Privacy Policy
Quiet Crystal Balance
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Quiet Crystal Balance stores campaign progress, unfinished arrangements, move history, completed puzzle arrangements and dates, sound and motion preferences, reminder preferences and pending optional daily results locally on your iPhone. An automatically issued random installation secret is stored in this device's Keychain; the server stores only its SHA-256 hash and creation timestamp, with an internal installation identifier. The daily archive stores puzzle dates, generated puzzle content and archive creation times. If you enable Share daily results, the server receives the puzzle date, solved status, move count and crystal placements and stores them with a completion timestamp associated with the installation. Network requests also expose technical information such as IP address, request time and request metadata to Railway infrastructure. The app does not request your name, email, password, location, contacts or photos, and has no accounts, advertising or analytics SDKs. Development builds running in the iOS Simulator may store the installation secret in a private, backup-excluded file in that simulated installation when an unsigned process cannot access Keychain. This Simulator-only path is not compiled into iPhone device builds.
How we use information
Local data lets you resume a round, undo moves, keep your album and play the campaign offline. The installation secret authorizes daily archive requests and access to only your own optional server results. Server puzzle records make each day's challenge repeatable. Optional results preserve the submitted daily completion for this installation; they are not used for advertising or a public leaderboard. Technical request information supports hosting, security, rate limits and diagnosing failures. Local reminders are scheduled on your iPhone only when you enable them.
Service providers and sharing
The backend and its persistent SQLite database are hosted on Railway. Railway processes network and infrastructure information as the hosting provider, and authorized operators of this service can access its stored data when operating it. The app contains no other third-party SDK, no email delivery service and no analytics provider. Installation results are not exposed to other installations, sold or published. This public website uses no login, cookies or external tracking resources. Railway may maintain infrastructure logs under its own hosting practices; we do not claim a specific provider log-retention period.
Data retention
Local progress remains on your iPhone until you reset local progress or remove the app. Device-managed backups may include the local progress file according to your Apple settings. The Keychain secret is marked ThisDeviceOnly, does not migrate to another device and may remain on this iPhone after app removal. Server results remain until you use Delete my server results. The installation hash and creation timestamp remain to authorize future use, even when results are deleted. The daily puzzle archive is retained to serve the same puzzle for a date. No automatic expiry is configured for these database records. This service does not implement a separate application backup system or promise a Railway backup or log deletion schedule. Any provider-managed backups and infrastructure logs are governed by the provider's practices and may not disappear immediately after a database deletion.
Deleting your information
In Settings, Reset all local progress removes saved rounds, campaign completion, the album and pending local result uploads. It does not delete server results. Delete my server results makes an authorized request that deletes all daily result records for this installation, clears pending uploads and turns result sharing off; local progress remains. The app shows an error if the request fails, so an offline attempt is not reported as a successful deletion. The installation authorization record and public daily puzzles remain. Deletion cannot guarantee immediate erasure from infrastructure logs or provider-managed backups. If you lose the installation secret, there is no account-based recovery or transfer of that installation's data. You may contact icloud.v63@gmail.com for privacy and deletion questions, without sending the secret.
Permissions and your choices
Notifications are optional and requested only when you turn on the daily reminder. Notification permission is used to show a locally scheduled reminder, not to collect a push token or send your information to a messaging service. You can turn reminders off in the app, which removes the scheduled reminder, or withdraw notification permission in iPhone Settings. No location, photo, camera, microphone or contact permission is requested. Sound and Reduce Motion are local preferences.
Your privacy rights
You can review your local solved arrangements in the album, choose whether to share new daily results and use the separate local and server deletion controls. Depending on where you live, you may have rights to request access, correction, deletion or restriction of personal information. For questions or to exercise applicable rights, contact icloud.v63@gmail.com. This address is a privacy contact only; the app does not register accounts or send emails. We may need enough non-secret information to identify an applicable request, and cannot recover data after the installation key has been lost.
Security
The app uses HTTPS for the deployed API and public policy. The installation secret is held in the iOS Keychain rather than embedded as a shared credential. The server stores a cryptographic hash, authorizes each result operation to the matching installation and validates puzzle solutions. SQLite constraints, atomic client saves, request size limits, timeouts and rate limits protect consistency and service availability. Service error logs contain request identifiers and error codes rather than secrets or result bodies. These measures reduce risk but do not guarantee absolute security. Keep your device secure and never share the installation secret. The unsigned Simulator fallback uses a directory accessible only to its owner, a read/write-only-for-owner file and backup exclusion; it does not provide Keychain encryption and should be used only on a trusted development Mac. Device builds continue to require Keychain and fail closed if it is unavailable.
Children’s privacy
Quiet Crystal Balance is intended for adults and teenagers aged 13 and older and is not directed to children under 13. It contains no accounts, chat, advertisements or purchases. If you believe a child has provided information to this service, contact icloud.v63@gmail.com so the concern can be reviewed and applicable deletion options explained.
Changes to this policy
This policy describes the processing implemented for the current app and backend. If those practices change, this page and its effective date will be updated, and additional notice will be provided in the app when appropriate. You can always reach the current policy from Settings.