Privacy Policy

DBL Mando is a disc golf scorecard. It collects as little as it can get away with, and most of the time that is nothing at all.

The short version

• You can use the whole app without an account. If you never sign in, nothing about you ever leaves your phone.
• Signing in adds one thing: your rounds are backed up and can be shared with friends you choose.
• The app can show where you are on the course map, but only if you ask it to — and your exact position never leaves your phone. Only a rounded position, about a kilometre, goes to Apple Weather for the conditions card.
• It never asks for your contacts, photos, camera or microphone, because it does not use them.
• There is no advertising, no tracking, and no third-party analytics. Nothing is sold or shared with data brokers.
• If the app crashes while you are signed in, it sends a crash report — the technical details of the crash, and nothing about you or your round.
• You can delete your account, and everything in it, from inside the app.

What is stored on your phone

Rounds you score are written to your device first and kept there. This is what makes the app work on a course with no signal. Stored on the device are your rounds, the scores in them, the names of the people on your card, and the courses and layouts you have played.

This data is yours. It is not read by us, and deleting the app deletes it.

What is collected when you sign in

Signing in is optional and uses Sign in with Apple. If you choose to sign in, the following is stored on our servers:

From Apple

• An Apple user identifier — a code that identifies you to this app only.
• Your name, if you let Apple share it. Apple provides this once, the first time you sign in.
• Your email address. If you choose Apple's Hide My Email, we receive a relay address instead of your real one and never see the real one.
• A refresh token from Apple. This is used for exactly one purpose: to disconnect your Apple ID from this app if you delete your account. It is never used to access anything else.

From you

• A handle and display name you choose. Your handle is visible to other players so they can add you.
• Rounds you sync — the course, the date, the hole count, the pars and distances, and every score, along with the names of the players on the card.
• Friend connections you make or accept.
• Courses you add — name, town, hole count, and the layout as you played it. If a course has coordinates, they are stored with it. These describe a place, not you, and you are not required to provide them.

The lock screen

While a round is in progress the app can show it on your lock screen: the course, the hole you are on, and the scores on your card. This is drawn on your phone by the app itself. Nothing about it is uploaded, and it disappears when the round ends. You can turn Live Activities off for DBL Mando in iOS Settings.

Notifications

Notifications are off until you turn them on. The app only asks after you tap Turn On next to an explanation of what they are for, never when it opens, and only while you are signed in.

• Turning them on stores the push address Apple issues for this app on this phone, linked to your account, so the app can tell you about friend requests, being put on a card, and rounds you were on finishing. That address, the version of the app that registered it, and when, is all that is stored about your phone.
• It is deleted when you sign out, when you delete your account, when you turn notifications off in iOS Settings and next open the app, when Apple reports it is no longer valid, or after six months without the app being used.
• A notification only ever names a friend, or somebody you have put on your own card. Anyone else is Someone — including somebody who has put you on theirs — and you see who after you open the app.
• They never say where you are, which course, or what anyone scored.
• With iOS's default previews, a locked phone shows only a title such as Friend request. The rest appears once the phone is unlocked.

Notifications are delivered by Apple Push Notification service. What they say is sent to Apple to deliver, and to nobody else.

Your location

Location is optional, and works like this:

• Nothing is requested until you tap the locate button on the map, or tap Show conditions or Find courses near you on the home screen. The app does not ask on launch.
• It asks for while using the app access only — never background or always-on.
• Your exact position never leaves your phone. It is used on device to centre the map, work out distances, and list the courses nearest to you. It is not written to disk, does not sync, and is never stored in our database.
• Saying no leaves the map and the rest of the app fully usable. You can change your mind at any time in iOS Settings.

One exception, and only one: the weather card. To show current conditions on the home screen, the app sends a rounded position — two decimal places, about a kilometre — to Apple Weather. That is deliberately too coarse to say where you are standing, and it is enough for a forecast. Apple states that it does not associate this with your Apple Account or device, does not store it, and does not link requests together. Nothing else about you is sent with it. If you never grant location access, no position is sent: the home screen offers to show conditions instead, or says they are off and how to turn them back on.

Coordinates attached to a course are a separate thing: they describe where that course is, not where you are, and they are set by searching for a place by name or address.

What is never collected

• Contacts, photos, camera, microphone or health data
• Advertising identifiers, or any data used for tracking across apps or websites
• Payment information — there is nothing to buy today, and if that ever changes, purchases go through Apple. We never see a card number.

DBL Mando contains no advertising SDKs and no third-party analytics. Crash reports, described below, are the only diagnostics it sends, and they go to our own database. It is not used to track you, in the sense Apple's App Tracking Transparency means.

Course information in the app

DBL Mando ships with a list of real courses — names, towns, positions and hole counts — supplied by DiscGolfAPI, with coordinates for a handful of courses from OpenStreetMap. That list is bundled with the app and read on your phone. Browsing it, searching it, or adding a course from it sends nothing to anyone. Both sources are credited on the Courses tab.

Crash reports

When DBL Mando crashes, or freezes long enough that you would force-quit it, iOS records what happened. The next time you open the app — usually the following day, because that is how often iOS hands these over — the app sends that record to our database so the crash can be fixed.

A crash report contains the kind of crash, the call stack (a list of the functions the app was running), the app version, your iOS version, and your device model, such as iPhone16,1. It contains nothing about you, your rounds, your friends, or your location. Your account id is attached so a crash that only affects one person can be answered.

These reports are only sent while you are signed in. If you have never signed in, the app never sends one.

The records come from MetricKit, which is part of iOS. There is no crash-reporting SDK from another company in the app, and the reports go to our own database rather than to a third party. Deleting your account detaches your account id from any crash reports it sent; the technical details are kept, because at that point they describe the app and not you.

Who else handles this data

• Apple — provides Sign in with Apple, the weather shown on the home screen, and Apple Push Notification service, which delivers notifications if you turn them on. Apple's own privacy policy covers what they do with all three.
• Supabase — hosts the database and the sign-in service. They store the data on our behalf and do not use it for their own purposes.

Nobody else. The data is not sold, rented, or shared with advertisers or data brokers.

What other people can see

Only what you choose to share:

• Your handle is public. Anyone signed in can find you by typing it, which is what a handle is for.
• Your display name is searchable by other people signed in to Mando. Turn it off under Finding you on your profile and only your handle will find you.
• People you play a round with can see that round and the scores in it.
• Friends you accept can see your rounds.
• Your course ratings are never shown to anyone individually. They are only ever combined into an average, and no average is shown at all until at least five people have rated that course.

You can remove a friend, block anyone, or report them, from your profile screen. Blocking is immediate: a blocked person cannot find you in search, cannot send you a request, and is not told that you blocked them. You can unblock from the same screen.

How long it is kept, and how to delete it

Data is kept until you delete it.

To delete your account, open DBL Mando, go to Profile and choose Delete Account. This is immediate and cannot be undone. It removes your profile, your handle, your friend connections, and every round synced to your account. It also tells Apple to disconnect your Apple ID from the app.

One thing worth knowing before you do it: rounds you hosted are deleted for everyone who played in them, because the round belongs to the card it was scored on. Rounds hosted by somebody else survive; only your entry in them is removed.

Rounds stored on your phone are separate and are not touched by account deletion. Deleting the app removes those.

Children

DBL Mando is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If this policy changes in a way that affects what is collected or who it is shared with, the date at the top will change and the new version will be published here before the change takes effect.

Contact

Questions about this policy, or about data held about you: andrewjpar@gmail.com