Frequently Asked Questions

You have the right to delete all data Giro stores about you at any time. Here's how:

1. Open Giro and go to the Settings tab.
2. Tap Delete My Data (shown in red).
3. Confirm the action. This will permanently delete all data associated with your account from our servers and sign you out.

Giro stores very little. On our servers we keep:

• A pseudonymized identifier — a one-way hash that your data on our servers is filed under: of your Giro account or, if you used Giro before version 1.22, of your Discogs username, stored instead of the username itself.
• Your Giro account — made when you sign in with Apple. From Apple we keep only the ID it gives Giro for you, never your email or name. The account holds your handle (your name in Giro: anyone who knows it can find you and send you a friend request) and a sign-in for each phone you use. A sign-in keeps only a one-way hash of its token, and ends when you sign out or 90 days after it was last used. Accounts from before version 1.22 also keep their Discogs user ID, and their old Discogs username as a handle only they can take.
• Your marbles — the records you got right in Guess the Song and Guess the Cover, and your sealed jars, so they aren't lost if you change phones or reinstall. Winning a competition gives you a marble of your friend, with their name and profile picture only while you're friends: if either of you unfriends, or they delete their data, it stays as “a former friend”, with no name or picture. Friends see your marbles only if you turn on Share my marbles with friends in Profile → Privacy; it's off until you do.
• Usage counters — how many AI answers your account asked for today and, for the Fact Behind the Cover and You May Like, which records it asked about (at most three times each a day), filed under your pseudonymized identifier, so no single account can use up the AI for everyone. They're deleted automatically every day at midnight (UTC). Delete My Data doesn't clear them early, since that would reset the daily limit.
• If you use Friends — who your friends are, your friend requests and, if you allow notifications, a token to send them to your phone. So friends can find each other by handle, and you hear about requests, reactions and games. Your phone also shares the username of the Discogs account you connected, shown only to accepted friends so they can open your collection: we can't check it, so it never identifies you. If you used Friends before version 1.22, your Discogs username and profile picture from then are kept too. When a request or reaction notifies a friend, we keep a note of who notified whom for 24 hours, so the same notification isn't sent again.
• If you duel or compete with friends — the invites (who invited whom, when, and the game's settings), kept until either of you deletes your data. A duel's rounds (records, covers and song previews) and both players' answers are kept only while it's played, and deleted an hour after it ends. A competition's days, rounds and both players' answers are kept so you can both look back on it; if either of you deletes your data, the whole competition goes.
• If the friends' timeline is on — the records you add to your collection from then on (title, artist, year, format, cover and the date you added it), and the reactions you leave on friends' records or receive on yours. Shared only while your Discogs collection is public, and only visible to your accepted friends. They're stored on our servers, and Delete My Data removes them.
• If you use Pick by mood — nothing about you. With AI on, each record's title, artists, year, genres and styles go once through our server to TypeSafe's Jev model, which judges the record's energy and mood. Our server keeps that answer for up to 180 days, filed under the record's details rather than under you, so anyone with the same record gets it at once. The moods themselves are kept on your phone.
• If you use Market insights — nothing. Prices, copies for sale and how many people have and want a record are asked of Discogs by your phone and kept only on your phone. None of it is stored on Giro's servers.

We never store your Discogs password or OAuth tokens on our servers. Your collection is cached on your device for offline access. It's never sent to us, apart from the timeline records above and what the AI features send while you have them on (see the next question), and we store none of it except those timeline records.

Discogs is an app you connect to your Giro account. Your phone talks to Discogs directly, so Discogs sees your phone's IP address, as it would with any Discogs app. Our server only signs each request with Giro's Discogs key: it sees which Discogs address a request is for, but your Discogs traffic doesn't pass through it. From version 1.22, our server never contacts Discogs itself.

Yes, once you connect it — and only with your permission. After you sign in with Apple, Giro asks you to connect Discogs through the standard Discogs OAuth flow, which means you authorize the app directly on Discogs. Giro can read your collection and wantlist and make the changes you ask for, like adding a record. It cannot make purchases or modify your Discogs account settings. You can disconnect Discogs in Profile → Connections.

Nothing until you turn AI on in Profile → AI, and nothing at all while it's off. Your Discogs login is never part of it. With AI on, Fun Facts (part of Groove) sends about once a week 18 of your records picked at random — title, artist and year — and a few totals: how many records, your top artists, genres and styles, decades, formats and how many you've rated. The Fact Behind the Cover sends the record whose cover you flip, and You May Like one record from your collection: your phone sends that record's details from Discogs, such as title, artists, year, label, format, genres and styles, and for a cover also its tracklist, credits and notes. Each request also says which language to answer in. It all goes through our server to Anthropic's Claude, and the answer goes back only to your phone, which keeps it. We don't keep what's sent or the answers, and it isn't used to train models. Pick by mood is described above.

You can revoke access at any time from your Discogs account settings:

1. Go to discogs.com/settings/applications.
2. Find Giro in the list of authorized applications.
3. Click Remove to revoke access.

You can reach us through the Settings screen inside the app. We take privacy seriously and will respond to all requests within a reasonable timeframe.