Privacy Policy

Last updated 9 October 2026. Applies to EightNine for Android and iOS from version 1.1.

The short version: EightNine keeps your matches on your phone. It has no accounts, no servers of ours, and no analytics or advertising code. We do not receive your match data, because there is nowhere for it to be sent. The one thing that leaves your phone is a purchase, if you make one, and that goes to the app store and a purchase-validation service, not to us. See Purchases.

What the app stores · What leaves your phone · Purchases · Phone backups · Exports · Permissions · Keeping and deleting · Your rights · Children · Changes · Contact

What the app stores on your device

Everything EightNine records is written to the app's own private storage on your phone: a database file, plus a small file for the home-screen widget. Other apps cannot read either.

What	Why it exists
Match records: format, rules settings, start and end times, result	So a match survives a crash, a force-quit, and a dead battery
Every scoring action: balls pocketed, fouls, safeties, undos, with the time your device reported	The score is rebuilt from this list rather than stored as a number, which is what makes an exact resume possible
Opponent names you type	So you can pick a regular opponent instead of retyping them
A random identifier for this installation	Generated on your device the first time you open the app. It is not derived from your phone, your account, or you, and it never leaves the device. It is not the identifier used for purchases, described below.
A small file for the home-screen widget: the latest match's format, the two player names (or "Player 1" and "Player 2" if you turn names off in Settings), the score, whose turn it is, the rack, when it was last updated, and your record against that opponent	So the widget can show your match without opening the app. Only the app and its own widget read it, and it is rewritten as you score. It is a copy of what is already in the database, and on Android it is left out of Google backup.
Whether Insights has been unlocked, and how many tips you have given	So the app knows what to show without asking the store every time, including with no signal. A flag and a number; nothing about the payment itself.

EightNine does not ask for and cannot read your contacts, your location, your photos, your microphone, or your camera. There is no advertising identifier and no device fingerprinting.

What leaves your phone

Nothing, unless you buy something. EightNine has no user accounts, no sign-in, no sync, no crash reporting service and no analytics service. Scoring works with the phone in airplane mode, indefinitely, and that is a tested property of the app rather than a claim. Your match data (the scores, the actions, the names) is never sent anywhere by the app, purchase or no purchase.

The only ways your match data moves are ones you start yourself: a backup you have enabled on your phone, and an export you tap. Both are described below. A purchase sends something too, and the next section says exactly what.

Purchases

Scoring is free, with no ads, and stays that way. The app sells one thing, the Insights unlock, a one-time purchase, and accepts optional tips. Both are bought through Google Play or the App Store, which take the payment. We never see your card, your billing address, or your store account.

To confirm that a purchase went through, and to give it back to you on a new phone when you tap Restore purchases, the app uses RevenueCat, a purchase validation service. When you buy or restore, the app sends RevenueCat:

the purchase receipt issued by the store, and which product it was for;
a random identifier that RevenueCat generates for this installation of the app. It is not your name, email, phone number, store account or the installation identifier above, and we do not link it to any of those, because there is nothing to link it to;
the kind of device and the app version, which every network request carries.

RevenueCat keeps a record of the purchase so that it can be restored, under RevenueCat's privacy policy. It does not receive your matches, your opponents' names, or anything else the app stores. Purchase history is not used to track you across apps or for advertising, and the app does not collect an advertising identifier. If you never make a purchase, nothing is sent to RevenueCat at all.

To have that purchase record deleted, email support@eightnine.app; we will ask RevenueCat to remove it. Note that deleting it means the purchase can no longer be restored from RevenueCat. The store itself still remembers what you bought.

Phone backups

EightNine lets your phone's own backup include your matches, so that a new phone can restore the matches from your old one. We have no access to either kind of backup described below.

Android: Google backup

EightNine includes its match database in Android's built-in backup. If you have Android backup switched on, that copy is made by Google and stored in your Google account, under Google's privacy policy, not ours.

The backup contains only the app's match database. Nothing else in the app is included.

You can turn this off in your phone's Settings, under System → Backup. Doing so means a new phone will start with an empty match history.

iPhone: iCloud Backup

If you have iCloud Backup switched on, your iPhone backs up EightNine's data along with the rest of the phone. That copy is made by Apple and stored in your iCloud account, under Apple's privacy policy, not ours.

The iCloud backup contains what the app stores on your phone, as listed in What the app stores. It contains nothing else, because the app holds nothing else.

You can leave EightNine out of iCloud Backup in your iCloud backup settings, or turn iCloud Backup off altogether. Doing so means a new phone will start with an empty match history.

Exports you choose to make

The app can write your match history to a JSON or CSV file and hand it to Android's share sheet. Where that file then goes is entirely your choice: email, a messaging app, cloud storage, or a file on the phone. Once you have shared it, that copy is governed by whichever app or service you sent it to.

Export exists so your data is yours to take somewhere else. It is free and it is not limited.

Permissions the app declares

Android lists some permissions that come from the app's development framework rather than from anything EightNine does. For transparency: the app declares network access and in-app billing. The purchase flow described above is the only thing that uses either; nothing else in the app talks to the network. If that changes (for example, if optional crash reporting is added), this policy will be updated before that version is published, and this section will say what is sent.

How long it is kept, and deleting it

Your matches stay on your phone until you delete them. We do not hold a copy and cannot delete one for you, because we never had one. The only record held off your phone is the purchase record at RevenueCat, if you bought something. See Purchases for how to have it deleted.

To remove everything EightNine has stored: uninstall the app, or go to your phone's Settings → Apps → EightNine → Storage → Clear storage. Either removes the database and everything in it. If you have Android backup switched on, also delete the app's backup from your Google account to remove the copy Google holds.

Your rights

Privacy laws including the GDPR and the CCPA give you rights over personal data a company holds about you: to see it, correct it, delete it, take it elsewhere, and to know whether it is sold. In EightNine's case there is a simple answer to almost all of them: we hold nothing about you. There is no account, no profile, no server-side record of your matches, and nothing is transmitted to us. The one exception is the anonymous purchase record at RevenueCat, if you bought something, which you can have deleted on request.

In practice that means you exercise these rights directly on your own device:

See your data: it is in the app, and the rack-by-rack screen shows the full record of every match.
Take it elsewhere: export to JSON or CSV.
Correct it: undo, or edit names in the app.
Delete it: delete a match, clear the app's storage, or uninstall.
Delete a purchase record: email us; see Purchases.

We do not sell or share personal information, and we never have. There is no advertising in the app and no data broker relationship to disclose.

Children

EightNine is a scoresheet. It has no chat, no user-generated content shown to other people, no social features, and no advertising. It does not knowingly collect personal information from anyone, of any age; the anonymous purchase record described above is the only thing it collects, and purchases go through the store's own account and age controls.

Changes to this policy

If a future version of the app sends data anywhere (optional crash reports, an account for syncing between devices, or a purchase), this policy will be updated to say exactly what is sent and to whom, and the date at the top will change. Material changes will be described in the app's release notes rather than made quietly.

Contact

Questions about this policy, or about anything the app does with your data: support@eightnine.app.