Privacy Policy

NOVELTY\u2122 is operated by Locust Harvest (Pty) Ltd ("we", "us"). This Privacy Policy explains what personal information we collect when you use the NOVELTY\u2122 application at app.novelty.locustharvest.com, why we collect it, and how we handle it.

1. Information we collect

We collect only what is required to provide the service:

• Account information — your email address, and a securely hashed password. Your name if you provide it.
• Subscription and payment information — processed by our payment partners (PayFast and Dodo Payments). We do not store card details on our servers.
• Usage information — timestamps of when you log in and view picks, to maintain your session and detect abuse.
• Device information — browser type, operating system, and IP address for security purposes.

2. How we use it

Your information is used solely to operate NOVELTY\u2122:

• Authenticating your account and keeping you signed in.
• Providing access to the picks and analysis you have subscribed to.
• Processing subscription payments and managing billing.
• Sending transactional emails (verification, password reset, receipts).
• Detecting and preventing fraud, abuse, or unauthorised access.

3. Cookies and session storage

We use a small number of cookies and browser-stored tokens to keep you signed in and to remember your preferences. We do not use third-party advertising cookies, and we do not sell your data to any third party.

4. Sharing

We share your information only with the service providers required to run NOVELTY\u2122:

• PayFast and Dodo Payments — to process subscription payments.
• Mailgun — to send transactional emails.
• Railway and Vercel — infrastructure that hosts the application.
• Google reCAPTCHA — to protect against automated abuse on login and registration forms.

We do not sell, rent, or share your personal information with any third party for marketing or advertising purposes.

5. Your rights

Under the Protection of Personal Information Act (POPIA) in South Africa, and equivalent legislation in other jurisdictions, you have the right to access, correct, or delete your personal information. To exercise these rights, contact us atnovelty@locustharvest.com.

If you close your account, we delete your personal information within 30 days, except where we are legally required to retain it (for example, for tax or accounting purposes).

6. Account deletion

You can delete your NOVELTY™ account and associated data in two ways:

• In the app— sign in, open the Picks page, and choose Delete my account at the bottom of the page. Deletion is immediate and cannot be undone.
• Web link— if you cannot access the app, visitapp.novelty.locustharvest.com/delete-account to submit a deletion request, or emailnovelty@locustharvest.com from the address on your account. We will process the request within 30 days.

When your account is deleted, we remove your account, email address, password hash, and subscription records. Historical pick data (fixtures, markets, results) is retained but disassociated from your identity, because it forms part of the public track record and is required for audit purposes. This retention is disclosed in accordance with Google Play’s account deletion policy.

7. Security

Passwords are stored using industry-standard one-way hashing. All connections use TLS. Access to production systems is restricted and audited. However, no system can guarantee absolute security — if you discover a vulnerability, please report it tonovelty@locustharvest.com.

8. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by email.

9. Contact

Locust Harvest (Pty) Ltd
Email: novelty@locustharvest.com