Privacy Policy
FamPulse Radio
This policy explains how this application handles information and how to contact us about privacy.
Information we process
FamPulse Radio stores your game progress, appearance, dialogue choices, settings, fictional episode transcripts, titles, cover selections and collection on your device. If you choose a photo for a cover, the app keeps a resized copy in its private storage. The app creates a random installation secret and stores it in the iOS Keychain. When installation sync is enabled, the server receives the installation credential to authorize requests and stores only its hash, together with your progress and episode metadata and private copies of imported covers. The server supports private image and audio uploads, but the current app synthesizes speech on your device and does not record or upload your voice. Requests to the service and this public website expose network information such as IP address, request time and technical connection information to the hosting infrastructure. We do not ask for your name, email, password or location, and do not use accounts, advertising or analytics SDKs.
How we use information
Local data makes the game work offline, preserves unfinished episodes, remembers story choices and lets you replay and edit your collection. Optional installation sync stores a server copy belonging to this installation only. Uploaded covers personalize episodes. The installation secret authorizes access to private server data. The server generates deterministic fictional listener reactions from episode metadata as part of the game. Technical request information is processed to deliver and protect the service; the server rate-limits installation registration. Optional local notifications remind you about an unfinished episode without a push-notification provider.
Service providers and sharing
The backend and public privacy page are hosted on Railway. Railway and its infrastructure providers process requests, storage and operational information to host the service. Application request logging is disabled so bearer secrets, uploaded content and dialogue bodies are not intentionally written to application request logs. Infrastructure may maintain network and operational logs under its own practices; we do not control or assert a fixed retention period for those logs. The app uses Apple system services for the Keychain, selected-photo picker, local notifications and device speech synthesis. There are no third-party advertising, tracking, external voice, email delivery or social-login integrations. Your private collection is not published or made available to other players.
Data retention
Game files remain on your device until deleted through the app or removed with the application, subject to the operating system's storage and backup behavior. The installation secret is stored separately in Keychain and may survive app removal. Server progress, episodes and uploaded files remain until you request installation deletion; this version does not impose an automatic expiration period on saved game data. Short-lived upload authorizations expire after fifteen minutes, but unused upload records are not automatically purged. A hash marking a deleted installation secret as revoked is retained to prevent reuse. No application-managed backup schedule or fixed infrastructure backup retention period is promised. Deleted data may remain in infrastructure backups until those backups expire according to the host's practices.
Deleting your information
Use Settings, Delete installation data while connected to the internet to remove the installation's server progress, episodes and uploaded files, clear local game data and cover files, and remove its secret from Keychain. If the server cannot confirm deletion, the app keeps your data and secret so you can retry. After successful deletion, synchronization stays disabled for that installation; reinstalling may establish a new installation and cannot recover the old collection. A non-content hash of the revoked secret remains to prevent reuse. Turning sync off stops subsequent game synchronization but does not itself delete existing server copies. Uninstalling alone does not request server deletion. Backup copies and infrastructure logs may persist under the hosting provider's practices; we do not promise immediate erasure of those copies.
Permissions and your choices
The app uses Apple's system photo picker only when you choose Add from Photos. It receives only the selected image, not unrestricted access to your library. You can stop sharing photos by not selecting them and remove imported copies through installation deletion. Local notification permission is requested only when you explicitly ask for a reminder. You can remove the reminder inside the app or withdraw notification permission in iOS Settings. The game does not request microphone, camera, contacts, tracking or location permission. Internet access is used for optional sync and opening the public privacy policy; core gameplay works offline.
Your privacy rights
You can review and edit episodes and settings locally, disable synchronization, and request deletion using the controls described above. Depending on your jurisdiction, you may have rights to access, correct, delete or restrict processing of personal data and to contact your local data protection authority. For privacy questions or requests, contact OttolineFothergill@icloud.com. This address is a public privacy contact, not a game account or an in-app message delivery system. Because there are no accounts or email identifiers and the server stores only a hash of the installation secret, we may be unable to identify or restore installation data after its secret is lost. Never send the secret by email.
Security
Connections to the deployed service use HTTPS. The app creates a distinct cryptographically random installation secret, stores it in Keychain with device-only accessibility and sends it as a bearer credential for private requests. The server stores its hash and checks ownership for progress, episodes and uploaded content. Upload tickets are signed, expire and have size and content-type limits. SQLite and private blob files reside on the service's persistent Railway volume; server signing material stays on that volume. Local progress and imported covers use iOS file protection. These measures reduce risk but do not guarantee absolute security or uninterrupted availability. Anyone obtaining an installation secret could access its data until the secret is revoked through deletion.
Children’s privacy
FamPulse Radio is intended for players aged 14 and older and is not designed to collect information from younger children. The app does not ask for age or contact details. Do not put sensitive personal information in episode titles or imported cover images. If you believe a child has provided personal information through the service, contact OttolineFothergill@icloud.com so the situation can be assessed using the information available without requesting installation secrets.
Changes to this policy
This policy describes the current app and backend. We may update it when features, processing or hosting practices change. The current policy will remain available at the public Privacy Policy link in Settings and on this website, with its effective date updated. Material processing changes will be explained in the updated policy and, when appropriate, in the app.