Privacy Policy
The Boundaries Saver
This policy explains how this application handles information and how to contact us about privacy.
Information we process
The Boundaries Saver stores campaign turns, placed tools, garden health, unlocked insect entries, protected plots, downloaded daily challenges, daily results and preferences on your iPhone. These local game records are not uploaded as campaign history. When you save a daily result, the service automatically creates a random installation secret stored in the iOS Keychain. The server stores only a cryptographic hash of that secret, its creation time, the daily challenge date, your reported win or loss, turn count and result update time. Requests to the game API, home page and this policy also reach Railway infrastructure, which can receive IP addresses, request timing, paths, response status and ordinary connection metadata. The app does not request your name, email, contacts, location, photos or advertising identifier.
How we use information
Local game data lets you resume a turn, unlock campaign content, see your collection and play offline. The public server schedule provides a deterministic garden puzzle for each UTC date. The installation secret authorizes access to your own daily results and their deletion without creating an account. Daily results are self-reported game records, not a competitive ranking or server-certified achievement. The server temporarily uses client IP information in memory to limit requests and protect availability. Notification preferences are used only to schedule an optional local reminder on your phone.
Service providers and sharing
Railway hosts the API, public web pages and persistent SQLite storage and processes network and operational metadata to deliver the service. The application has no advertising, analytics, social sign-in, payment, email-delivery or other third-party SDK. It does not sell personal data or publish individual daily results. Apple provides the device operating system, Keychain and local notification facilities; device backups depend on your Apple and device settings. The app does not send your game data to a separate analytics or marketing recipient. Infrastructure providers may process operational records under their own service terms.
Data retention
Local game records remain until you reset local game data, remove the app or otherwise remove the device data. Keychain items can remain after app removal; use Delete server data & secret before uninstalling when you want to remove this installation's server association. Server daily results and the hashed installation secret remain until you request their deletion through the app. Challenge schedules contain game content and can be retained independently. Request rate-limit entries exist only in bounded server memory and are cleared by process restart or pruning. The application does not maintain a request-access log; error logs contain a generated request identifier and error type without request bodies or secrets. Railway may retain infrastructure logs or storage copies according to its service configuration and policies; no fixed infrastructure retention or backup deletion interval is promised here.
Deleting your information
Settings offers Reset local game data, which clears campaign progress, collection, unlocked guide entries, downloaded daily maps and local daily results and cancels reminders. It leaves preferences and the installation secret in place so server deletion remains possible. Delete server data & secret requires a connection, deletes the installation and its daily results from the active server database, clears local daily results and removes the Keychain secret after the server confirms deletion. If deletion cannot be confirmed, the app retains the secret so you can retry. SQLite may retain deleted bytes in database free pages or its transaction journal until reused; deletion removes active records and authorization, not a guaranteed immediate forensic erasure of storage media. Infrastructure backups, if present, can persist under the hosting provider's lifecycle. A later daily result can create a new, unrelated secret. There is no account-based recovery if a secret is lost.
Permissions and your choices
Notifications are optional. The app asks for notification permission only when you turn on the daily reminder in Settings. You can turn the reminder off in the app or withdraw notification permission in iPhone Settings at any time; the campaign and daily puzzles remain usable. Reminders are scheduled locally and do not use a remote push-token registration service. The app does not request geographic location, camera, microphone, contacts, photo-library or tracking permission. Network access is used for the daily challenge, private result operations and opening this policy.
Your privacy rights
You can review your game progress in the app, reset local data, and delete the installation's server data through Settings. Depending on where you live, you may have rights to request access, correction, deletion, restriction or other information about personal data. Questions or requests about this policy may be sent to jago.merriweather@icloud.com. This address is a privacy contact only; the app has no account or email submission system. Do not send your installation secret. Because the service does not hold your personal identity, identifying a specific installation without its secret may not be possible, and the service does not promise recovery on another device.
Security
The deployed API uses HTTPS. Each installation receives its own high-entropy random secret, which is kept in the iOS Keychain with device-only access protection; the server stores its SHA-256 hash. Private result reading, writing and deletion require that installation's bearer secret and are scoped by the server to its records. SQL statements are parameterized, mutations use transactions, and the server limits request bodies, request rates and concurrent connections. Local snapshots use atomic file writes. These measures reduce risk but do not guarantee absolute security or uninterrupted availability. No shared client credential or user password is used.
Children’s privacy
The game is designed for a general adult casual-gaming audience and is not directed specifically at children. It does not ask players to provide age or personal identity, and it does not include advertising, public profiles, chat or purchases. If you believe a child has supplied personal information in connection with the service, contact jago.merriweather@icloud.com so the situation can be reviewed. The same in-app deletion controls are available for any installation.
Changes to this policy
This policy may be updated when the app's processing, features or hosting arrangements change. The current version is published at this public Privacy Policy page with its effective date. Material changes will be reflected in the policy and, when appropriate, in the app or its release information. Review this page for the current description of how the service handles data.