Privacy Policy
Balance Vault Foundry
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Balance Vault Foundry stores campaign progress, best move counts, stars, unfinished rounds and their action history, language and play preferences, daily completion status, pending daily submissions and a cached daily puzzle on your device. An automatically generated random installation secret is stored in the device Keychain. When you download a daily puzzle or open this website, the hosting infrastructure receives network requests, including your IP address and ordinary HTTP connection metadata. When you submit a daily completion, the service receives your installation secret, challenge date and hash, move sequence and solution hash. It validates the sequence and stores an installation UUID, a hash of the secret, creation time, challenge date and hash, solution hash, move count and completion time in a SQLite database. The raw secret and move sequence are not stored by the application server. No account, name, email address, location, contacts or payment details are requested by the game.
How we use information
Local data lets you resume a round, undo moves, retain campaign progress, choose your language and play preferences, and play offline. Network requests provide the daily puzzle and record a validated completion for this installation. The secret authorizes your own completion and deletion requests without a user account. The optional local notification reminds you of a daily job. Temporary in-memory request limits protect the service from excessive traffic. Infrastructure request processing and diagnostic logs support delivery and operation of the service.
Service providers and sharing
The backend and this public website are hosted on Railway, which processes requests and stores the service database on a persistent volume. Railway and its infrastructure providers may process network metadata and operational logs to deliver hosting. The server writes a listening-port message and generic request-error identifiers, and suppresses ordinary application request logging, request bodies and bearer secrets. There are no advertising, analytics, social sign-in, email-delivery or other third-party SDKs in the app. We do not sell data or publish installation completion records. Opening the privacy link sends an ordinary browser request to this hosted website.
Data retention
Local game progress remains until you erase local progress or remove the app, subject to device storage and operating-system backup behavior. Play and language preferences remain until you change them or the operating system removes the app data; erasing progress does not reset those preferences. The Keychain secret uses device-only accessibility and may remain after reinstalling on the same device; recovery on another device is not provided. Server installation and completion rows remain until you request deletion or service storage is removed; no automatic expiry is configured for these rows. Pending completion submissions are retried for today and yesterday in UTC and then removed from the pending queue, while the local result remains. Rate-limit entries exist only in server memory. We do not claim a fixed retention period for Railway infrastructure logs. The application does not create its own database backups; any provider or device backups follow their configured lifecycle, and deletion from active storage does not promise immediate erasure from previously made backups.
Deleting your information
Settings offers separate actions to erase local progress and to delete server records. Local erasure removes campaign progress, saved rounds, daily cache, local completion records and pending submissions, and cancels scheduled reminders. It does not delete server records or the installation secret. Delete server records requires an internet connection and uses the Keychain secret to delete this installation and its linked daily completions from the active database. A success message appears only after the server confirms deletion; failed requests leave data unchanged and can be retried. After a later daily submission, a new installation row may be created. If the secret is lost, the app cannot identify or recover previous records. Contact the privacy address for questions about deletion and backup limitations. A completion request already transmitted before local erasure may still be processed by the server; local erasure stops further queued submissions, and the separate server deletion action removes server records.
Permissions and your choices
Notifications are optional and requested only when you enable the daily reminder in Settings. They are scheduled locally; the app does not register a push token. Disable the reminder in the app to cancel scheduled notifications, or revoke notification permission in iPhone Settings. Changing the language updates the text used when scheduling a reminder. No camera, microphone, photo library, contacts or location permission is used. Internet access for daily puzzles and server deletion does not require an iOS permission prompt.
Your privacy rights
You can inspect your local game state in the app, change preferences, cancel reminders, erase local progress and request authorized server deletion in Settings. Applicable privacy laws may provide rights of access, correction, deletion, restriction or objection. Contact Norbury1Bramleigh@icloud.com about privacy or these rights. The app does not require email delivery or an account; this address is a public privacy contact only. Please do not send your installation secret. Because records use an installation identifier rather than your name or email, we may be unable to locate them without an authorized request from the installation.
Security
HTTPS protects communication with the deployed service. A 256-bit random installation secret is stored in the device Keychain with device-only accessibility. The server stores a SHA-256 hash of that secret and uses it to authorize installation-specific completion and deletion operations. Completion requests are checked by replaying legal game actions and verifying hashes, with payload, timeout and rate limits. The SQLite database resides on the hosting service persistent volume and is not publicly exposed. These measures reduce risk but cannot guarantee absolute security. Protect access to your device; no cross-device login or secret recovery mechanism is offered.
Children’s privacy
The game is designed for puzzle players aged 16 and older. It has no accounts, chat, advertising or purchases and does not ask children to provide personal details. Hosting still processes ordinary network requests as described above. If you believe a child has supplied data that needs attention, contact Norbury1Bramleigh@icloud.com. Installation records can be removed through the authorized in-app deletion action.
Changes to this policy
This policy may be updated when the game or its processing practices change. The current English policy is available at this page and through the Privacy Policy link in Settings. Its effective date identifies the current version. Material processing changes will be reflected in the app and this policy; please review the page when using an updated version.