multiplayer features:

• EchoX Social Media: Followers, following list, posts, likes, shares
• Player Directory: Public profiles visible in searchable player directory
• Global Charts: Your songs' performance on Hot 100, Spotlight 200, regional charts, weekly charts
• Leaderboards: Rankings for top artists, most streamed songs, crew challenges
• Reports: Reports you file about inappropriate content or behavior
• Admin Gifts: Monetary gifts received from administrators

1.8 Information We Do NOT Collect

2. How We Use Your Information

We use collected information solely for providing and improving the game experience:

2.1 Core Game Functionality

• Maintain your artist profile and game progression
• Calculate streaming revenue, chart positions, and fame levels using server-authoritative Cloud Functions
• Enable multiplayer features (collaborations, chat, social media, beefs, crews)
• Synchronize game time across all players (1 real hour = 1 in-game day)
• Process in-game transactions, financial records, bank operations
• Track song lifecycle (Written → Recorded → Released)
• Manage album/EP releases and certifications
• Calculate stream growth with decay algorithms and virality scores

2.2 Social & Multiplayer Features

• Display your artist profile to other players in the directory
• Enable direct messaging and collaboration requests
• Show your songs on global, regional, and weekly charts
• Allow other players to follow you on EchoX social platform
• Facilitate crew membership, crew songs, and crew challenges
• Support relationship mechanics (friendships, romances, rivalries)
• Enable beef/rivalry systems with diss tracks
• Show NexTube music videos to other players

2.3 Game Balance & Anti-Cheat

• Detect and prevent time manipulation or cheating using server timestamps
• Monitor for spam or abuse of game systems
• Ensure fair competition on leaderboards and charts
• Track last release dates to prevent spam
• Validate client-side calculations with server-side verification
• Rate limiting on Cloud Functions to prevent exploitation

2.4 Analytics & Improvements

• Analyze anonymous gameplay patterns to improve features
• Monitor app performance, crash rates, and fix bugs
• Understand which features are most popular
• Optimize server performance and Firebase costs
• A/B testing of new features via Firebase Remote Config
• Telemetry for game balance adjustments

2.5 Administrative Functions

• Provide customer support when needed
• Respond to reports of inappropriate content or behavior
• Enable admin review of verification applications
• Send in-game notifications about game updates, events, or "The Scoop" news
• Moderate user-generated content for Terms of Service violations
• Admin gifts and player management tools

3. Information Sharing & Disclosure

3.1 Shared Within the Game (Public Information)

The following information is visible to other players in multiplayer mode:

• Your artist name (display name)
• Profile picture/avatar customization
• Bio/about section
• Songs, albums, and their streaming statistics
• Chart positions and certifications
• Fame level and fanbase size (total, not regional breakdown)
• EchoX posts and NexTube videos
• Comments on public content
• Crew membership and crew songs
• Verification status (verified badge)
• Beef/rivalry participation (if public)

3.2 Private Information (Not Shared)

The following remains private:

• Your email address
• Direct messages (only visible to sender and recipient)
• In-game money balance (exact amount)
• Energy and creativity levels
• Exact skill levels (songwriting, lyrics, composition, experience, inspiration)
• Pending practices or skill training sessions
• Side hustle contracts and gig offers
• Relationship details (unless publicly announced via EchoX)
• Tour planning details and venue contracts
• Unpublished/unreleased songs (in "Written" or "Recorded" state)
• Bank account details, investments, and loan information
• Regional fanbase breakdown
• Loyal fanbase statistics
• Genre mastery percentages
• Unlocked genres progress

3.3 Third-Party Service Providers

We use trusted third-party services to operate the game:

Google Firebase (Google LLC)

• Services Used: Authentication, Cloud Firestore (database), Cloud Functions (server logic), Cloud Storage (images/audio), Analytics, Remote Config, Cloud Messaging
• Purpose: Core game infrastructure, real-time multiplayer, analytics, notifications
• Data Shared: User ID, game data as necessary for service operation
• Privacy Policy: firebase.google.com/support/privacy
• Data Location: Servers in us-central1, us-east1 regions

Google Sign-In

• Purpose: Optional authentication method for account creation
• Data Collected: Email, display name, profile picture (with your explicit consent)
• Privacy Policy: policies.google.com/privacy

Google Gemini AI

• Purpose: Generate AI-driven in-game news articles for "The Scoop" feature
• Data Shared: Anonymous game events (no personal identifiers)
• Privacy Policy: policies.google.com/privacy

These services may have access to your data as necessary to perform their functions on our behalf. They are contractually obligated not to use or disclose your information except as necessary to provide services to us.

3.4 Legal Requirements

We may disclose your information if required by law, such as:

• To comply with legal obligations, subpoenas, court orders, or government requests
• To enforce our Terms of Service or investigate violations
• To protect the rights, property, or safety of our users, the public, or ourselves
• To investigate potential violations of our policies, fraud, or security issues
• In connection with prevention or mitigation of harm

3.5 Business Transfers

If NextWave Music Sim is involved in a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will:

• Notify you via email and/or prominent notice in the game at least 30 days before transfer
• Ensure the receiving party agrees to handle your data in accordance with this Privacy Policy
• Provide you the opportunity to delete your account before the transfer

3.6 No Sale of Personal Data

4. Data Storage & Security

4.1 Where We Store Data

Your data is stored in Firebase Cloud Firestore and Firebase Cloud Storage, which are hosted on Google Cloud Platform servers:

• Primary Region: us-central1 (Iowa, USA)
• Secondary Region: us-east1 (South Carolina, USA)
• Storage: Firebase Cloud Storage for uploaded images and audio

Data may be replicated across multiple data centers for redundancy and performance.

4.2 Security Measures

We implement industry-standard security practices:

• Encryption in Transit: All data transmitted between your device and our servers uses HTTPS/TLS 1.2+ encryption
• Encryption at Rest: Firebase Cloud Firestore and Cloud Storage encrypt all data at rest using AES-256
• Authentication: Firebase Authentication with secure session tokens and token refresh mechanisms
• Access Controls: Firestore security rules restrict data access based on user identity and role
• Input Validation: Server-side validation and sanitization prevents injection attacks and data corruption
• Rate Limiting: Cloud Functions implement rate limiting to prevent DDoS and abuse
• Monitoring: Automated monitoring for suspicious activity, unusual patterns, and security breaches
• Regular Audits: Periodic security audits and dependency updates
• Principle of Least Privilege: Services only have access to data they need

4.3 Data Retention

We retain your data as follows:

• Active Accounts: Data is retained indefinitely as long as you use the game
• Inactive Accounts: Accounts inactive for 365+ days may be flagged for review; we'll attempt to notify you before deletion
• Deleted Accounts: Upon account deletion request, all personal data is permanently deleted within 30 days
• Legal Retention: Some data may be retained longer if required by law or for legitimate business purposes (e.g., fraud investigation)
• Backups: Deleted data is removed from backups within 90 days

4.4 Your Responsibility

To help protect your account:

• Keep your Google account credentials secure
• Log out from shared devices
• Report suspicious activity to us immediately
• Do not share your account with others

5. Your Rights & Choices

5.1 Access & Correction

You have the right to:

• Access your personal information stored in the game at any time
• Correct inaccurate or incomplete information through in-game Settings
• View your game statistics, songs, albums, and profile details
• Export your data by contacting us (data portability)

You can access most of your data directly in the game through:

• Settings → Profile
• Music Hub → View your songs and albums
• Stats screens showing your gameplay metrics

5.2 Data Portability

You may request a copy of your data in a structured, machine-readable format (JSON) by contacting us at manueloppong14@gmail.com. We will provide this within 30 days.

5.3 Deletion Rights

You can:

• Delete individual content: Songs, albums, EchoX posts, NexTube videos through the game interface
• Request account deletion: Contact manueloppong14@gmail.com
• Automatic deletion: We'll permanently delete all your data within 30 days of account deletion request

Note: Some data may be retained in anonymized form for analytics or as required by law.

5.4 Privacy Controls

You can control your privacy by:

• Choosing what information to include in your bio
• Deciding whether to upload custom cover art or avatars
• Controlling who can send you collaboration requests (coming soon)
• Blocking users who send inappropriate messages
• Reporting inappropriate content or behavior
• Managing notification preferences
• Opting out of analytics (in Settings)

5.5 Communication Preferences

You can manage notifications through:

• In-Game Settings: Control which in-game events trigger notifications
• Device Settings: Disable push notifications entirely in your device OS
• Email Communications: Unsubscribe from emails if we implement email features in the future

5.6 Withdrawal of Consent

If you've signed in with Google, you can:

• Revoke access through your Google Account settings at myaccount.google.com/permissions
• Note: Revoking access will prevent you from logging into the game; you may need to delete your game account separately

6. Children's Privacy

If you are under 13: You must not create an account or use NextWave Music Sim.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us immediately at manueloppong14@gmail.com, and we will:

• Delete such information from our systems within 48 hours
• Terminate the child's account
• Provide confirmation of deletion

Age of Digital Consent: In some jurisdictions (e.g., EU), the age of digital consent may be between 13-16. If you are under the age of digital consent in your jurisdiction, you must have your parent or guardian's permission to use NextWave Music Sim.

7. Regional Privacy Rights

7.1 European Union (GDPR)

If you are a resident of the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Right to Access: Request copies of your personal data
• Right to Rectification: Correct inaccurate or incomplete personal data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restrict Processing: Limit how we use your data in certain circumstances
• Right to Data Portability: Receive your data in a portable, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Data Protection Officer: For GDPR-related inquiries, contact manueloppong14@gmail.com

7.2 California (CCPA/CPRA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to Know: Request information about data collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: We do not sell or share personal information
• Right to Non-Discrimination: Equal service regardless of exercising rights

To Exercise Your Rights: Email manueloppong14@gmail.com with subject "CCPA Request"

7.3 Other Jurisdictions

We comply with applicable data protection laws in all jurisdictions, including:

• UK GDPR: Similar rights to EU GDPR
• Brazil LGPD: Data protection rights for Brazilian residents
• Canada PIPEDA: Privacy rights for Canadian residents
• Australia Privacy Act: Rights for Australian residents

8. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

Summary of Key Points