Privacy Policy

This Privacy Policy describes how Diceo ("we", "us", "our") collects, uses, and shares information about you when you use the Diceo mobile application and related services (collectively, the "Service").

1. Information We Collect

Account Information

When you create an account using Google, Apple, Facebook, or email/password, we receive:

• Your email address
• Your display name
• A unique user identifier provided by the authentication provider
• Your profile picture (if provided by the authentication provider)

Usage Data

• Game events you create, join, or interact with
• Quiz scores and game history
• Approximate location (only when you explicitly enable geolocation to find nearby events)
• Device type, operating system version, and language preference

Crash Reports (Diagnostics)

To find and fix bugs, Diceo uses Firebase Crashlytics (Google LLC). When the app crashes or hits an unexpected error, a report is sent containing: the technical trace of the error, the app version and build number, the operating system and its version, the device model, the memory and storage state at the time of the crash, and a random installation identifier generated by Firebase for this install. A report never contains your name, e-mail address, account identifier, location, or the content of your games.

These reports are sent only if you agree to it. Crash reporting is switched off when the app is installed. Diceo asks you the question once, plainly, after you have used the app a few times. If you decline, nothing is ever collected and you are not asked again. If you accept, reports are deleted automatically after 90 days, and Crashlytics does not use the advertising identifier or track you across apps. To change your mind, uninstall and reinstall the app, or write to us at the address below and we will tell you how.

Information We Do NOT Collect

• We do not collect your precise GPS location in the background
• We do not access your contacts or microphone
• We do not track you across other apps or websites

Device Permissions

Diceo requests the following Android / iOS permissions only when you actively use the related feature. You can revoke any of them at any time from your device settings.

• Camera (android.permission.CAMERA / NSCameraUsageDescription) — used only when you tap "Take photo" inside an active game session to capture a souvenir picture (e.g. of the final scoreboard). Photos are stored locally on your device, never uploaded to our servers, and never shared with third parties.
• Photo Library (NSPhotoLibraryUsageDescription, iOS only) — only when you choose "Pick from gallery" instead of taking a new photo. Same handling: local-only.
• Approximate location — used only when you open the events map, to center it on your area. The coordinates never leave your device.
• Notifications — used to send you reminders about events you joined, friend gifts, and quiz invitations. You can disable them anytime in settings.

None of these permissions are used in the background. Each capture / location read is triggered by an explicit user action.

2. How We Use Your Information

• To provide, maintain, and improve the Service
• To authenticate your account and keep it secure
• To show you nearby game events and venues
• To process subscription payments via Stripe or Apple In-App Purchase
• To send you important account notifications
• To comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We share data only with:

• Firebase (Google LLC) — authentication, database, and cloud functions
• Firebase Crashlytics (Google LLC) — crash and error reports (diagnostics only, and only with your consent, see "Crash Reports" above)
• Stripe — payment processing (web & Android)
• Apple — In-App Purchase processing (iOS)
• Meta (Facebook) — only if you choose to sign in with Facebook
• Other users — your display name and avatar are visible to participants of events you join
• Law enforcement or regulators when required by applicable law

4. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law (e.g., transaction records for tax purposes). Crash reports are not linked to your account and are deleted automatically 90 days after they are received.

5. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data (see our Data Deletion page)
• Object to or restrict certain processing
• Withdraw consent at any time
• Lodge a complaint with a data protection authority

6. Children's Privacy

Diceo is not intended for children under 13 years of age (or the minimum age required by your country). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

7. Security

We implement industry-standard security measures to protect your data, including encrypted transmission (HTTPS), secure authentication tokens, and server-side access controls. However, no system is 100% secure.

8. International Transfers

Your data may be processed in countries other than your own, including the United States where Firebase infrastructure is located. We rely on standard contractual clauses to ensure an adequate level of protection.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the app or by email. Continued use of the Service after changes become effective constitutes acceptance of the updated policy.

10. Contact Us