Legal
Privacy Policy
The short version
- We collect only what’s needed to run your account and the community — no device location, contacts, ads or tracking.
- Your profile and posts are visible to other users. Private messages are seen only by you and the other person, except in the safety cases explained below.
- We never sell your data, and there are no purchases in the app.
- You can delete your account at any time — in the app or on this website.
1. Who we are
Five City is an unofficial, fan-made community app. It is not affiliated with, endorsed by, or sponsored by any game publisher.
Five City is operated by Ammar Alhayki, an independent developer in the Kingdom of Bahrain (“we”, “us”). We are responsible for (the “controller” of) the personal data described in this policy. You can contact us at devoxdy@gmail.com.
This policy covers the Five City mobile app and this website (five-city.pages.dev).
2. Information we collect
| Information | When | Why |
|---|---|---|
| Account detailsEmail address and password. Your password is stored only as a secure hash by our authentication provider — we can never see it. | When you create an account | To create and secure your account and send account emails, such as email confirmation |
| ProfileUsername, and optionally a display name, bio, profile photo and country; your language and spoiler preferences | When you set up or edit your profile | To show your profile to the community and personalize the app |
| Community contentPosts, replies, likes, photos you attach, groups you create or join, group messages, and the country you choose for a post or group | When you use Community features | To provide the community features |
| Private messages | When you chat with a friend | To deliver your messages to the other person |
| Social and safety activityFriend requests, friends, people you block and reports you submit | When you use these features | To provide social features and keep the community safe |
| Guide progressGuides you mark as completed | When you use guides | To show your progress |
| NotificationsIn-app notifications about activity that involves you | When others interact with you | To keep you informed inside the app |
| Usage eventsSimple events such as opening the app or a tab, linked to your account | While you use the app | To understand which features are used and improve the app — never for advertising |
| Technical dataIP address, device or browser type and timestamps, recorded in our providers’ server and security logs | Whenever the app or this website connects to our servers | To run, secure and troubleshoot the service and prevent abuse |
| Support messagesYour email address and what you write to us | When you contact us | To answer you and keep a record of your request |
We do not collect your device location (the app never uses GPS or location services — the optional country is one you choose), your contacts, payment information, advertising identifiers or health data. We do not use third-party analytics, advertising or tracking tools, we do not show ads, and we do not track you across other companies’ apps or websites. There are no purchases of any kind in Five City.
Camera and photos: the app asks for access only when you choose to take or attach a photo, and only the photo you select is uploaded. You can change these permissions at any time in your device settings.
3. How we use information
- To provide Five City: accounts, profiles, the community feed, groups, friends, private messages, notifications and guides.
- To keep the community safe: automatic text filtering, reviewing reports, enforcing our Terms & Community Guidelines, and preventing spam, scams and abuse.
- To secure the service and fix problems.
- To understand how features are used so we can improve the app.
- To communicate with you about your account and answer support requests.
- To comply with the law and respond to lawful requests.
Legal bases. Where data-protection laws such as the EU/UK GDPR or Bahrain’s Personal Data Protection Law (Law No. 30 of 2018) apply, we rely on: performance of our contract with you (to provide the app); our legitimate interests in keeping Five City safe, secure and working well (moderation, security and usage statistics); your consent where we ask for it (for example camera and photo access, which you can withdraw in your device settings); and compliance with legal obligations.
4. Who can see your information
- Public in the community: your username, display name, profile photo, bio and country, and what you post in the feed, in replies and in groups (public groups can be seen by all users; private groups by their members). Treat anything you post as public.
- Private messages are visible only to you and the person you’re chatting with, with two safety exceptions:
- If someone reports a message, our moderators receive a copy of that message and up to 9 earlier messages in the conversation, so they can act on it even if it is later deleted.
- Administrators may review a conversation as part of a specific safety investigation. Every such access requires a written reason and is recorded in an audit log.
- Your email address is never shown to other users.
- Blocking: people you block can’t message you or send you friend requests, and you won’t see their posts, replies or messages.
5. Moderation and automatic filtering
Text you post — posts, replies, group messages, private messages and profile text — is checked automatically, in English and Arabic, for abusive, sexual, hateful or scam content, such as offers to sell game accounts. Blocked text is not published. Our team reviews reports, typically within 24 hours. We may remove content and suspend or delete accounts that break our Terms & Community Guidelines, and we keep records of reports and moderation actions as described in section 7.
7. How long we keep information
| Information | How long |
|---|---|
| Account, profile and community content | Until you delete it or delete your account |
| Usage events | 90 days, then deleted automatically. If you delete your account they are unlinked from you and still deleted at 90 days |
| Moderation records — reports about content or accounts, copies of reported content, and moderation actions | While the reported account exists, and up to 12 months after it is deleted — unless the law requires us to keep them longer or they are needed for a legal claim |
| Deletion record — your former username, account ID and time of deletion | 90 days |
| Backups held by our hosting provider | Up to 30 days, then overwritten |
| Server and security logs held by our providers (may include IP addresses) | A limited period under each provider’s retention schedule |
| Support emails | As long as needed to handle your request and any follow-up |
8. Deleting your account
You can permanently delete your account at any time:
- In the app: Profile → Settings → Delete my account.
- On the web, without the app: five-city.pages.dev/delete-account.
- By email from your account’s email address: devoxdy@gmail.com.
Deletion in the app or on the website is immediate. It removes your account, profile, posts, replies, likes, photos, private messages (sent and received), the groups you created and the rest of your account data. What we keep, and for how long, is listed in section 7 and on the account deletion page.
9. Your choices and rights
- Edit your profile, and delete your posts, replies and the messages you sent, at any time.
- Block or report users, and change the app language.
- Manage camera and photo permissions in your device settings.
Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal data, to object to or restrict some processing, and to withdraw consent. To use these rights, email devoxdy@gmail.com from the email address linked to your account so we can verify it’s you. We respond within 30 days. If you are not satisfied, you can complain to the data-protection authority in Bahrain or in the country where you live.
10. Children
Five City is not directed to children. You must be at least 16 years old (or older if your country requires it) to create an account. If you believe someone under 16 has an account, contact us and we will delete it.
11. Security
We protect your data with encryption in transit (HTTPS), database row-level security that limits each user to their own data, secure password hashing by our authentication provider, and role-restricted, audited staff tools. No system is perfectly secure; if a breach affects your data, we will notify you as required by law.
12. International transfers
Five City’s data is stored in Australia (Supabase on Amazon Web Services, Sydney). This website is served from Cloudflare’s global network, and support emails are handled by Google. Your data may therefore be processed outside your country. Our providers protect data under their own security programs and contractual commitments, such as standard contractual clauses where required.
13. This website
This website uses no cookies, analytics or ads. It remembers your language choice in your browser’s local storage on your device; this is never sent to us.
On the account deletion page, your email address and password are sent directly to our authentication provider over an encrypted connection to confirm that the account is yours. The resulting session is kept only in that page’s memory and ends when you cancel or leave. We never see or store your password. Cloudflare processes visitors’ IP addresses and request details to deliver and protect the site.
14. Changes to this policy
We may update this policy. We will post the new version here and update the effective date; if the changes are significant, we will also tell you in the app.
15. Contact us
Ammar Alhayki · Kingdom of Bahrain · devoxdy@gmail.com