Narby privacy policy

This policy explains what happens to your data when you use the Narby iPhone app. The short answer: it stays at the table, meaning on your iPhone and on the iPhones of the people you share a session with. The long version is below, including the few situations in which the app connects to anything at all.

1. Who is responsible

Freshlab Iberia S.L.U. · NIF ES B87323754 · Spain · info@freshlab.es. For support questions about the app, write to support@freshlab.es. Full contact details and the commercial register entry are in the imprint.

2. Scope

This policy covers only the Narby iPhone app. For the freshlab.es website, the general privacy policy applies.

3. What data the app processes

Narby does not collect personal data. All processing happens on the iPhones at your table, and no content is transmitted to Freshlab or to third parties:

• There is no sign-up, no user account, no email address, no password and no invite link. Whoever scans the QR code shown at the table joins the session.
• What the table shares, meaning bill items, list entries and game moves, travels exclusively encrypted from device to device between the iPhones present, using Apple's Multipeer Connectivity technology with encryption required. It never passes through the internet and never through servers of ours, because we have none.
• The name or initial you appear with at the table comes from you or from your iPhone, travels only to the iPhones in your session and is transmitted to nobody else.
• Each module states in one sentence, before it starts, what it stores. The games store nothing: a finished round is gone. The bill and the lists store exactly what you see on screen, items, names and amounts or list entries, and only in the app's local storage. No photo is kept beyond the session, no contacts, no payment data.
• No analytics SDKs, no advertising, no tracking identifiers, no profiling and no cloud sync are used.
• The app is fully usable in airplane mode.

That is why Narby's privacy label on the App Store says "Data Not Collected".

4. The session happens at the table, not on the internet

The QR code is the access control: anyone who can see the screen it is shown on can join the session, and nobody else. The connection between the iPhones is direct, over the local network or peer-to-peer radio, with encryption required, and no session content leaves the reach of the table. There is no server in between that could see, store or log what you share: what you mark on the bill is seen by the people at your table on their devices, because sharing it with them is exactly what you are doing, and by nobody else.

5. The only network connections

Narby makes no internet connection to do its job. There are two exceptions, both voluntary, and neither transmits any content from your sessions:

• In-app purchases. If you decide to make a purchase, Apple handles it entirely through StoreKit. See section 7.
• List of other Freshlab apps. The app downloads a small text file from freshlab.es with the names and links of our other applications, and caches it. It is a one-way download: no information about you or your sessions is sent. As with any request to a web server, the technical server log may hold the IP address and timestamp of the request for a limited time, for security and diagnostics. If the download fails, the app keeps working normally.

6. On-device AI and transparency

Reading the receipt is optional and exists only on iPhones that support Apple Intelligence: the photo of the bill is analysed with Apple's text recognition and with the Foundation Models Framework, the language model that ships as part of iOS and runs locally on the iPhone. The photo stays on the device that took it and is not kept once it has been read; only the line items with their amounts travel to the other iPhones at the table. Neither the photo nor the values read from it are sent to OpenAI, to Freshlab or to any other AI provider, and none of it is used to train any model. One compatible iPhone per table is enough: the phone that takes the photo is the one that reads, everyone else joins in with any iPhone.

Every item the model fills in is an AI suggestion and stays marked as such until it is confirmed or corrected, before the bill is shared with the table; typing the items in by hand is the complete app. The cent distribution, the lists and the games are not model outputs but deterministic rules running on each device. The impostor word game runs on word lists that ship with the app; Apple Intelligence only adds variety when the host's device has it. Narby makes no automated decisions with legal effect on you within the meaning of Article 22 GDPR. This information is provided in fulfilment of the transparency obligation of Article 50 of Regulation (EU) 2024/1689 (AI Act).

7. Purchases

Narby is free and has no paid features. Optionally, you can buy us a coffee, a tapa or a dinner. All purchases are processed through StoreKit and Apple's App Store. Freshlab neither receives nor stores your payment data: we do not know your name, your address or your payment method. Apple provides us only with aggregated sales reports that identify no individual buyers. Apple's processing is governed by Apple's privacy policy.

8. System permissions

The app asks for iOS permissions only when they are needed for a feature you started:

• Camera: to scan the QR code of a table and to photograph the receipt. The image is processed on the device; the photo of the receipt is not kept once read and is uploaded nowhere.
• Local network: the connection between the iPhones at the table uses the direct local network, so iOS asks the first time you open or join a session. If you decline, the app says so and points you to Settings instead of pretending nobody is there; showing and scanning the QR code does not need this permission.
• Nearby interactions (ultra wideband): only for the two-screen snake. It measures the distance between the two iPhones to know whether they are still side by side; it is not a location, it never leaves the game, and no other module uses it. An iPhone without this chip loses that one game, not the app.
• Location: never requested. Narby does not use iOS location services and does not know where you are.
• Microphone: never requested.

You can withdraw any permission at any time in iOS Settings under Narby.

9. Retention and deletion

Your data lives exclusively in the app's local storage, inside the sandbox iOS assigns to it. Freshlab has no copy and therefore cannot view, export or restore it.

• The games store nothing: when the round ends, there is nothing to delete.
• A saved bill or list is deleted directly in the app.
• To delete everything, remove the app from the iPhone. The data goes with it.
• What other participants saw during a session is on their devices and under their control, just as if you had shown them the paper receipt: Narby cannot delete it remotely, because there is no server with access to those devices.
• If you have iCloud backup or a computer backup enabled, the app's data may be part of that backup. That backup is yours and is managed from iOS Settings or your computer, not from Narby.

10. No transfers to third parties

We pass no data to third parties, because we hold none. What you share in a session is received by the iPhones of the people at your table, by your own decision and within your personal use; Freshlab takes no part in that transmission and has no access to it. No international data transfers by Freshlab arise from using the app. The relationship with Apple, as operator of the App Store and the payment system, is governed by Apple's own terms and privacy policy.

11. Your rights

The General Data Protection Regulation gives you the rights of access, rectification, erasure, restriction, objection and portability. Since Narby sends no personal data to Freshlab, there is nothing with us to look up or erase: you exercise control directly on the device by deleting a bill, a list or the app itself. If you still wish to contact us, write to info@freshlab.es. You can also lodge a complaint with a supervisory authority, in Spain the Agencia Española de Protección de Datos (aepd.es).

12. Children and changes to this policy

Narby asks for neither age nor any other personal detail and collects data from no user, minors included. If a future version of the app changes anything relevant about data handling, we will update this page before releasing that version and change the date at the bottom. The version published at this address is always the one that applies.

---

Effective date: 21 August 2026 · Last updated: 21 August 2026 · Narby · Imprint · Home