Privacy Policy
Bloved Sport Achievements
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Bloved Sport Achievements stores campaign arrangements, undo history, hint counts, completed exhibits, completion dates, awards, language, sound and motion preferences on your iPhone. Daily showcases and recent daily history are cached locally. When you submit a daily completion, the app automatically obtains a random installation identifier and a secret stored in your device Keychain. The server stores that identifier, a SHA-256 digest of its secret, its creation date, the showcase date, the clean-completion flag and initial completion time. No name, email address or user account is requested. A failed daily submission may be queued locally for retry. Network requests also expose connection metadata such as an IP address to Cloudflare, which handles the public HTTPS connection, and Railway, which hosts the application service. The service uses network addresses temporarily in memory for rate limiting; it does not persist these counters. The app has no advertising or analytics SDKs.
How we use information
Local information allows you to resume an unfinished cabinet, keep an Album and apply your preferences without a network connection. The backend supplies the daily puzzle and recent puzzles, records installation-scoped daily completion statistics, authorizes deletion and protects the service from excessive requests. The installation secret authorizes only that installation; it is not a login and does not provide recovery on another device. The public website supplies this privacy policy.
Service providers and sharing
Cloudflare terminates public HTTPS for the app API and privacy website and proxies requests to the service hosted on Railway. Cloudflare and Railway process network traffic and connection metadata to provide this infrastructure, and may process operational or request logs. We do not set or claim a particular retention period for those provider logs. Railway also hosts the installation and daily-result records described above. There are no advertising networks, analytics services, outbound email providers or social sign-in providers integrated into the app. Your daily results are not exposed through a public results endpoint. Data may also be disclosed when legally required.
Data retention
Local progress remains until you clear it in Settings or remove the app, subject to device and operating-system backup behavior. Keychain information can persist separately from app documents. Server installation and result records have no automatic expiry and remain until an authorized deletion or service removal. The application does not configure a separate database backup schedule. Infrastructure copies or backups, if maintained by the hosting provider, follow that provider's lifecycle and are not necessarily removed immediately by an application deletion. We do not claim a fixed backup or log deletion interval.
Deleting your information
Use Delete server data in Settings to authorize deletion of your installation and all its daily result records. After a successful server response, the app removes the installation secret from Keychain and clears its queued submission; local campaign progress and Album remain. A future daily submission creates a new installation identity. Use Delete local progress separately to erase local arrangements and Album. Removing the app does not itself request server deletion. Without the installation secret we cannot promise recovery or authorization of records through an account. Contact wulgifubriarcombe@icloud.com for privacy questions or deletion concerns; do not send your installation secret.
Permissions and your choices
The app requests no location, contacts, camera, microphone, photo-library, notification or tracking permission. It uses ordinary network access to fetch daily content and submit daily completions. You can play the campaign offline, disable sound or music in Settings and stop using network features. If future versions request an optional system permission, you can withdraw it in iOS Settings; this version has no such permission request.
Your privacy rights
Depending on your location, you may have rights to request access, correction, deletion, restriction or objection to processing, or to complain to a local data-protection authority. Contact wulgifubriarcombe@icloud.com to ask about these rights. The contact address is for privacy correspondence, not an account or in-app email delivery feature. We may need information sufficient to locate and verify an authorized request, but never ask you to publish your installation secret. Local records can be reviewed in the app and removed through Settings.
Security
The app connects to the public API over HTTPS through Cloudflare, which proxies to the Railway origin over HTTPS. The random installation secret is kept in device-only Keychain storage, and the server stores a digest instead of the raw secret. Private mutations require that installation's valid bearer secret; other installations cannot authorize them. The backend validates request sizes and values and stores records on a persistent Railway volume. Local save files use iOS file protection. These measures reduce risk but cannot guarantee absolute security. Keep your device secure; there is no account-based secret recovery.
Children’s privacy
This calm sports puzzle is intended for players aged 12 and older. It does not ask for a date of birth, identity, contact details or social profile, and contains no advertisements, purchases or public player communication. If you believe a child has supplied personal information through privacy correspondence or another unexpected channel, contact wulgifubriarcombe@icloud.com so the concern can be reviewed.
Changes to this policy
This policy describes the released app and backend practices as of the effective date above. If those practices change, this public page and its effective date will be updated. Material changes will be explained through an appropriate app or policy notice. Review this page periodically when using daily online features.