Privacy Policy
Fly Find Clouds
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Fly Find Clouds stores your drawn routes, stroke widths and markers, unfinished flight progress, completed levels, cloud album names and captions, favorites, selected ship, language, sound and motion preferences locally on your iPhone. These drawings and album entries are not uploaded. When you open Daily cloud, the app obtains a random installation secret and keeps it in the iOS Keychain. The backend stores a cryptographic hash of that secret, a random installation identifier and creation time. It stores the date, completion boolean and update time for daily challenge results associated with that installation. Daily challenge shapes and their parameters are game content stored on the server and cached on the device. Requests to the API and this website necessarily expose technical information such as IP address, request time, URL and connection metadata to our hosting infrastructure. The application server uses IP addresses temporarily in memory for request limits; it does not write drawings, secrets or IP addresses into its application logs. Error logs contain random request identifiers and technical error codes. We do not request your name, email address, location, contacts, photos or account credentials.
How we use information
Local data lets you continue flights, keep your artwork and preferences, and unlock decorative ships offline. The installation secret authorizes requests for Daily cloud and lets the server associate completion results with the correct installation without a login. Daily completion booleans support challenge completion statistics; they are not public profiles or a leaderboard. Technical information and short-lived rate-limit state are used to deliver the service, prevent abuse and diagnose failures. We do not use advertising, behavioral analytics or marketing SDKs.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway. Railway and its infrastructure providers process requests and operational information needed to run the service, including network and hosting logs. We do not sell personal data or share drawings with advertisers. Apple provides the operating system, Keychain and any device backup services you have enabled; this app does not operate a separate cloud backup service. We may respond to valid legal requirements. The public privacy contact is CerysQuinlan1977@icloud.com; the app has no contact form or email delivery feature.
Data retention
Your local journal remains until you reset local progress, delete individual album works, remove app data or your device manages it. Device backup copies may remain according to your Apple backup settings. The Keychain secret can survive app removal; reinstalling is not a guaranteed deletion mechanism. Server installation records and daily results remain until you use Delete server installation data. Daily challenge content is retained as game content. Rate-limit records are held only in process memory and are bounded; they are lost on server restart. Railway operational logs and any infrastructure backups follow the hosting provider configuration and lifecycle. We do not assert a fixed retention period for those records, and this application does not schedule independent database backups.
Deleting your information
In Settings, Delete server installation data sends an authorized deletion request that removes the installation record and its associated daily results from the live database, revokes the old secret and removes it from Keychain after success. If offline, deletion does not succeed and you can retry. A later Daily cloud request can create a new installation. This action keeps your local artwork; Reset local progress separately removes the local journal, album and progress with confirmation, and individual album works can be deleted. Deleting active data does not instantly erase pre-existing device or infrastructure backup copies, which remain subject to their provider lifecycle. There is no account-based recovery or cross-device restoration, and we cannot recover a lost installation secret. Contact CerysQuinlan1977@icloud.com for privacy questions or deletion assistance without sending your secret.
Permissions and your choices
The app does not request location, camera, microphone, photo library, contacts, tracking or notification permissions. You can stop optional Daily cloud requests by using the offline campaign and creative modes instead. Manage network access and device backups in iOS settings where available. Sound and motion controls are in the app, and the system Reduce Motion setting is honored. If a future version introduces an optional permission, you will be able to manage it in iOS settings; this version needs none of those permissions.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete or restrict processing of information and to raise concerns with a data protection authority. You can edit and delete local artwork directly and delete server installation data in Settings. For requests and questions, contact CerysQuinlan1977@icloud.com. Because the service has no accounts or identifying profile, we may be unable to identify an installation without its authorization, and we will not ask you to publish or email the secret. Rights may be subject to applicable law and reasonable verification.
Security
The app uses HTTPS for its public API and stores its random installation secret in the device Keychain using a device-only accessibility class. The server stores only a SHA-256 hash of the secret and validates authorization for daily requests, results and deletion. PostgreSQL constraints isolate result records by installation and cascade their deletion. Local journal writes are atomic and use iOS file protection. Server inputs are validated and requests are limited. No security measure guarantees absolute protection; keep your device and operating system secure and do not share the installation secret.
Children’s privacy
This calm drawing game is intended for a broad audience, including families. It has no advertising, purchases, accounts, public sharing or chat. Children can use the offline game without providing profile information. Optional Daily cloud still involves an installation token, completion results and hosting request metadata as described above. A parent or guardian may manage local data and delete server installation data from Settings, or contact CerysQuinlan1977@icloud.com about privacy concerns.
Changes to this policy
We may update this policy when the app or its processing practices change. The effective date identifies the current version, and the updated policy will be published at this page and linked from app Settings. Material changes that require additional notice or consent will be handled as required by applicable law. Contact CerysQuinlan1977@icloud.com with questions about this policy.