~/bplay/privacy.md
user@bplay:~$ cat privacy.md

# bplay — Privacy

updated:2026-10-09 scope:on-device only tldr:bplay does not collect, transmit, or share any personal information. Everything you enter stays on your device. contact:[email protected]

// bplay is a bill-splitting calculator that works out tip, tax and each person's share of a check entirely on your phone.

[01] Information collected // inputs

None is collected by us. The app has no account system, no sign-in and no server of its own. Anything you type — check totals, the names you give the people at your table, an optional display name and home city on the Profile tab — is written only to local storage on your device and is never sent to us or to anyone else.

[02] Local storage // on-device

Kept in OS-level local storage on your device, never uploaded:

  • Saved checks — title, subtotal, tax, tip, total, number of people, split mode, currency, rounding rule, an optional note and the date, in a local SQLite database (tally_pad.db).
  • People and items on each check — the names you enter for diners, their share count, what they owe and whether they have paid, plus item labels, prices and who shared them.
  • Profile — the optional display name, home city and avatar colour you choose, and the date you first opened the app.
  • Achievements — which in-app badges you have unlocked and when.
  • Preferences — default tip percentage, default party size, preferred split mode, currency, rounding rule, and whether the walkthrough has been shown (stored via SharedPreferences).

Uninstalling the app deletes every byte.

[03] Permissions // runtime

bplay requests no runtime permissions: no camera, microphone, location, contacts or photo access. The Android build declares the standard INTERNET permission that every Flutter project ships with, but the app contains no code that uses it — see Network below.

[04] Network // egress

The app makes no network requests. Splitting, saving, history, the tipping etiquette guides and achievements all work fully offline; there is no sync, no backup service and no remote configuration. The only time data leaves the app is when you tap Share on a receipt or on your history — that hands a plain-text summary to the Android share sheet, and the app you pick there (Messages, email, etc.) handles it under its own privacy policy.

[05] Third parties // vendors

No third-party SDKs are integrated: no analytics, no advertising, no crash reporting, no attribution and no in-app billing. The app uses open-source Flutter libraries for local storage (sqflite, shared_preferences), charts (fl_chart), formatting (intl) and the system share sheet (share_plus); none of them phone home.

[06] Children // coppa/gdpr-k

bplay is a general-audience utility and is not directed at children under 13. Because it collects and transmits no personal data from any user, it does not knowingly collect information from children, and there is nothing for us to delete on request — the data lives only on the device it was entered on.

[07] Your rights // you

You already hold every copy of your data. Individual checks can be deleted from the History tab, your profile can be edited or cleared on the Profile tab, and uninstalling the app removes the database and preferences entirely. There is no server-side copy to request, export or erase. Questions go to [email protected].

[08] Changes // changelog

If this policy changes, the updated field at the top of this page will be revised. Material changes are also noted in the app's release notes.