Privacy Policy

1. Who we are

Bibs 5aside Ireland Limited, registered in Ireland (company number 824670) is the data controller for personal data processed through Bibs. For anything about your data, email info@bibs5aside.com.

2. What we collect

Account: your email address or mobile number, and sign-in data (including from Apple or Google if you use them).

Profile: display name, avatar, positions, home area, and optional nationality and bio.

Location: if you tap "Set my location" in your profile, your device's precise position at that moment, or the coordinates of an address you type instead. The App only reads your location when you tap that button, never in the background. A game's location comes from the address its organiser types.

Activity: RSVPs, ratings you give and receive, messages, photos and captions, friends, clubs, tournaments and game awards.

Guests: if you RSVP to a game from a shared link without an account, the name and email address or phone number you enter.

Device and security: a push-notification token, and a list of the devices signed in to your account (device description, IP address and last-used time).

Usage and diagnostics: in-app events (for example that an account was created) and crash or error reports, stored in our own database.

Help chat: if you use the help assistant on the website's sign-in page, the messages you type.

If you turn on App Lock, Face ID or Touch ID is handled by your phone. We never receive your biometric data.

3. Why we use it and our legal basis

To provide the App you signed up for (contract): your account and card, games and RSVPs, ratings, messages, posts, notifications, and your data download.

To show you nearby public games and players (consent): we only use your home location if you set one, and you can remove it at any time in the phone app (Profile > Edit profile > Remove my location) or by emailing us.

To keep the App safe and working (legitimate interests): spotting suspicious sign-ins, showing you your signed-in devices, handling reports and moderation, stopping spam, and fixing crashes. We have checked that this does not override your rights.

To understand how the App is used (legitimate interests): counting events such as sign-ups in our own database. We do not use third-party analytics or advertising tools. You can object to this.

To let guests RSVP (legitimate interests): so organisers know who is coming.

To answer help-chat questions (legitimate interests): only when you choose to use it.

To meet legal obligations: for example, responding to lawful requests from authorities.

We do not sell your data and we do not use it for advertising.

4. What other people can see

Other users see what your settings allow: your card and profile, and your posts and games for friends only or for everyone. A game's organiser sees the names, but not the contact details, of guests who RSVP from a link. A public game's exact address is only shown to people who have joined it.

5. Service providers and transfers outside the EU

We use these providers to run Bibs. They only process your data on our instructions:

• Supabase: database, sign-in and file storage, hosted in the EU (Paris);
• Vercel: website hosting;
• Twilio: sending sign-in codes by text message;
• Expo: push notifications and app updates;
• Apple and Google: sign-in, if you choose them, push notification delivery, and turning an address you type into map coordinates in the phone app;
• Cloudflare: security checks on some forms (Turnstile);
• OpenStreetMap Foundation (Nominatim): turning an address you type into map coordinates. We send only the address text, from our server, and keep the result for up to 24 hours to avoid repeat lookups;
• Anthropic: answering help-chat messages, if you use the chat.

Some of these providers are based in, or may access data from, the United States. Where that happens, the transfer is protected by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. Email us for a copy of the relevant safeguards.

6. Location data

Your home location is only used on our server: to tell you about new public games near you, and to suggest players near you. For suggestions, homes are only compared on a grid of about 5 km, so nobody can use them to narrow down where you live. Other users never see your location. You do not have to set one to use everything else, and you can remove it at any time (see section 3).

7. Ratings and automated decisions

Your card is calculated from other players' ratings. It does not affect your legal rights or access to anything outside the App, and we do not make any decision with legal or similarly significant effects about you by automated means.

8. How long we keep it

Account data: while your account is open. When you delete your account we remove its data from our live systems straight away, and from backups within 30 days.

Guest RSVP details: deleted automatically 30 days after the game.

Usage events and error reports: deleted after 12 months.

Signed-in device records: until you sign that device out or delete your account.

Help-chat messages: we do not store them. Anthropic may keep them for a short period for safety checks under its own terms, then deletes them.

Reports, including a copy of what was reported: kept while the report is open and for 12 months after it is closed, so we can handle appeals and repeat problems, even if the reported account, message or post has since been deleted.

9. Your rights

You have the right to:

• get a copy of your data (Profile > Download my data);
• correct it (Profile > Edit);
• delete it (Profile > Delete account);
• restrict or object to how we use it, including our usage analytics;
• take it to another service (the download is a machine-readable file);
• withdraw consent at any time, for example for location discovery.

For anything you cannot do in the App, email info@bibs5aside.com. It is free, and we will reply within one month.

You can also complain to the Data Protection Commission, 21 Fitzwilliam Square South, Dublin 2, D02 RD28, www.dataprotection.ie. We would appreciate the chance to sort it out first.

10. Security

Data is encrypted in transit, and access to it is restricted by database rules so people only see what they are allowed to. You can see and sign out your devices, and turn on App Lock. If a breach ever puts your data at risk we will tell the Data Protection Commission within 72 hours and tell you without undue delay.

11. Emails and notifications

We only send service messages: sign-in links and codes, password resets, and security alerts. We do not send marketing. If that ever changes, we will only send it with your consent, and every marketing email will have an unsubscribe link. You control push notifications and quiet hours in the App and in your phone's settings.

12. Cookies

The website only uses storage that is strictly necessary to keep you signed in and remember choices you make. See our Cookie Policy at bibs5aside.com/legal/cookies.

13. Children

Bibs is for people aged 18 and over. We do not knowingly collect data from anyone younger. If you think a child is using Bibs, tell us and we will close the account and delete its data.

14. Changes to this policy

If we make an important change, we will tell you in the App or by email before it takes effect. The date below shows when this policy last changed.

15. Contact

Questions about this Privacy Policy? Email info@bibs5aside.com.