Privacy Policy
1. Who we are
Five-A-Day is a daily five-question quiz operated by Aonghus McMahon in Ireland. In this policy, "Five-A-Day", "we" and "us" mean that operator.
Contact: hello@five-a-day.app
You can play without an account. An account is optional, and you can create one with Apple, with Google, or with a code sent to your email address. This policy covers both ways of playing, in the iPhone and Android apps, and the website five-a-day.app.
2. Playing without an account
When you first open the app, Five-A-Day creates a random identifier. We use it to associate your quiz progress, scores and streak with that installation. The identifier does not contain your name, email address or phone number, and while you play as a guest we do not ask you for those details.
Your guest record is stored on our servers under that identifier. The phone holds the identifier; the record itself is not on the phone. If the app is removed, or you change phones, the record can no longer be reached from the app.
3. If you create an account
An account keeps your record if you change or lose your phone.
You can sign in using Apple, Google or an email code. Depending on the options you choose, more than one supported sign-in method may be associated with the same Five-A-Day account. We do not store passwords.
Your answers, scores and streak are then associated with the account. If you sign in on another phone, what that phone had played as a guest is added to the account, and the guest record is removed.
We store the email address and provider identifier needed to recognise your account. We do not use Apple or Google sign-in to access your contacts, photos, files or gameplay information.
- Apple. We receive the identifier Apple assigns you for Five-A-Day and an email address. If you choose Apple's Hide My Email, the address we receive is the private relay address Apple creates. We also keep one token that Apple issues to us; its only use is to tell Apple, when you delete your account, to withdraw Five-A-Day from your Sign in with Apple list.
- Google. We receive the identifier Google assigns you and your email address. Google may also provide your name and profile picture as part of its standard sign-in. Five-A-Day discards them.
- Email code. We store the address you give us and send a six-digit code to it.
4. What information we use
From everyone who plays
- A random identifier for you, created by the app (section 2). An account is recorded under an identifier of the same kind.
- Your quiz record: the answers you choose or type, whether each was right, your scores, the dates you played, and your streak.
- Your phone's time zone, stored with each day you play so that a day's quiz and your streak follow your local date.
- Session information: when the app connects to our servers they record the IP address and the app and device description ("user agent") of the connection, and when the session was last used.
- How the app is used. We record a small number of events: that the app was opened; that a quiz was viewed, started or finished, and the score; that a question was answered; that the share button was tapped; what you chose when offered a daily reminder, including the hour you picked; how long a streak was shown; and whether you took up the invitation to create an account, and by which method. These events carry your identifier, the app's version and build, and the type of device. They never carry your email address, your name, anything Apple or Google told us about you, or the text of an answer.
- Crash and error reports if the app fails: what went wrong, the app's version and build, the model of phone, its operating system version, and technical details such as free memory and language setting. They do not carry your Five-A-Day identifier. The crash-reporting software attaches a random identifier of its own for the installation, which is not connected to your Five-A-Day record.
Only if you create an account
- Your email address, which sign-in methods the account uses, the identifier Apple or Google gives us for you, and when the account was created and last signed in to.
- For Apple, the token described in section 3.
- A record that a sign-in email was sent to your address.
Only if you send feedback
- Whatever you write in the feedback form, and any name or contact details you choose to add. The form opens in your browser, outside the app, and is entirely optional. The app adds the quiz number and date, the app's version and build, and your phone's operating system, so we know what you were looking at.
If you write to us, we receive your email address and what you send.
What we do not collect. No password, no phone number, no contacts, no photos, no precise or approximate location, and no advertising identifier. The daily reminder is scheduled on your phone itself: we send no push notifications and hold no notification address for you.
No advertising. There are no ads in Five-A-Day. We do not build advertising profiles. We do not sell personal data or share it for advertising.
5. Why we use it
| What we do | Information used | Legal basis |
|---|---|---|
| Run the quiz and save your progress, scores and streak | Identifier, quiz record, time zone | Providing the service you asked for |
| Create your account and sign you in | Email address, Apple or Google identifier, session information | Providing the service you asked for |
| Keep your history together across phones | Account, quiz record | Providing the service you asked for |
| Send sign-in codes by email | Email address | Providing the service you asked for |
| Keep the service secure and prevent abuse | Session information, including IP address | Our legitimate interest in a secure service |
| Show every player how a question was answered ("61% got this right") and improve how typed answers are checked | Counts of answers; the wording of typed answers that were not recognised, kept without your identifier | Our legitimate interest in running and improving the quiz |
| Understand whether the product works — who finishes, who comes back, what is shared — so we can improve it | Usage events, identifier | Our legitimate interest in understanding and improving Five-A-Day |
| Find and fix crashes and errors | Crash and error reports | Our legitimate interest in an app that works |
| Read and answer feedback and email | What you send us | Our legitimate interest in answering you |
| Withdraw Apple's authorisation when you delete your account | Apple token | Providing the service you asked for |
| Respond to requests about your data and meet our legal obligations | Whatever the request concerns | Legal obligation |
We do not use your information for advertising, or for automated decisions that have legal or similarly significant effects on you.
6. Services we use
Five-A-Day is run with the help of other companies. Each receives only what it needs for its part.
- Supabase — our database and sign-in system. It holds accounts, guest records and quiz records, and it records session information, including IP address and device description. Hosted in Ireland.
- PostHog — product analytics. It receives the usage events in section 4 under your Five-A-Day identifier, never your email address or name. We have set it not to work out your location and to discard IP addresses. Hosted in Germany (Frankfurt).
- Sentry — crash and error reports, as described in section 4. Hosted in Germany (Frankfurt).
- Resend — sends the sign-in code if you use an email code. It receives your email address and the message. Resend stores its delivery records, including your address, in the United States, for 30 days.
- Tally — the optional feedback form. It receives what you type there and the details listed in section 4. Tally stores form submissions in the European Union.
- Apple and Google — only if you choose to sign in with them. They confirm to us that it is you. In doing so they learn that you use Five-A-Day and when you sign in, and they handle that under their own privacy policies. We tell them nothing about what you play.
- Cloudflare — serves our website and routes email sent to our contact address. The website sets no cookies and runs no analytics.
- GitHub — runs our nightly database backup and stores it. The backup is encrypted with a key only we hold before it is stored, and GitHub cannot read it.
Supabase, PostHog, Sentry, Resend, Tally and GitHub act on our instructions under data-processing agreements. Apple and Google decide for themselves how they handle sign-in.
7. International transfers
Our core Five-A-Day database is hosted in Ireland. PostHog and Sentry store what we send them in Germany, and Tally stores feedback in the European Union.
Some service providers may process data outside the European Economic Area. Where that happens, appropriate international-transfer safeguards are used:
- Resend stores its delivery records of sign-in emails in the United States. Resend is certified under the EU–US Data Privacy Framework, and its data-processing agreement includes the European Commission's standard contractual clauses.
- Supabase, PostHog and Sentry are United States companies. The data is stored in the EU, but their staff may reach it from outside the EEA when supporting the service, under standard contractual clauses.
- GitHub is a United States company. It stores our encrypted backups under its data-protection agreement, which includes the European Commission's standard contractual clauses.
- Apple and Google operate worldwide and handle sign-in under their own terms.
8. How long information is kept
| Information | Kept for |
|---|---|
| Account, email address, sign-in identifiers, Apple token | Until you delete your account |
| Quiz record of an account | Until you delete your account |
| Quiz record of a guest | Guest records are deleted 12 months after their last activity |
| Session information (IP address, device description) | While that session exists; removed when you sign out, or when the account or guest record is deleted |
| Supabase's request logs, which include IP addresses | 1 day |
| Database backups | Each nightly backup is kept for 30 days |
| Usage events in PostHog | 1 year |
| Crash and error reports in Sentry | 30 days |
| Delivery records of sign-in emails in Resend | 30 days |
| Feedback and email you send us | Up to 12 months after you send it or after our last correspondence, unless an unresolved issue needs longer |
| Aggregate counts of how each question was answered, and unrecognised typed answers kept without an identifier | For as long as the question is part of Five-A-Day |
9. Deleting your data
If you have an account. Delete it in the app at Stats → Account → Delete account. Deleting your account removes your Five-A-Day account, scores, streak and associated account information from our active database. Some technical or service-provider records may remain for their normal retention periods, as described below. Deletion cannot be undone.
Without the app, use https://five-a-day.app/delete/ or write to hello@five-a-day.app from the address on the account.
- Apple. If you signed in with Apple, we ask Apple at the same moment to withdraw its authorisation, and Five-A-Day leaves your Sign in with Apple list. Apple may ask you to confirm it is you first.
- Google. We remove our record of your Google identifier. Deleting your Five-A-Day account does not itself remove Five-A-Day from your Google Account's list of connected apps; you can remove it there, under third-party connections.
- Analytics. Usage events already recorded are not individually deleted. They are kept for the period in section 8 in pseudonymous form: under a random identifier that no longer matches any account or email address in our systems.
- Crash reports hold no Five-A-Day identifier and expire after the period in section 8.
- Sign-in email records held by Resend, including your address, expire 30 days after each email.
- Backups. We take an encrypted backup of the database every night and keep each one for 30 days. A deleted account stays in the backups taken before it was deleted until they expire, at most 30 days later. Backups are opened only to restore the service.
- Feedback you sent through the form is not linked to your account and is not removed by deleting it. Write to us and we will delete it.
Aggregate quiz statistics that no longer identify or single out an individual player may remain.
If you play as a guest. If you play as a guest, uninstalling the app removes the identifier stored on that phone. On Android, if your phone's backup to Google is switched on, Android may restore the app's data, including that identifier, when you reinstall it. It does not itself delete records already stored on Five-A-Day's servers. Once the identifier has been removed from the phone, we may no longer be able to connect you with those records.
The app does not yet have a button for deleting a guest record. Until it does, you can create an account from that phone and then delete it, which removes the whole record, or write to us while the app is still installed.
10. Your rights
Under the GDPR you have the right to:
- Access — ask whether we hold personal data about you and receive a copy of it. That includes your account information, email address, sign-in identifiers, session information, quiz record and any analytics data we can connect to you.
- Correction — have inaccurate information put right.
- Erasure — have your data deleted (section 9).
- Restriction — ask us to stop using your data while a question about it is settled.
- Objection — object to any use we base on our legitimate interests (section 5), including analytics.
- Portability — receive the data you gave us in a commonly used, machine-readable format.
To use any of these, write to hello@five-a-day.app. We answer within one month. We may need to check that the request comes from you — for an account, by asking you to write from its address. If you play as a guest we can only find your record with the identifier held in the app, and may not be able to find it without that.
You also have the right to complain to a supervisory authority. In Ireland that is the Data Protection Commission, dataprotection.ie. If you live elsewhere in the EU or in the UK, you can complain to the authority where you live.
11. Children
Five-A-Day is not aimed at children and collects nothing from anyone knowingly under 13.
12. Changes
If this policy changes, the date at the top changes with it.
13. Contact
Aonghus McMahon
hello@five-a-day.app