Privacy

The player app collects nothing about a person

The Player app runs unattended on a screen. Nobody signs in on it, types into it, or browses with it, so it collects no personal information from anyone. It requests only three Android permissions — internet access, network state, and permission to start after the device reboots. It has no access to location, camera, microphone, contacts, files or accounts, and contains no advertising or analytics software.

What a paired screen reports

Once a screen is paired to a customer's account, it sends the following so its owner can see that it is working and see what it is showing:

• Device model, operating system version, app version and screen resolution
• How much storage the device is using, and how much it has
• The device's timezone, so scheduled content changes at the right local hour
• A periodic still image of what is currently on the screen, so the owner can confirm the right content is playing
• A record of what played, when, and for how long
• The IP address the screen connects from, used to rate-limit abuse

About those screen images

The image is a picture of the sign's own content — a menu, a promotion, a notice — captured so the person responsible for the screen can verify it from somewhere else. It is not a camera. The app has no camera permission and cannot see the room the screen is in.

Only the most recent image for each screen is kept; each one replaces the last. There is no history.

What the dashboard collects

People who manage screens hold an account with us. For them we store a name, an email address, a chosen language, and a password that is stored only as a cryptographic hash — we never hold a readable copy and cannot recover one.

For paying accounts we also store a billing name, email and address, and the identifiers our payment processor gives us. Card numbers are handled entirely by the payment processor and never reach our systems.

We also keep the content customers upload — images, video, layouts and playlists — because showing it on screens is the service.

Artificial intelligence features

Some features send text to Google's Gemini models: the natural-language command bar, and image generation. What is sent is the instruction typed by the operator plus the names of their own screens, layouts and playlists so the request can be understood. Customer media is not sent, and the content of screens is not used to train anyone's models.

Who else sees it

We do not sell personal information and do not share it for advertising. We use these providers to run the service, and they process data only on our instructions:

• Vercel — hosting the application
• Neon — the database
• Stripe — payments and card handling
• Resend — sending notification email
• Google — the AI features described above

How long it is kept

Account and content data is kept while the account is open. Screen images are overwritten continuously and never accumulate. Playback records are kept so that proof-of-play reporting works over the reporting windows the product offers. When an account is closed we delete its data, except where we are required to keep billing records for tax and accounting purposes.

Your rights

You can ask for a copy of the personal information we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@dstology.cloud and we will respond. Customers in Canada may also complain to the Office of the Privacy Commissioner of Canada.

Children

This is a business product. It is not directed at children and we do not knowingly collect information from them.

Changes

If this policy changes in a way that matters, we will update the date at the top and tell account holders by email.

Contact

Apptology Inc., Ottawa, Ontario, Canada. privacy@dstology.cloud