Privacy policy
Last updated 12/10/2026
This policy explains what information the Threes & Fives app for iPhone, iPad and Android (downloaded from this site, not Google Play) collects, why, and what you can do about it. In short: playing the computer collects nothing. Playing online needs a small account so other players can see your name, and that's all we use it for. There are no adverts, no tracking and we never sell your information.
Who we are
Threes & Fives is run by RCSC (“we”, “us”), the controller of your information under UK data protection law. You can contact us about anything in this policy at r.calvert@rcsc.uk.
Playing the computer
Games against the computer run entirely on your device. Your settings (opponent level, sounds, vibration and so on) are stored only on your device. Nothing is sent to us.
What we collect when you play online
| Information | Where it comes from | Why |
|---|---|---|
| Your name (you can change it at any time) | Apple or Google when you sign in, or you | Shown to the people you play with |
| Email address, if Apple or Google shares it (Apple lets you hide it) | Apple or Google | To recognise the same person signing in with Apple or Google, and to contact you about your account if we ever need to |
| An account identifier from Apple or Google | Apple or Google | To sign you in. We never see your Apple or Google password |
| Tables you play at, your seat, your moves and scores | The app | To run the game for everyone at the table |
| Technical information such as your IP address and the time of each request | Your device, automatically | To keep the service running and secure |
We don't collect your location, contacts, photos, advertising identifiers or anything else from your device, and we don't use analytics or advertising tools.
Our lawful bases
- Contract: to provide your account and online play.
- Legitimate interests: to keep the service secure and stop cheating or abuse.
- Legal obligation: where the law requires us to keep or share information.
Who can see your information
- Other players at your table and in the lobby see your name, your seat and the tiles you play. Nobody sees the tiles in your hand.
- Fly.io hosts our server in London. Fly.io is a US company and works under the UK's approved safeguards for international transfers.
- Apple provides Sign in with Apple, under Apple's privacy policy.
- Google provides Google sign-in, under Google's privacy policy.
We don't sell or rent your information, and we only share it with others if the law requires us to.
How long we keep it
We keep your account until you delete it. Server logs with IP addresses are kept for short periods, normally no more than 30 days. When you delete your account we remove your name, email, sign-in links and your seats at any tables straight away, and we ask Apple to remove the link between your Apple ID and the app.
Deleting your account
In the app, go to Settings, then Online account, then Delete account. If you can't get into the app, email r.calvert@rcsc.uk and we'll do it for you.
Your rights
Under UK data protection law you can ask for a copy of your information, ask us to correct or delete it, object to or restrict how we use it, and ask for it in a portable format. Email r.calvert@rcsc.uk and we'll reply within one month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.
Children
Online play isn't intended for children under 13 and we don't knowingly collect information from them. If you think a child under 13 has an account, email us and we'll delete it.
Security
Everything between the app and our server is encrypted. Sign-in tokens are stored in your device's secure keychain, and other players' tiles are never sent to your device, so nobody can see a hand that isn't theirs.
Changes
If we change this policy we'll update the date at the top, and for important changes we'll let you know in the app.