Privacy Policy
Allegory Rhyme Studio
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Allegory Rhyme Studio stores poems, page titles and dates, drafts, earned seals, level progress, audio preferences and reading settings locally on your iPhone in an application data file. It keeps a random installation secret in the device Keychain. When you open Word of the Day, the app sends that secret over HTTPS to register the installation and to authorize requests for a date-specific word set. The server stores only a SHA-256 digest of the secret and the installation creation time in PostgreSQL, together with public daily puzzle content. It does not receive your poems or notebook. Our Railway hosting infrastructure receives network requests and may process technical information such as IP address, request time, URL, response status and connection metadata. The application server records startup events and random request identifiers for failures without logging installation headers, poems or request bodies. No advertising or analytics SDK is included.
How we use information
Local storage lets you continue drafts, retain completed poems, revisit levels and keep your settings. Installation authorization protects access to the daily-content service and allows deletion of your own installation record. Date requests select the daily puzzle; server storage keeps the chosen content consistent. Technical operational information is used to deliver, secure and troubleshoot the service. There are no accounts, advertisements, purchases, marketing messages or email delivery features.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes server data and network metadata as infrastructure provider. GitHub stores the application source, not player poems or installation records. Apple provides iOS device storage, Keychain and system speech synthesis; device backup behavior and any system voice downloads are governed by your Apple settings and Apple services. The app does not send poems to an application-operated speech or AI service. There are no advertising, tracking or marketing recipients, and we do not sell personal information. Information may be disclosed if legally required.
Data retention
Local poems, drafts, progress and preferences remain until you remove pages, reset local progress, or remove the app. An installation digest remains on the server until you use Delete server installation; there is no scheduled expiry. Daily puzzle content is shared game material and may be retained independently of installations. The device-only installation Keychain item can survive app removal, so use the deletion control before uninstalling if you want the server record removed. Device backups may include the local application data depending on your system settings; the device-only Keychain secret is not transferable through a backup. Railway infrastructure logs and any provider-managed backup copies follow the provider configuration and operational lifecycle; no fixed log or backup retention period is promised by this policy. If a local save cannot be decoded, an unchanged recovery copy may be kept in the app container to avoid silently destroying your writing; Reset local progress also removes these recovery copies.
Deleting your information
In Notebook, Delete page removes a saved poem after confirmation and preserves earned level progress. In Settings, Reset local progress removes local poems, drafts, seals and settings after confirmation. Delete server installation separately removes the record authorized by your current installation secret, then removes that secret from Keychain after the server confirms success. If a request fails, the secret is retained so you can retry. Opening Word of the Day later creates a fresh installation. Deletion does not remove shared daily puzzles or independently managed infrastructure logs and backup copies immediately; any such copies follow their operational lifecycle. Removing the app is not a server-deletion request. We cannot locate or restore an installation after you lose its secret.
Permissions and your choices
The app requests no camera, microphone, photo-library, location, contacts, notification or tracking permission. Reading uses the built-in speech synthesizer, not microphone recording. You can stop reading, switch music and paper sounds off, or avoid the daily feature and use the campaign offline. Network access is necessary only for daily sets, installation deletion and opening the public privacy page. System accessibility, voice downloads and backup settings can be changed through iOS Settings.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete or restrict use of personal information, object to certain processing, or complain to a competent privacy authority. The app lets you view and rename local poems, delete pages, reset local data and delete the server installation. For privacy questions or requests contact sap.foxleigh@icloud.com. This address is a public privacy contact, not an account or sign-in system. We may need information sufficient to identify the relevant installation without asking you to publish its secret; we cannot retrieve local poems from your device or recover a lost installation secret.
Security
Requests to the deployed service use HTTPS. Each installation has its own randomly generated secret stored in a device-only Keychain item; the server stores a one-way SHA-256 digest rather than the secret. Private endpoints validate the token and deletion is scoped to that installation. Database credentials remain on the server, which uses parameterized SQL and bounded database connections. Local application data is stored within the iOS app container. These safeguards reduce risk but no storage or transmission method guarantees absolute security. Keep your device and installation secret protected.
Children’s privacy
This word-composition game is intended for teenagers and adults and is not designed specifically for children under 13. There is no account registration, age collection, advertising or social communication feature. If you believe a child has provided personal information through the service, contact sap.foxleigh@icloud.com so the concern can be addressed with the information available. Poems remain local and are not uploaded to the backend.
Changes to this policy
We may update this policy when the application or its processing changes. The public Privacy Policy linked in Settings will show the current policy and its effective date. Material changes will be reflected in the updated page and, where appropriate, application information. Please review the policy when you update the app.