Privacy policy

Last updated 5 September 2026

This policy explains what personal data Round Computing Ltd ("Round", "we") collects when you use the Round app and the Round WiFi network, why we collect it, who we share it with, and what choices you have. It applies to the Round mobile app, the website at roundroam.com, and WiFi networks operated under the Round name.

Round Computing Ltd is the data controller. It is a Nigerian company, and this policy is written to comply with the Nigeria Data Protection Act 2023. Where you use Round from elsewhere, we still apply the same standards.

What we collect
Why we use it
What venues can see
Who we share it with
How long we keep it
How we protect it
Your rights
Children
Changes to this policy
Contact

1. What we collect

Data	Where it comes from
Account identity. Your phone number, or the account identifier and email address provided by Google or Apple when you sign in with them. We do not receive your Google or Apple password.	You, when you sign up or sign in.
Phone credentials. A certificate issued to your phone so that it can join Round networks, and the identifier of that certificate. The certificate contains a random identifier, not your name or phone number.	Created by Round when you install the network profile.
Connection records. Which venue your phone connected at, when the session started and ended, and how much data was used. We do not record the websites you visit or the content of your traffic.	Generated by the network when your phone connects.
Purchases and balance. The plans you buy, what you paid and in what, the reference of each purchase, what is left on your plan and on your account, and plans you send to or receive from other users.	You and our payment provider.
Payment details. Payments are made in bitcoin over Lightning or in USDT and are handled by Bitnob. We receive the payment status, a reference, the amount, and for USDT the deposit address and the on-chain transaction identifier; we do not receive your wallet keys or account details. We do not take card or bank payments at present.	Our payment provider.
Referrals. If you share a referral code, we record which accounts signed up with it.	You and the people you refer.
Location. The app can use your phone's location to show nearby venues and to let you suggest a place. This is only used while the app is open and only if you allow it. We do not track your location in the background.	Your phone, with your permission.
App and phone information. App version, operating system, a push notification token if you enable notifications, and the network address you connect from.	Your phone.
Support messages. Anything you send us when you contact support.	You.

2. Why we use it

To provide the service. Authenticating your phone on Round networks, metering your usage against your plan, and showing you your balance and history. This is necessary to perform our contract with you.
To take payment. Processing purchases and, where required, refunds.
To keep the network safe. Detecting abuse, fraud, and misuse of credentials, and enforcing our terms. This is our legitimate interest in running a secure network.
To tell you things that matter. Notifying you when a plan is about to run out or expire, when a payment completes, or when we change the service. You can turn off non-essential notifications in the app.
To improve Round. Understanding, in aggregate, which venues are busy and where connections fail, so we can fix them. We use aggregated or de-identified data for this wherever possible.
To meet legal obligations. Keeping records that Nigerian law requires us to keep, and responding to lawful requests from authorities.

We do not sell your personal data. We do not use it for advertising, and we do not build profiles of your browsing.

3. What venues can see

Round networks are hosted by independent venues. A venue can see that a Round phone connected to its access point, when, and how much data it used. A venue cannot see your name, phone number, email or payment details, and cannot see your activity at other venues. Your traffic on the venue's WiFi is encrypted between your phone and the access point; like any internet connection, the venue's upstream provider carries your traffic after that point.

Service providers who host our systems, deliver notifications, or process payments, under contracts that limit what they may do with the data.
Venues, only the connection information described in section 3.
Other users, when you choose to send a plan to someone or use a referral code, they see the minimum needed to complete that action.
Authorities, where the law requires it or where it is necessary to protect Round, our users or the public.
A successor, if Round is acquired or merges with another business, in which case this policy continues to apply to your data.

Some of our providers are outside Nigeria. Where personal data leaves Nigeria we rely on the safeguards permitted under the Nigeria Data Protection Act, including contractual protections.

5. How long we keep it

Account data: for as long as your account exists, and for up to 12 months after you delete it, so that we can handle disputes and meet record-keeping obligations.
Connection records: 12 months in identifiable form, after which they are deleted or aggregated.
Purchase and payment records: for the period required by Nigerian financial and tax law.
Support messages: 24 months after the conversation closes.

6. How we protect it

Phone authentication uses per-phone certificates rather than shared passwords, so a leaked password cannot expose the network. Data is encrypted in transit between the app and our servers and between our servers and venues. Access to personal data inside Round is limited to the people who need it to operate the service. No system is perfectly secure; if we discover a breach that affects you, we will tell you and the regulator as the law requires.

7. Your rights

You can ask us to:

tell you what personal data we hold about you and give you a copy;
correct data that is wrong;
delete your account and personal data, subject to the retention periods above;
restrict or object to a particular use of your data;
withdraw consent where we rely on it, for example for location or notifications.

You can delete your account from within the app. For anything else, contact us using the details below. We will respond within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.

8. Children

Round is not directed at children under 18, and we do not knowingly collect data from them. If you believe a child has created a Round account, contact us and we will remove it.

9. Changes to this policy

We will post any changes here and update the date at the top. If a change materially affects how we use your data, we will also tell you in the app before it takes effect.

10. Contact

Round Computing Ltd
Nigeria
Email: mobile@roundcomputing.com