Privacy Policy
Be Fair for Fun
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Be Fair for Fun stores campaign progress, the active table and undo history, completed meetings, language, sound, motion and reminder preferences locally on your iPhone. These files are excluded from device backups by the app. A randomly generated installation secret is stored in the iOS Keychain with device-only accessibility. Daily requests transmit this secret over HTTPS; the backend uses its SHA-256 hash to authorize this installation. The database stores the hash, daily puzzle date and configuration identifier, best move count and completion timestamps when a server daily puzzle is solved. Daily puzzle configurations and verified solution hashes are also stored. We do not request your name, email, contacts, location or photos. Our Railway hosting infrastructure receives network requests, including IP address, request path, time and connection metadata. Application error logs contain request identifiers and error codes, not installation secrets or request bodies.
How we use information
Local data lets you resume a table, undo an exchange, replay meetings and keep your album and preferences. The installation secret and its hash restrict server result access and deletion to the originating installation. Server data supplies daily puzzles, retains best daily move counts and helps check puzzle quality. Request limits and infrastructure information support operation, reliability and abuse prevention. Local reminders are scheduled only if you choose to enable them.
Service providers and sharing
The backend and PostgreSQL database are hosted by Railway, which processes service requests, stored records and infrastructure logs as our hosting provider. Apple iOS provides Keychain storage and local notification delivery on your device; no remote push service is used. Opening the privacy website sends ordinary web requests to the same Railway service. There are no advertising, social sign-in, third-party analytics or outbound email SDKs in the app. We do not sell data or provide a public leaderboard. Data may be disclosed if a legally binding request requires it.
Data retention
Local progress stays on your iPhone until you erase it in Settings or remove the app. The device-only Keychain secret can remain after app removal according to iOS behavior; it is not synchronized by this app. Server results are retained until you delete this installation's server results; there is no automatic result expiry implemented. Public puzzle configurations contain game content rather than personal progress. Hosting log retention and infrastructure backup retention follow the provider's configuration; the app does not impose or promise a fixed duration for those copies.
Deleting your information
Settings provides Erase local progress to clear the campaign, active daily table, album and pending results on this phone, and a separate Delete my server results action that deletes this installation's result rows through an authorized HTTPS request. Deletion requires a working network connection and is reported as unsuccessful when the server cannot be reached. Server deletion does not erase local progress. Queued unsent results are cleared after successful server deletion. The app cannot recover access after the installation secret is lost and does not promise transfer to another device. Deleted active database rows may remain in infrastructure backups until those backups expire under provider controls; no additional app-level backup copies are created.
Permissions and your choices
Notifications are optional and requested only when you enable the daily reminder. They are scheduled locally at 18:00 and do not use APNs. You can turn reminders off in the app or withdraw permission in iPhone Settings. Denying notifications does not prevent play. No location, camera, microphone, contacts or photo-library permission is requested.
Your privacy rights
You can inspect your local progress in the game, change preferences, clear local progress and request deletion of your own server results through Settings. Depending on where you live, you may have rights to access, correct, delete or limit processing of personal data. Privacy questions or requests can be sent to Amabell994@icloud.com. This is a privacy contact, not an in-app messaging or account system. Please do not disclose your installation secret; if it has been lost, we may be unable to identify the corresponding anonymous result records.
Security
The app uses HTTPS for server communication, cryptographically random installation secrets, device-only Keychain storage and server-side hash authorization. Database queries are parameterized and restricted to the authenticated installation hash. Result requests cannot select another installation by supplying its identifier. The backend validates dates, move counts, payload sizes and rate limits. Database credentials remain on the server. These measures reduce risk but do not guarantee that any device, network or hosting system is completely secure.
Children’s privacy
The game is designed for players aged eight and older, including families. It does not provide accounts, chat, advertising, purchases or public player profiles. Parents can keep campaign and practice play offline, leave reminders disabled and erase progress or server results. We do not knowingly request children's names, contact details or precise location. If you have a concern about information processed through a child's installation, contact Amabell994@icloud.com.
Changes to this policy
We may update this policy when the game's processing or hosting changes. The current policy is available through Settings and at this website, with its effective date. Material changes will be reflected in the app or policy page before or when the changed processing is introduced.