Privacy Policy
Kit Transfer Ops
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Kit Transfer Ops stores puzzle progress, active boards, full-turn undo history, settings and downloaded daily scenes on your iPhone. My Kit stores the session name, equipment and case names, participant names, their zones and knowledge, transfers, timestamps and manual replies locally; these kit details are not uploaded to our service. The app sends requests for daily scenes and their manifest. When a puzzle is completed, it may send its scene number, move count, whether a hint was used and a random event identifier. For authenticated submissions, the app creates a random installation secret in the iOS Keychain and registers it with the service. The server stores a hash of that secret and a random installation identifier, never the plaintext secret. Railway infrastructure receives connection information such as IP address and request metadata. We do not offer accounts, collect passwords, or embed advertising, tracking or third-party mobile analytics SDKs.
How we use information
Local data supports offline play, continuing a scene, undoing turns, tracking completed puzzles and coordinating your own equipment handoffs. Daily-scene requests provide validated new puzzle content and cache information. Installation credentials authorize result submissions and deletion without requiring an account. Results are immediately combined into per-scene counts of completions, moves and hint usage to understand puzzle difficulty. Random event identifiers prevent a retried result from being counted twice. Service health checks and limited infrastructure logs support operation and diagnosis.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes service requests and infrastructure logs as a hosting provider. The application server logs request identifiers and operational error codes, not authorization secrets, request bodies or My Kit details. Anonymous results are used by the product operator. There is no sale of personal information, advertising network, outbound email service or automatic participant messaging. If you choose Share in Handoff Run, iOS presents the system share sheet; the instruction contains your selected participant and equipment details, source and destination cases. Only the destination app or recipient you select receives that shared instruction under its own practices. Merely viewing or sharing an instruction does not confirm a reply.
Data retention
Local progress, kit data and cached scenes remain until you delete them in the app or remove the app storage. Keychain credentials are separate from app files and may survive uninstall, so use the in-app deletion control if you want the installation authorization record removed. Server scene content, secret hashes, anonymous aggregate counters and random deduplication event identifiers have no automatic expiration configured. Installation records remain until an authorized deletion succeeds. Aggregates and deduplication identifiers are not linked to installations. Railway may retain infrastructure logs or backup copies according to its platform configuration; this product has not established a fixed retention period for those copies and does not promise immediate removal from them.
Deleting your information
Settings provides separate controls to reset puzzle progress and delete all My Kit cases, items, participants and activity. Deleting My Kit clears those local records immediately and requests deletion of the server installation authorization record. The installation secret and identifier are cleared from Keychain only after the server deletion succeeds; if the request fails, the app reports the failure and retains the credential solely so you can retry deletion while online. Pending result submissions are discarded when deletion is requested. Anonymous scene totals and unlinked random event identifiers remain because the service cannot identify which installation contributed them. Backup copies, if retained by the hosting platform, may remain until handled by its retention process; an active installation record is not restored by the app. Loss of the installation secret prevents authorizing deletion through the app, and we cannot promise recovery or cross-device restoration.
Permissions and your choices
Daily reminder notifications are optional and requested only when you enable them in Settings. The reminder is scheduled locally at 18:00; there is no push-notification token or remote notification service. You can turn reminders off in the app or revoke notification permission in iPhone Settings. Disabling notifications does not delete existing game or kit records. The app does not request location, camera, microphone, contacts, calendar or photo-library access. System sharing is initiated by you, and the destination application may request its own permissions.
Your privacy rights
You can review and edit your locally stored kit information, reset progress, remove kit data, retry installation deletion and choose whether to share an instruction. Depending on your jurisdiction, you may have rights to access, correct or delete personal data and raise a privacy concern. Contact yseult.stanhope@icloud.com for privacy questions or to exercise applicable rights. This is a public privacy contact, not an in-app messaging or login feature. Anonymous totals cannot be attributed back to an individual installation, and we do not promise identification of information we cannot reliably associate with you.
Security
Public app-to-service communication uses HTTPS with normal iOS transport security. The installation secret is generated using the system secure random generator, kept in Keychain with device-only accessibility and transmitted only to the application service for registration and authorized operations. The server stores its cryptographic hash and verifies both the installation identifier and secret for result submissions and deletion. Database credentials remain in server environment configuration. Request size and time limits, input validation, transactional database writes and event deduplication protect service integrity. Local saves use atomic writes and iOS file protection. These safeguards reduce risk but do not guarantee absolute security; no certification or independent security audit is claimed.
Children’s privacy
Kit Transfer Ops is designed for adult event organizers, technical crews and puzzle players. It is not directed to children under 13 and does not intentionally request information from them. Avoid entering sensitive participant information into a kit or shared instruction. A parent or guardian who believes a child provided personal information to the service can contact yseult.stanhope@icloud.com so the concern can be reviewed.
Changes to this policy
This policy describes the processing implemented in this version of Kit Transfer Ops and is effective on October 7, 2026. If processing changes, the operator will update this public policy and its effective date and make the updated policy available through the app Settings link. Review this page for the current policy. Material changes will be described here; the service does not maintain an email announcement system.