CONNECTDIS
TERMS & CONDITIONS
LEGAL

PRIVACY POLICY

EFFECTIVE: 14 SEPTEMBER 2026VERSION 1.1CONNECTDIS GLOBAL PTY LTD, AUSTRALIA

This policy explains what ConnectDis collects, why, and what control you and — for younger players — your parent or guardian have. It covers the ConnectDis app for iOS and Android and the pages served at connectdis.com.

01

WHO WE ARE

ConnectDis is operated by ConnectDis Global Pty Ltd ("ConnectDis", "we"), a company registered in Australia. We are the data controller for the personal data described here, and we handle it under the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles and, where it applies to users in the EEA/UK, the GDPR.

02

WHAT WE COLLECT

Account basics. Email address, password (stored hashed), your @handle, and your date of birth. Your birthday is used to set your age group and is never shown to other users.

Guardian details (players under 16). The name and email address of the parent or guardian linked to the account, the permissions they have approved in the app, and the approval record.

Identity verification (guardians only). A guardian confirms their identity through our verification provider, Didit, before approving a child. We keep the verification outcome and the details needed to show it was completed.

Location. Approximate and precise device location while the app is in use, if you allow it — used only to show venues and games near you. We do not collect location in the background.

Game data. Games you join or create, scores entered by players and scorekeepers, results, confirmations, Elo ratings, streaks and tiers.

Messages. Chat messages inside team and game channels, and any chat you report to us. Minors can only message within games and teams they belong to; we do not offer open DMs to under-18 accounts.

Device & usage. Device model, OS version, app version, crash logs, and coarse usage events (screens opened, features used) to keep the app working.

03

HOW WE USE IT

To run the service: matching you with nearby games, keeping score, computing rankings, and powering team and game chat. To keep it safe: age gating, guardian approval, reviewing chats that players report, and anti-cheat review of suspicious results. To improve it: aggregate, de-identified analytics. To reach you: push notifications and service emails (results to confirm, guardian notifications); marketing messages only with a separate opt-in.

Reporting and blocking. You can report a chat and block it from inside the app. Reports go to support@connectdis.com and are reviewed by our team; we use reported messages only to moderate and keep players safe.

We do not sell personal data, and we do not show third-party advertising to accounts under 18.

04

CHILDREN & GUARDIANS

Players aged 12 and over can sign up themselves. A child under 12 cannot sign up on their own — only a parent or guardian can create an account for them, from the guardian’s own ConnectDis account, and that account stays under the guardian’s control. A player aged 12 to 15 who signs up needs a parent or guardian to approve them. The guardian is notified by email and approves inside the ConnectDis app — until then, the player can look around but cannot join games, message other players or join teams. The guardian sees exactly what they are approving and decides separately on joining public games, chatting with other players, joining teams, and sharing when the player arrives at a game.

No public profiles. Player profiles are never published on the web — they exist only inside the app. Shared team and result pages hide the names and handles of players under 16.

Guardian controls. Guardians answer their child’s permission requests in the app under Me › My children, and can withdraw consent, request the account’s data, or request its deletion at any time by emailing guardians@connectdis.com.

05

LOCATION

Location is optional. Without it, you can still search by city or venue name. With it, the map centres on you and shows nearby pins. Other players never see your location — they see the venue’s location. You can turn location off in system settings at any time; nothing else in the app breaks.

06

WHAT IS PUBLIC & WHO WE SHARE WITH

Public by design. Team pages, game pages and confirmed results that someone shares as a link. These pages show handles and game statistics — never email, birthday, or precise location — and hide players under 16.

Processors. We use these service providers, each under a data-processing agreement: Google Cloud (API hosting, Sydney, Australia), Neon (database, Sydney), Upstash (cache), Cloudflare R2 (file storage), Vercel (website hosting), OneSignal (push notifications), Resend (email delivery), Didit (identity verification for guardians) and Sentry (crash reporting).

Legal. We disclose data if required by law or to protect users’ safety, and only the minimum necessary.

07

RETENTION & DELETION

Account data is kept while the account is active. You can delete your account in the app under Me › Settings › Delete account. You confirm with your password, and deletion takes effect immediately.

Erased. Your email, name, handle, photo, birthday, location, sports and identity-verification records.

Kept without your identity. Messages you sent stay in their chats but are shown as “Message not available” under the name “User Deleted”. Confirmed results stay in other players’ histories under “User Deleted”.

Handed on. Games you host pass to the player who joined earliest, or are deleted if nobody else joined. Teams you manage pass to their longest-standing member, or are deleted if you were the only member.

Otherwise, chat messages stay in the chat they were sent in for as long as that chat exists. Guardian approval records are kept as long as the minor’s account exists, as evidence of consent. Crash and usage logs are retained for 90 days. Copies held in routine database backups expire as those backups roll over.

08

YOUR RIGHTS

You (or your guardian, for players under 16) can access, correct, export, or delete your data, object to or restrict processing, and withdraw consent. You can edit your profile or delete your account in the app; for anything else, email privacy@connectdis.com. If you are unhappy with how we handle your data, you can complain to the Office of the Australian Information Commissioner (OAIC) or, in the EEA/UK, your local supervisory authority.

09

SECURITY

Data is encrypted in transit (TLS) and at rest. Access inside the team is role-limited and logged. Passwords are hashed with a modern algorithm. If a breach is likely to put you at risk, we will notify you and the regulator within the legally required window.

10

INTERNATIONAL TRANSFERS

Our servers are in Australia (Sydney). Some of the providers listed in section 06 process data in other countries, such as the United States. Where data leaves Australia we take reasonable steps to keep it protected to the standard of the Australian Privacy Principles, and for users in the EEA/UK, transfers rely on standard contractual clauses or an adequacy decision.

11

CHANGES TO THIS POLICY

We will notify you in-app of material changes at least 14 days before they take effect; for changes affecting minors’ data we also email the guardian. The current version always lives at connectdis.com/privacy.

CONTACT

Privacy questions and requests: privacy@connectdis.com · Guardians can also write to guardians@connectdis.com. We answer within 30 days.

TERMS & CONDITIONS →© 2026 CONNECTDIS