Privacy policy
Pinfall (Pinfall: Bowling Score Keeper), com.benbasha.pinfall. Contact: pinfall@benbasha.com. Last updated: October 2026.
What Pinfall is
Pinfall is a ten-pin and 9-pin no-tap bowling score keeper. You enter your games frame by frame on a pin deck, by pin count, or as series totals after the set; the app keeps averages, handicap, league seasons and stats. It works offline. There are no user accounts and no server that holds your data.
Data stored on your device
Everything below is stored in the app's private storage on your phone:
- bowler profiles you create (the names you type, hand, colour);
- every game, frame and ball you enter or import, sessions, houses and lanes you type;
- leagues, seasons, handicap settings and entering averages;
- settings (language, theme) and purchase status (Pro).
Deleting the app deletes this copy, with one exception on iPhone and iPad: the free league night marker (below) stays in the keychain. It contains no personal data. We never receive any of it.
Backups
- iPhone and iPad: Pinfall automatically saves backup snapshots of your bowling data to the app's own folder in your iCloud Drive. That folder belongs to your Apple Account and is stored by Apple under Apple's privacy policy. We cannot read it and we do not run any server that receives it. If iCloud Drive is off or unavailable, the app says so and your data stays on the phone.
- Android: if Android backup is turned on for your Google account, the system's Auto Backup includes one snapshot file of your bowling data. It is stored by Google under your account and Google's privacy policy. We cannot read it.
- Export: when you choose Export (Pinfall file or CSV), the app creates a file and hands it to the share sheet. Where it goes (Files, email, another app) is your choice and under your control.
- Import: a file you choose to import is read on the device. It is not uploaded anywhere.
Home Screen widget
The widget shows numbers from your own data (for example your league name and average). It reads a small file kept in the app's private shared storage on the device. Nothing is sent anywhere.
League-night reminders
Reminders are optional. When you turn one on for a league, Pinfall schedules a local notification on your phone for that league's night. There is no push service: no push token is created, and nothing is sent to us or anyone else to deliver it. iOS or Android asks for your permission first; saying no changes nothing else in the app. To stop a reminder, switch it off on the league's screen, or turn off notifications for Pinfall in your phone's Settings.
Free league night marker
Your first league night is free. To keep that fair, once you use it the app saves a tiny marker in the phone's secure storage: an internal session ID and the date, with no names, scores or anything you type. It is never sent to us. On iPhone and iPad this storage is the keychain, which iOS keeps after the app is deleted, so a reinstall still knows the free night was used. On Android it is deleted with the app.
No ads and no tracking
Pinfall shows no ads and contains no advertising SDK. We do not track you across other companies' apps or websites, so the app never shows an App Tracking Transparency prompt. The advertising ID is not used, and on Android the advertising-ID permission is blocked. We do not sell or share data with data brokers.
Analytics and crash reports
Pinfall uses two services to learn which features are used and to fix crashes:
- Mixpanel (product-usage events). Events are short, fixed labels with fixed options, for example
game_completedwith the ruleset (ten-pin or no-tap), the entry mode (pin deck, count, manual) and the number of bowlers in bands (1, 2, 3+). Mixpanel's automatic events are off, and Mixpanel's IP geolocation is off, so no location is derived from your connection. - Firebase Crashlytics (crash reports): stack traces, device model, operating-system and app version, to fix crashes. Crash reports contain no bowling data.
Google Analytics for Firebase is switched off in the app and never sends events.
What these services receive: the event labels and options above, platform, app version, device model and OS version, language, whether Pro is unlocked, and a random install identifier created by the SDK (not the advertising ID, not linked to your identity).
What is never sent: bowler names, scores, pinfall, averages, handicaps, league or house names, anything you type, your contacts, your location, or any file you import or export. A filter in the app removes any event property named after such data before it reaches either service. Data is sent over HTTPS.
Purchases
Pinfall Pro is a one-time purchase made through the Apple App Store or Google Play. Payment details go to Apple or Google, never to us; the app only learns whether Pro is unlocked. Restoring a purchase is free.
Deleting your data
- Bowling data on the phone: delete the app. On iPhone and iPad the free league night marker (no personal data) stays in the keychain afterwards; erasing the device (Settings > General > Transfer or Reset iPhone > Erase All Content and Settings) removes it.
- iCloud backups: Settings > [your name] > iCloud > Manage Account Storage > Pinfall (wording varies by iOS version), or turn off iCloud for Pinfall.
- Android backup: managed in your Google account's backup settings.
- Analytics and crash data: kept by Mixpanel and Firebase for their standard retention. To ask us to delete the analytics tied to your install, email pinfall@benbasha.com with the app version and the approximate install date and we will action it.
Health data
Pinfall does not collect health or fitness data and does not use HealthKit or Health Connect.
Children
Pinfall is a general-audience app (rated 4+) and is not directed at children. It has no account and does not knowingly collect personal information from anyone.
Changes
If what the app collects changes, this page changes first and the date above is updated.