Draft — pending legal review. This page is not final legal text.

Privacy Policy

Last updated October 27, 2026. Operated by [5ish LLC — entity pending] ("5ish", "we"). Questions: hello@5ishapp.com.

The short version: we collect what we need to run a happy hour map for adults in San Diego. We don't sell your data and we don't show you third-party ads. You can delete your account inside the app and your data goes with it.

Who this covers

This policy covers the 5ish iPhone app, the 5ish for Bars web app, and this website. 5ish is for people 21 and older. We don't knowingly collect information from anyone under 21.

What we collect, and why

WhatWhy
Account details: email address (or the private relay address Apple gives us), display name and username you choose, and your sign-in method (Sign in with Apple, or a code or link emailed to you).To create and secure your account and let friends find you.
Date of birth. You enter it once at sign-up; the app and database then lock it.To enforce our 21+ rule. We store the date itself.
Location, only if you allow it, and only while the app is open. We keep your last known position (one row per person, overwritten as it updates). When you redeem an offer we also store the position and its distance from the bar.To show happy hours and drops near you, to send nearby drop notifications, and to confirm you are at the bar when you redeem.
Push notification token and your notification choices.To deliver drop alerts and circle invites through Apple's notification service (APNs).
Contacts, if you choose to look for friends. Phone numbers and emails are scrambled (hashed) on your phone before they're checked against other 5ish members. We only get the scrambled values and don't store your address book. You can opt out of being found in your profile.To suggest people to add to a circle.
Circles and plans: your circles, members, the plans you create, RSVPs, and saved spots.To run the features you asked for.
Drop activity: offers you claim, redeem or let lapse, and your answer to "Did you get your drink?"To enforce one per person, run passes, give bars counts of claims and redemptions, and spot bars that don't honor offers.
Waitlist email, UTM tags on the link you came from, and the date you joined (this website).To tell you when 5ish opens for testers and launches.
Bar accounts (5ish for Bars): staff email, role at a venue, venue details, drops you create, credit purchases (amount and Stripe reference).To run the bar app and billing. Card details go to Stripe; we never see or store full card numbers.
Basic technical data such as IP address and request logs, handled by our hosting providers.To deliver, secure and debug the service.

5ish doesn't use advertising trackers, and we don't use third-party analytics today. If we add product analytics (for example PostHog), we'll update this page first and describe what it measures.

Who we share it with

We don't sell personal information and we don't share it for cross-context behavioral advertising. We use these service providers (processors) to run 5ish:

What other people see: your username and display name are visible to people in your circles and to people who search for you. Your date of birth, email and location are not shown to other users. Bars see counts of claims and redemptions for their own drops, not who you are.

We may also disclose information if the law requires it, to protect people's safety, or in a merger or sale of the business (we'd tell you first).

How long we keep it

Lawyer note: we have no automated retention job yet for claims, redemptions or location history. Decide fixed periods before launch.

Your choices and deleting your account

California privacy rights (CCPA/CPRA)

If you live in California, you can ask us to tell you what personal information we hold about you and how we use it, to give you a copy, to correct it, and to delete it. You can also ask us to limit use of sensitive personal information; we use precise location and your account login only to provide the service you asked for. We do not sell or share personal information as those terms are defined in California law, so there is nothing to opt out of. We won't treat you differently for using these rights. Email us from the address on your account; an agent may ask on your behalf with your written permission. We respond within 45 days.

In the last 12 months we collected the categories in the table above: identifiers, date of birth, geolocation, and activity within the service. We disclosed them only to the processors listed above.

Security

Data is encrypted in transit. Access to the database is restricted by row-level rules so that, for example, you can only read your own profile. No system is perfectly secure, so please use a sign-in method you control.

Children

5ish is not for anyone under 21. If you believe someone under 21 has an account, email us and we will delete it.

Changes

If we change this policy in a meaningful way, we'll update the date above and, for signed-in users, tell you in the app or by email.

Contact

[5ish LLC — entity pending]
San Diego, California
hello@5ishapp.com