Privacy Policy

Fivebar is provided by Bartłomiej Żabicki, a sole proprietor established in Poland, operating as BartStudio. For the purposes of the EU General Data Protection Regulation (GDPR) and the UK GDPR, he is the data controller for the personal data described here.

Registered address: ul. Podgórska 3, 32-010 Baranówka, Poland · NIP: PL6821775165 · Contact: hello@bartstudio.io.

This policy covers the Fivebar app for iPhone and iPad and the website at fivebar.bartstudio.io. Read it together with our Terms of Service.

Fivebar is a score sheet. It needs to know the names your table gives itself and the numbers they score, and it needs nothing else — so it asks for nothing else. In App Store terms, Fivebar is declared as Data Not Collected.

• There is no account. Nothing to register, so no name, email address or password of yours exists on our side.
• We run no server. There is no Fivebar backend anywhere for your games to be sent to, because there is nothing for one to do.
• No analytics, no advertising, no tracking. The app contains no analytics SDK, no advertising identifier and no third-party tracker of any kind. We do not know how many games you have played, or which sheets you use.
• Sync is your own iCloud. Games move between your devices through your private CloudKit database, which Apple does not let us read.

Everything Fivebar keeps, it keeps locally, in the app's own storage:

• Players — the names and colours you type for the people you play with. These are whatever you choose to type: "Mum", "Tom", or an initial. Fivebar never asks for a full name and has no reason to want one.
• Games — which sheet was played, when, every score entered, and who won.
• Statistics — win records and head-to-head lines, derived from those finished games on your device as you look at them.
• Settings and app state — whether onboarding has been seen, and whether the unlock has been purchased.

None of this is transmitted to us. Deleting the app removes the local copy; see Retention and deletion for the iCloud copy.

If you are signed into iCloud and iCloud Drive is enabled, Fivebar mirrors your players and games into your own private CloudKit database so your iPhone and iPad show the same history. This is Apple infrastructure operating on your account, under Apple's privacy policy.

We have no access to it. A private CloudKit database is readable only by the signed-in Apple Account; the developer of an app cannot query it, browse it or recover it for you. If you turn iCloud off, Fivebar keeps working and your games simply stay on that device.

Fivebar's sheets are unlocked by a single in-app purchase. Payment is handled entirely by Apple — we never see your card, your billing address or your Apple Account email.

To know whether that unlock belongs to you, the app uses RevenueCat, which validates the receipt Apple issues. RevenueCat sees a pseudonymous, app-generated identifier and the purchase record attached to it. It is not linked to your name, your email address or your games, and it is not used for tracking or advertising.

A finished game can be exported as text or CSV, or shared as an image. That happens only when you tap share, and it goes wherever you send it — your Messages, your mail app, your group chat. Nothing passes through us on the way.

Support is plain email — there is no form and no ticketing system. If you write to hello@bartstudio.io, we process your address and whatever you put in the message for as long as it takes to help you, and keep the thread for our records afterwards. The lawful basis is our legitimate interest in answering our own users (Art. 6(1)(f) GDPR).

fivebar.bartstudio.io sets no cookies and stores nothing on your device. Page views are counted with Cloudflare Web Analytics, which is cookie-free and identifier-free: it reports the page, the referrer, the browser type and the country, aggregated, with nothing that follows you between sites or sessions.

Our hosting provider keeps standard web-server access logs, including IP addresses, for security and troubleshooting, on infrastructure in the European Union.

Fivebar is rated for all ages and is entirely suitable for a family game night — a child keeping score for the table is exactly the intended use. Because the app collects no personal data, creates no account and contains no advertising, no social features and no links out except the ones in Settings, it presents nothing to a child that it does not present to an adult.

If a player name typed by a child is nonetheless a concern, it exists only on that device and that family's iCloud, and can be changed or deleted at any time.

Stated plainly, because "we may share your data with partners" is the sentence this document exists to avoid:

• We do not sell or rent personal data. There is none to sell.
• We do not show advertising and do not work with ad networks.
• We do not track you across apps or websites, and the app requests no tracking permission because it has nothing to ask for.
• We do not profile you, and we make no automated decisions about you.
• We cannot read your games. Neither can anyone else who is not holding your phone.

The complete list of parties who process anything on our behalf. It is short because the app was built so it would be.

Apple and Cloudflare may process data outside the European Economic Area under the European Commission's Standard Contractual Clauses or an adequacy decision.

• Your games and players: kept until you delete them. Delete a game from History, or delete the app to remove everything local.
• The iCloud copy: yours to remove — Settings ▸ Apple Account ▸ iCloud ▸ Manage Account Storage ▸ Fivebar ▸ Delete Data. We cannot do it for you, because we cannot reach it.
• Purchase records: retained by Apple and RevenueCat for as long as needed to honour restore-purchase requests and to meet tax and accounting obligations.
• Support email: kept while we handle your question and for up to 24 months afterwards.
• Web-server logs: a short rolling window at our hosting provider.

Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority.

In practice, most of these you exercise yourself without asking us: your data is on your device and in your own iCloud, where you can read it, correct it, export it and delete it at any time. Where we genuinely hold something — a support email thread — write to hello@bartstudio.io and we will answer within one month.

If you believe we have handled your data unlawfully you may complain to the President of the Personal Data Protection Office (UODO), or to the authority in your own country of residence.

Your games sit inside the app's sandbox, protected by your device passcode, Face ID or Touch ID and by iOS file protection. In transit to iCloud they are encrypted by Apple. The website is served over HTTPS only.

The strongest security measure here is architectural: there is no central store of anyone's games to breach, because we never built one.

If this policy changes materially we will raise the version number and the date at the top of the page, and note the change in the app's release notes. The current version is 1.