Privacy Policy

This policy covers the Discofish website (discofishapp.com), the Discofish desktop application, and the Discofish listener apps for iOS and Android, all published by Thabotech.

The short version: Discofish has no accounts, no analytics, and no advertising. Your audio streams directly between your own devices and we never receive it. Downloads do not require an account or an email address. This policy also explains how we handle any remaining records from the earlier release waiting list.

Earlier release waiting list

The homepage now provides app downloads instead of a signup form. If you previously joined the release waiting list, your record contains your email address, signup date, and the wording and version of your consent. That consent covers only one release notification and does not create an app account.

Any remaining records are stored on our OVH-hosted server. We do not sell them or use them for other marketing. We delete them after the release notification, or sooner if you withdraw consent or we decide not to send that notification.

To withdraw consent or request access, correction or deletion, email hello@discofishapp.com. We will remove your email and consent record on request. Withdrawing consent does not affect earlier processing. You can also raise a concern with your local data protection authority.

Your audio

In browser mode, audio travels directly from the host computer to listeners' devices over your own local network and never touches the internet. In the mobile app, audio travels over an end-to-end encrypted connection between the host and each listener; there is no relay server operated by us, and we cannot hear, record, or inspect what you stream.

Peer-to-peer connections are established through a distributed hash table (the Holepunch DHT). As with any peer-to-peer network, devices participating in connection setup can observe routing metadata such as IP addresses, but never the audio itself, which stays encrypted end to end.

App permissions

The desktop app asks for the operating system's audio or screen-recording capture permission solely to capture the audio of apps you explicitly choose to broadcast. Captured audio is processed on your computer and sent only to your listeners.

The mobile apps ask for camera access solely to scan a host's pairing QR code. Camera frames are processed on your device and are never stored or transmitted. The mobile apps collect no personal data.

Website, downloads, and update checks

When you download Discofish or when the desktop app checks for a new version, our server receives your IP address, the app version, and platform — the same information any web request carries. We use standard, short-lived server logs for security and capacity planning, and nothing else. Update checks carry no account identifier or device identifier, because neither exists.

Our website does not use cookies, third-party analytics, or advertising trackers.

Use of services by minors

Our services are not directed to individuals under the age of 13, and we request that they not provide personal information through our websites, products or services.

Changes to this policy

If we ever change what data Discofish handles, we will update this page and the "last updated" date above before the change takes effect.