Privacy Policy

Last updated: August 15, 2026

Disco is a walking-exploration game: you physically move to reveal a map of the world, both for yourself and, if you choose, as part of a shared map everyone contributes to anonymously. This page explains what we collect, why, and how you can remove it.

The short version: your exact path and the times you visited places are never shared with anyone or stored in a form other people can see. Only your own device knows your precise movements. If you contribute to the shared map, only anonymous, aggregated map areas (roughly 100 meter hexagons) are added to it — never your route, never a timestamp, never anything traceable back to you.

Information we collect

Location data. While you have tracking turned on, Disco reads your device's GPS location (foreground and, if you allow it, background) to reveal the map as you move. This is the core of the app and only runs while tracking is active.
Motion data. Step counts and motion-sensor readings, used only to confirm movement is genuine (anti-cheat) — never stored as a personal fitness record.
Device integrity data. Apple App Attest (iOS) or Google Play Integrity (Android) tokens, which prove a request came from a genuine, unmodified copy of the app — not from an automated script trying to fake locations.
Account information. By default, your account is anonymous — no name, email, or phone number required to play. If you choose to link an Apple or Google sign-in (to recover your account after reinstalling), we receive the identifier that provider gives us for that purpose only.
Photos you choose to post. Disco's optional "field notes" feature lets you post a photo tied to your current map hexagon, visible to other players standing in that same hexagon. Before upload, we strip the photo's embedded GPS and EXIF metadata — only the coarse hexagon you posted from is attached, not the exact coordinates a raw phone photo would otherwise carry.
Diagnostic logs — only if you ask. A "Send debug log" button in Settings lets you voluntarily send us a short technical log to help fix a problem you're seeing. This never happens automatically. Logs are deleted after 7 days.
Basic device information. Platform (iOS/Android), app version, and battery status, used only for showing you accurate in-app status and for the diagnostic logs above.

What we don't do

We don't use third-party advertising or analytics SDKs. There are no ad trackers in Disco.
We don't access your contacts, photo library, or files beyond a photo you explicitly take or choose to post.
We don't sell your data to anyone, for any reason.
We don't publish your exact route, the times you visited a place, or anything that identifies you personally on the shared map.

How the shared map works

If you turn on "contribute to the shared atlas," only anonymous map cells (~100m hexagons) you've physically visited are added to a map everyone can see — with no name, timestamp, or path attached. Server-side checks (comparing implied travel speed and continuity between your points) exist to keep the shared map honest — to stop people from faking locations — not to build a profile of you. You can turn sharing off at any time in Settings; your own personal map keeps working exactly the same either way.

Who we share data with

We use a small number of service providers to run Disco. None of them are permitted to use your data for their own purposes:

Supabase — hosts our database, authentication, file storage, and server functions.
Apple and Google — provide device-integrity verification (App Attest / Play Integrity) and, only if you opt in, account sign-in.
OpenStreetMap / Nominatim — powers place search when you look up a location by name.
Map tile providers (CARTO, Esri/ArcGIS) — supply the base map imagery you see.

Your data, your choice

Turn off sharing anytime in Settings — your personal map keeps growing; nothing new is added to the shared map.
Delete your account anytime in Settings. This permanently removes your profile, your contributions to the shared map (any map cell nobody else also contributed to is removed entirely), and any diagnostic logs you sent us. This cannot be undone.
Protected places. You can mark specific areas (like home) as private in Settings — visits there are never queued for the shared map, regardless of your sharing setting.

Children's privacy

Disco is invite-only and not directed at children. We do not knowingly collect data from children under 13 (or the relevant minimum age in your region).

Changes to this policy

If this policy changes in a way that affects how your data is used, we'll update the date at the top of this page and, for significant changes, notify you in the app.