Updated · September 30, 2026

Privacy
policy.

This policy explains which data DISPO processes, why it is used and the choices available to you.

1. Data controller

DISPO is published by Raphaël Herrera, Geneva, Switzerland. Ludovic Marie handles privacy contacts at ludovic@dispoapp.net.

2. Data we process

Depending on the features you use, DISPO processes:

  • identity and contact data: name, handle, email address, phone number if you verify your account by phone, and social links you add; the verification details sent by email or phone are used only to confirm the account is yours;
  • musician profile data: instruments, genres, experience, music school, age if provided, availability, trips, country, postal code and city; personal repertoire, songs imported from groups, manual additions, arrangements and proficiency levels;
  • published content: profile photo, showcase videos, SOS requests, fees and payment methods stated in listings (without payment card details), bands, sessions, setlists and documents;
  • communications: private and group messages, photos, compressed videos, attachments, reactions and information required for editing, deletion, delivery and read status;
  • social data: follows, collaborations, blocks, reports and applications;
  • technical identifiers required for accounts, security, realtime updates and push notifications, if you enable them;
  • usage statistics and crash reports: a few key steps (app opened, sign-up steps, SOS posted or application sent, band joined, link shared, notification choices) and app errors, with a random identifier specific to the installation, the app version and, when signed in, your account identifier. Nothing you write is included. This data stays with Supabase in Zurich, is never shared with a third-party analytics service, and is deleted after 13 months (90 days for crash reports);
  • display preferences (color theme, hidden artwork) saved with your account;
  • purchase and renewal information supplied by Apple and RevenueCat, linked to the account identifier, to establish Group/Premium access, analyze subscriptions and validate referral rewards (free offer used, first payment, refund). DISPO does not receive payment card details.

Calendar access is optional. It is requested only if you turn on sync in settings and is used solely to add and update your DISPO sessions in your phone’s calendar. You can withdraw it at any time in DISPO or in iOS Settings.

Location is optional. It is recorded only when you request a place or tap a sharing mode in settings. You choose approximate location, more precise location or no location. Precise coordinates are rounded before transmission; they still qualify as precise in Apple’s disclosures. There is no automatic or background tracking. Removing your location does not hide your profile. Exact event and SOS addresses are restricted to authorized participants; there is no map of musicians’ positions.

3. How we use data

We use data to create and secure accounts, understand where the app is hard to use and fix crashes, display profiles, match SOS requests with compatible musicians, organize sessions and bands, enable conversations and media, deliver the notifications you choose, provide available features, answer support requests and moderate content. Moderation is partly automatic: a filter analyzes published text to block abusive content and may suspend or ban an account after repeated or serious violations; any decision can be appealed at ludovic@dispoapp.net and is then reviewed by a person. Depending on the activity, processing is based on providing the requested service, legitimate interests in protecting the platform, legal obligations or your consent.

4. Hosting and recipients

Application data is hosted by Supabase in Europe, in the Zurich region. RevenueCat receives the internal account identifier and transaction data to verify purchases, manage access and provide subscription statistics. Song searches, metadata and listening links may be processed by the music catalogs and link services used by DISPO (Apple, Deezer, Spotify, Musicfetch and Odesli/song.link). They do not receive your full repertoire or proficiency levels; external listening services follow their own privacy policies. Apple processes app distribution, in-app purchases and push notification delivery under its own terms. We do not sell personal data. Data may be disclosed to providers required to operate the service, authorities where legally required, or as part of a legal transaction involving DISPO.

Visibility

Your personal repertoire is free. Under “Repertoire privacy”, you choose who sees it: everyone (your DISPO profile and your public web page), DISPO members (the default, on your profile in the app) or only you; an existing choice is preserved. With “Only me”, other users cannot see its list or song titles, but the common-song count and compatibility score remain visible. The organizer of an SOS request sees how many of its songs each musician knows, unless their repertoire is set to only them. Hidden songs are excluded from the comparison. Creating a shared band repertoire only copies an invitee’s songs if their repertoire is public. Removed songs are not automatically imported again. Private group notes, solos and documents are not copied into your personal repertoire.

The public page (dispoapp.net/u/username) is off by default. If you turn it on, anyone can see your name, photo, city, instruments and levels, genres, bio, social links, videos, the schools shown on your profile, your public bands and, if you opened your repertoire to everyone, its song titles with artist and key. It never shows your postal code, location, age or availability. You can turn it off at any time in Settings → Public page. When you share an SOS request or a band invite link, the page only shows the essentials (title, date, city or neighborhood, instruments wanted, organizer’s first name; band name and member count), never the exact address or the fee.

Information published in a profile or SOS request is visible to other users according to app settings and features. Private messages and files are limited to participants; group messages and files are limited to band members, subject to access strictly required for safety, support and service operation.

5. Retention and security

Data is kept for as long as needed to operate the account and conversations, then deleted or anonymized when no longer required, subject to legal retention periods, abuse prevention, technical backups and dispute resolution. Server-side access controls restrict access to profiles, bands, messages and files.

6. Your rights

You may request access, correction, deletion, restriction or portability of your data, and object to certain processing. You can edit many details in the app, manage your own messages with the controls available in your version, and delete your account from Profile → Settings → My account → Delete my account. Account deletion does not cancel an Apple subscription: manage or cancel it in your App Store account. If you used Sign in with Apple, you can also remove DISPO in Apple settings after deleting the account. Records required by accounting laws and data held by Apple remain subject to their retention policies.

To exercise a right, email ludovic@dispoapp.net. We may request proof of identity where necessary. You may also contact your competent data protection authority.

7. Children and changes

DISPO is intended for people aged 13 and over. This policy may change as the service evolves; the date at the top shows the latest update.