Privacy Policy
Effective date: 2025-09-10 • Last updated: 2025-09-10
Five Bottles Bar (“App”, “we”, “us”) respects your privacy. This Policy explains what data we collect, how we use it, and your rights.
Plain English summary: we collect minimal data to operate two features — referral rewards and premium access. We use Firebase to host and process this data. We do not show ads, do not sell data, and do not use your data for cross-app tracking.
Who is the data controller
The data controller is the individual developer of Five Bottles Bar. Contact: andreyb1990@gmail.com.
Data we collect
We collect the following information necessary to run the App:
- Referral / Invite data: when an invite link is requested or opened; the IP address that opened the link; the count of unique IP addresses per link; and counters used to award bonus recipes to the inviter. These events are associated with an internal app user ID.
- Purchase & entitlement data: product identifier (e.g., lifetime premium), transaction/receipt information provided by Apple, and whether your premium access is currently active. We do not receive or store your payment card details.
- App usage (product interactions): basic, non-sensitive events (e.g., recipe views) to understand feature usage and app performance.
- Technical metadata: internal user ID, and timestamps such as account creation or invite-open time. Firebase Hosting may also temporarily process IP addresses and user-agent strings in server logs for security and service operation.
Data we do not collect
We do not collect names, precise location, contacts, photos, or advertising identifiers. E-mail addresses are not collected at this time (any e-mail field that may exist in our database is unused and set to null). If this changes, we will update this Policy and the App’s privacy labels.
Why we collect this data (purposes)
- Provide the service: generate invite links, attribute referrals, unlock bonus recipes, and maintain premium access.
- Prevent abuse and fraud: limit fake or automated referrals (we use IP-based signals for this).
- Improve the App: aggregated analytics about features and performance.
- Legal compliance: meet tax, accounting, anti-fraud, and platform requirements.
Legal bases (EEA/UK)
- Performance of a contract: provide referral rewards and premium access you request.
- Legitimate interests: prevent abuse/fraud and measure product performance in a privacy-respecting way.
- Consent: when required by law for optional analytics (not used for advertising).
Data sharing and processors
We use trusted service providers solely to operate the App:
- Google Firebase (Hosting, Firestore/Realtime DB, Functions, Authentication as applicable) for storage and processing.
- Apple (App Store / in-app purchases) for processing transactions and providing receipt/transaction info.
We do not sell personal data. We do not share data with ad networks. We do not use your data for cross-app tracking.
International transfers
Our processors may store or process data outside your country. When transferring personal data from the EEA/UK to countries without an adequacy decision, we rely on Standard Contractual Clauses or equivalent safeguards provided by our processors.
Retention
- Invite IP addresses: kept for up to 90 days for anti-abuse, then deleted or anonymized. Aggregated counts (without raw IPs) may be retained longer.
- Referral and entitlement records: retained while your app account is active and as required by law (e.g., tax and accounting), then deleted or anonymized.
- Usage analytics: stored in aggregate form where possible.
Your rights
Depending on your location, you may have the right to access, correct, delete, port, or object to the processing of your personal data. To exercise these rights, contact andreyb1990@gmail.com