Privacy Policy
Feet Fly Line Up
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Feet Fly Line Up stores campaign progress, rehearsal plans, completed performances, costume choices, language, audio, motion and reminder preferences in the app’s local Application Support storage. These local records are not uploaded. When you open the daily puzzle, the backend issues a random installation secret that the app stores in this device’s Keychain. The backend stores only its SHA-256 hash and creation timestamp. For server-edition daily rehearsals it stores the puzzle date, solved status, attempt count and update timestamp associated with that hash. Failed result uploads are queued locally for retry. Network requests also expose technical connection information, such as IP address, request time, route and response status, to Railway hosting infrastructure. The server temporarily uses IP addresses in memory for rate limiting. We do not request names, email addresses, contacts, location, photos or advertising identifiers. If you enable iOS device backups, Apple’s device-backup services may include local app files according to your device settings; the app does not operate its own cloud-backup service.
How we use information
Local data keeps your puzzle settings, progress and performance album available offline and after reopening the app. The installation credential authorizes access to that installation’s daily results without an account. The server provides version-compatible daily puzzle configurations, stores daily completion and attempt information, and uses transient rate-limit information to protect availability. Optional local notifications remind you about the daily puzzle at 7 pm in device time. There are no advertisements, purchases, marketing messages or third-party analytics SDKs.
Service providers and sharing
The backend runs on Railway, which processes requests and persistent storage as the hosting provider and may maintain operational and infrastructure logs. The application has no other third-party data recipients or integrations. We do not sell personal information or share it for advertising. App-level error logs contain a random request identifier and error code, not installation secrets or request bodies. Railway may independently receive technical request information needed to operate and secure its service. Information may also be disclosed when legally required.
Data retention
Local gameplay records remain until you reset local progress, remove the application, or your device’s storage management removes them. The installation credential is held in Keychain and may remain after app removal under iOS behavior. Server installation hashes and daily results have no scheduled automatic expiry and remain until the installation is deleted or the service’s storage is removed. IP rate-limit entries are held in process memory and expire from active use after their rate-limit windows or a process restart. Hosting logs and any provider backups follow Railway’s applicable service settings; we do not assert a fixed retention period for those copies.
Deleting your information
Settings provides Delete my server data. With a working connection this deletes your authenticated installation record and its daily results from the live database, then clears the device’s credential and pending upload queue. If the request fails, the credential is retained so you can retry. The next daily connection can create a new installation identity. Reset local progress separately removes the saved rehearsal, completed levels, album and unlocked costumes. Removing the app removes its local app storage, but does not itself request server deletion. Deleted information may remain in infrastructure logs or provider backups until those copies expire under the provider’s settings; they are not used by the live application. Without the installation secret, the service cannot locate or restore your installation’s records by name or email. Existing device backups are managed through your Apple device or backup settings, separately from the app’s reset control.
Permissions and your choices
The app requests notification permission only when you enable the optional daily reminder. You can turn the reminder off in app Settings, which removes pending reminders, or withdraw notification permission in iOS Settings. Denial does not prevent playing. The app does not request location, camera, microphone, contacts, photo-library or tracking permission. Internet access is used for daily puzzles, result synchronization and the public privacy page; the campaign, free rehearsal, cast and album work offline.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your information, or to complain to your local data protection authority. You can inspect local plans and performances in the app, adjust preferences, reset local progress, and delete installation-scoped server data using Settings. For privacy questions or rights requests, contact emery.hollis@icloud.com. This is a public privacy contact, not an app account or an email-delivery service. Do not send your installation secret by email. Because the service does not collect identity details, it may be unable to associate an email request with a particular installation.
Security
The app uses HTTPS for deployed API requests and stores the random installation credential in Keychain with device-only accessibility. The server stores a hash rather than the original secret and checks the bearer credential before serving private operations. Prepared statements, foreign-key deletion, request validation, body limits and rate limiting protect the database and service. Gameplay files remain in the iOS app sandbox. There is no cross-device sign-in or credential recovery. Keep your device secure; no network or storage system can guarantee absolute security.
Children’s privacy
Feet Fly Line Up is designed for puzzle players aged 10 and older. It has no accounts, chat, public profiles, advertising or purchases and does not ask children for contact details. Daily play still involves the limited installation and gameplay processing described above. Parents or guardians can keep play offline, disable notifications and use the in-app deletion controls. Contact emery.hollis@icloud.com about child privacy concerns.
Changes to this policy
This policy may be updated when the app’s features, data processing or hosting practices change. The current policy is published at this privacy page with its effective date and is accessible from app Settings. Material changes will be described in the updated policy and, where appropriate, through an app update. The effective date above identifies this version.