Privacy Policy

The short version

• You can play as a guest without giving us a name or an email address.
• If you sign in, we receive your name, email address and profile picture from Google, Apple or Facebook — nothing more.
• We store what the game needs to work: your profile, your matches, your coin balance and your settings.
• We do not sell your data, we do not show third-party ads, and we do not use advertising identifiers or third-party tracking SDKs.
• You can delete your account and everything tied to it from Settings → Delete account, in the app, at any time — or at diguapp.com/delete-account if you no longer have it installed.

This summary is for orientation only. The sections below are the binding version.

1Who we are

Digu (“Digu”, “we”, “us”) is a multiplayer card game for iOS and Android. This policy explains what personal data we collect when you use the Digu app or visit diguapp.com, why we collect it, who we share it with, and what rights you have over it.

The controller responsible for your personal data is [LEGAL ENTITY NAME], [REGISTERED ADDRESS], [COUNTRY]. You can reach us about anything in this policy at [privacy@digu.app].

2What we collect

We collect only what the game needs in order to function. There is no data broker relationship, no advertising network, and no third-party analytics or crash-reporting SDK embedded in the app.

2.1 Account and profile

You can play as a guest, in which case we create an anonymous account identified only by a random identifier — no name, no email address.

If you choose to sign in with Google, Apple or Facebook, that provider sends us your name, your email address, a profile picture URL where available, and a provider account identifier. We never receive your password. If you use Apple’s Hide My Email, we only ever see the relay address Apple gives us.

From that we store a profile: your display name, your avatar URL, whether the account is a guest, and account timestamps. You can change your display name in the app at any time.

2.2 Gameplay data

To run matches, resolve disputes and detect cheating, we record the games you take part in: table configuration, the seats and players at the table, round and match scores, and an ordered log of the moves made in each game. We also record in-game events (for example a match starting or ending) to understand how the game is performing in aggregate.

If you play ranked matches we additionally store your results, rating and league placement for the season, and periodic snapshots of your rank so leaderboards and rank history work.

2.3 Coins and purchases

Digu uses in-game coins, which have no cash value and cannot be exchanged for money. We keep a ledger of coins earned and spent, and a record of each top-up — whether it came from a voucher code, an in-app purchase, or a manual adjustment by our support team.

For in-app purchases we store the transaction identifier issued by Apple or Google, the amount and the currency, so we can credit your coins and honour refunds. We never receive or store your card number or payment credentials — payment is handled entirely by the App Store or Google Play under their own privacy policies.

2.4 Notifications and device data

If you allow push notifications, we store the push token issued by your device, along with the platform (iOS or Android), your app version, your language, your time zone, and when the device was last active. We use these to deliver notifications and to stop sending to devices that no longer exist.

We store your notification preferences — which categories you want and any quiet hours you set — and a record of notifications sent to you so we do not send duplicates.

2.5 Safety and abuse prevention

If you report another player, we store your account identifier, the reported player’s identifier, the game concerned, the reason you selected and any details you write. If you are reported, that record is attached to your account for our moderation team to review.

We also keep short-lived counters used to rate-limit requests, so that automated abuse can be blocked.

2.6 Data that stays on your device

Your app settings — sound, volume, left-handed mode, table theme — are stored locally on your device and are not sent to us.

2.7 Technical data

Like any online service, our servers process the IP address and basic connection information involved in your requests in order to deliver responses, apply rate limits and defend against attack. We do not use this to build a profile of you.

3Why we use it, and our legal basis

Where data-protection law requires a legal basis, ours are as follows.

4What we do not do

We think these are worth stating explicitly, because they are common in mobile games and are not true of Digu:

• We do not sell your personal data, and we do not share it for cross-context behavioural advertising.
• We do not display third-party advertising in the app.
• We do not use advertising identifiers (IDFA / Android Advertising ID) and we do not ask for App Tracking Transparency permission.
• We do not embed third-party analytics, attribution or crash-reporting SDKs.
• We do not read your contacts, photos, precise location, microphone or camera.
• We never show other players your email address — only your display name and avatar.

5Who we share it with

We do not sell or rent personal data. We share it only with the service providers that make the game run, each of which processes it on our instructions:

We may also disclose personal data where we are legally required to, or where it is necessary to establish, exercise or defend legal claims — for example to investigate fraud, chargebacks or serious abuse.

If Digu is ever involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction. We will tell you before your data becomes subject to a different privacy policy.

6What other players can see

Other players at your table see your display name, your avatar, and your play — the cards you discard and the moves you make. If you appear on a leaderboard, your display name, avatar and rank are visible publicly within the game.

Your email address, your account identifier and your purchase history are never shown to other players. The cards in your hand are never sent to another player’s device — the server keeps hidden game state hidden.

Choose a display name you are comfortable being seen. You can change it at any time in the app.

7International transfers

Our infrastructure providers operate globally, so your personal data may be processed on servers outside [COUNTRY]. Where we transfer personal data out of a region that restricts such transfers (such as the EEA or the UK), we rely on an appropriate safeguard — typically the European Commission’s Standard Contractual Clauses, or an adequacy decision covering the destination country. You can ask us for details of the safeguard that applies to you.

8How long we keep it

We keep personal data only as long as it is needed for the purpose it was collected for:

• Your profile and coin balance — for as long as your account exists.
• Match and move history — while it is useful for scoring, disputes and anti-cheat, after which it is deleted or aggregated so it no longer identifies you.
• Push tokens — until the device unregisters, you turn notifications off, or the device goes inactive.
• Purchase records — for as long as tax, accounting and refund obligations require, which is typically several years and may outlast your account.
• Moderation reports — for as long as needed to keep the game safe and to enforce our terms.

Inactive guest accounts and their data may be removed automatically after an extended period of inactivity.

9Deleting your account

You can delete your account yourself, from inside the app: Settings → Delete account. You do not need to contact us and you do not need to give a reason.

If you have already uninstalled the app, request it at diguapp.com/delete-account. That route cannot verify who you are on its own, so we review each request by hand and may email you to confirm the account is yours before we delete anything.

Deleting your account removes your profile, your coin balance and ledger, your push tokens and notification preferences, and your ranked standings. Some records are retained where the law requires it or where they do not identify you — specifically purchase records needed for tax and accounting, and moderation records needed to keep other players safe. Completed games remain in our records for the other players at the table, with your identity removed.

Deletion is permanent. Coins, ranks and history cannot be restored afterwards, and unspent coins are not refundable.

10Your rights

Depending on where you live, you may have the right to: access the personal data we hold about you; correct it if it is wrong; delete it; restrict or object to how we use it; receive it in a portable format; and withdraw consent you have given (for example, push notifications) without affecting what we did before you withdrew it.

Exercise any of these by emailing [privacy@digu.app] from the address on your account, or — for deletion — by using Settings → Delete account in the app or diguapp.com/delete-account. We respond within one month. We will never charge you or degrade your experience for exercising a right.

You can turn off notification categories, or set quiet hours, at any time in Settings → Notifications — or by revoking the permission in your device settings.

If you think we have handled your data badly, please tell us first so we can fix it. You also have the right to complain to the data protection authority in [COUNTRY] or in your country of residence.

11Children

Digu is not directed at children under 13, and we do not knowingly collect personal data from them. If you are under 13, please do not create an account.

If you believe a child under 13 has given us personal data, contact [privacy@digu.app] and we will delete the account and its data promptly.

12Security

Personal data is encrypted in transit. Access to production data is restricted to the people who need it, and staff access to player records is role-limited and logged. Our servers are the sole authority over game state, which means hidden game information — such as the cards in a hand or the order of the deck — is never sent to a player’s device.

No system is perfectly secure. If a breach ever affects your personal data and poses a risk to you, we will notify you and the relevant regulator as the law requires.

13This website

diguapp.com is a static marketing site. It sets no cookies, runs no analytics and has no login. Our hosting provider processes standard server logs — including IP addresses — to serve the site and protect it from attack.

14Changes to this policy

We may update this policy as the game changes. The effective date at the top always reflects the current version. If a change materially affects your rights or how we use your data, we will give you notice in the app before it takes effect.

15Contact us

Questions, requests or complaints about this policy or your personal data: