The short version
This Privacy Policy applies to the Discly iPhone application (the "App") published by Discly ("we", "us", or "our").
We believe privacy is a default, not a feature. The App does not track you, does not use advertising or analytics SDKs, does not sell your data, and does not require an account.
The minimum data needed for online multiplayer (room code, opponent's chosen nickname, real-time game state) is processed in transit and not stored beyond the duration of a match.
1. What we do not collect
The App does not collect, store, or transmit any of the following:
- Your real name, email address, phone number, or postal address
- Your contacts, photos, location, microphone, or camera data
- Your device's IP address (we do not log IPs)
- Your operating system version, device model, or hardware identifiers for analytics purposes
- Your device identifiers (IDFA, IDFV) for advertising or tracking purposes
- Behavioral analytics (taps, screen views, time-in-app, conversion events, session duration)
- Crash reports tied to your identity
- Any data shared with advertising networks, data brokers, or third-party analytics services
The App does not include the Facebook SDK, Google Analytics, Firebase Analytics, AppsFlyer, Adjust, Singular, Branch, Amplitude, Mixpanel, Sentry, or any equivalent tracking SDK.
The App is iOS-only and does not use Google Play Services or any Android-specific data services.
2. What we do process (online multiplayer only)
If — and only if — you choose to play an online match with another person, the following data is transmitted in real time between players' devices:
- Room code — a short alphanumeric string used to pair two devices for a single match
- Display nickname — chosen by you in-app, not tied to any account or personal identity
- Live game state — disc positions, scores, current turn, match outcome
This data is broadcast via Supabase Realtime (our infrastructure provider for online play). Supabase processes the broadcast in transit and does not retain game-state data after the match ends. We do not use Supabase to store user accounts, personal information, or persistent game records.
If you only play offline modes (Local 2-Player or VS Bot), no data leaves your device — the App does not contact any server in those modes.
3. Subprocessors
The only third-party service the App uses is:
- Supabase, Inc. (Delaware, USA) — Realtime broadcast infrastructure for online play. See Supabase Privacy Policy.
No other company, organization, or service receives any data from the App.
4. Data retention
Online match data (room codes, real-time game state, opponent's nickname) is ephemeral — it exists only while a match is in progress and is discarded immediately once the match ends. There is no historical match log, no scoreboard server, no leaderboard that retains your gameplay data.
Settings you configure inside the App (theme choice, sound preferences, your nickname) are stored locally on your device only. They are not transmitted to us or to any third party.
5. Children's privacy (COPPA)
The App is rated 4+ on the App Store and is appropriate for all ages. The App does not knowingly collect personal information from anyone, including children under the age of 13.
Because the App does not collect personal information from any user (regardless of age), it is compliant with the United States Children's Online Privacy Protection Act (COPPA) by design.
If you are a parent or guardian and have a question or concern, contact us at [email protected].
6. Your rights (GDPR, CCPA, and other regional laws)
Because the App does not collect, store, or process personal data tied to you as an identifiable individual, most data subject rights are inherently fulfilled — there is no personal data on file for you to access, correct, delete, or export.
If you are located in the European Economic Area (EEA), United Kingdom, or California, you are entitled to:
- The right to know what personal information (if any) we hold about you
- The right to request deletion of any personal information we may hold
- The right to data portability
- The right to withdraw consent for processing
- The right to lodge a complaint with your local data protection authority
To exercise any of these rights, or if you believe data has been processed without your consent, contact us at [email protected]. We will respond within 30 days.
7. Disclosure of information
Because we collect no personal data, there is generally nothing to disclose. In the rare case we are compelled by law, we may disclose limited information:
- To comply with legal obligations (such as a court order, subpoena, or similar legal process)
- To protect the rights, property, or safety of our users or the public, where required by applicable law
- To investigate fraud or unauthorized use of the App
We will resist overly broad data requests and notify affected users where legally permitted.
8. Security
Online match data transmitted via Supabase Realtime uses TLS encryption in transit. Because we do not store user data on our servers, there is no persistent personal data to be compromised in the event of a breach.
9. Apple Privacy Manifest & Nutrition Labels
The App ships with an Apple-compliant Privacy Manifest declaring zero data collection. The App Store Connect Privacy Nutrition Label declares "Data Not Collected" across all categories.
10. Changes to this policy
If this policy changes (for example, if we add a new feature that requires data processing), we will update the "Last updated" date above and post the revised policy at discly.app/privacy. Material changes — defined as adding any new data collection — will require explicit user opt-in within the App on the next launch following the change.
Continued use of the App after a change to this policy is non-material in nature constitutes your acceptance of the updated policy. For material changes, we will request your explicit consent.
11. Your consent
By using the App, you consent to the processing of information as described in this Privacy Policy, both as it currently exists and as updated by us in accordance with Section 10.
12. Contact
Questions, concerns, or complaints about this Privacy Policy or our data practices should be sent to:
Email: [email protected]