Privacy Policy
Breeze Kite Smile
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Breeze Kite Smile stores campaign stars, collected-ring achievements, selected kite, endless-flight records, preferences, a suspended flight, cached daily routes and pending daily results locally on your device. A random installation secret is stored in the device Keychain. When you use Wind of the Day, the server receives that secret for authorization and stores only its SHA-256 hash, an automatically generated pilot label, creation time, and your daily distance, rings, flight duration and submission time. Daily routes and optional operator route overrides are stored on the server. Hosting necessarily receives network information such as IP address and request metadata. Application logs record request IDs, route, HTTP method and response status; the app does not intentionally log bearer secrets or request bodies. No name, email address, account, geographic location, contacts, photos or advertising identifier is requested by the app.
How we use information
Local information keeps your progress, preferences, cosmetic unlocks and saved flight available between sessions. The installation secret authorizes access to the daily challenge and permits deletion of your own results without an account. Server game values provide the daily challenge and a recreational top-twenty leaderboard. Network metadata and request logs support serving requests, rate limits, reliability and diagnosis. There are no advertisements, purchases, analytics SDKs, marketing messages or outbound email features.
Service providers and sharing
The backend is hosted by Railway, which processes network requests, service data, persistent volume storage and infrastructure logs as the hosting provider. The anonymous pilot label, distance, ring count and duration of qualifying daily results are visible to other app installations on the daily leaderboard. The installation secret and its hash are never included in leaderboard responses. No other external SDK or data recipient is integrated into this app. If you contact the published privacy email outside the app, your chosen email provider and the recipient email service process that message; the app does not send it.
Data retention
Local progress, cached routes, settings and saved flights remain until reset in the app or removed with device storage. The device Keychain may retain the installation secret after app removal; app removal alone does not delete server records. Server daily results and installation records remain until you use the deletion function; no automatic expiry period is configured. When deletion completes, scores and the previous pilot label are removed from active storage, while a hashed-secret tombstone and deletion timestamp remain to reject stale retries. Daily routes may remain because they are shared game content. Hosting log retention follows the hosting provider configuration; no specific log retention period is promised. No scheduled application backup process has been configured. If infrastructure backups or snapshots exist, deleted data may persist in them until their normal expiry; the app provides no direct way to edit such snapshots.
Deleting your information
Settings offers Delete all my data. If a Keychain installation secret exists, including after reinstalling the app or losing local progress, the app first confirms the installation with the server and requests authorized deletion of its scores. A server response that the installation was already deleted is also accepted. Only then does the app remove local progress and its Keychain secret. A failed network or server request preserves the secret and local data so you can retry with a connection. If no installation secret exists, only local data can be reset. The server retains a hash-only deletion tombstone to prevent recreation by stale requests. Other installations are unaffected. Losing the installation secret prevents the app from authorizing deletion or restoring old results; there is no account recovery or device-to-device login. You may use the privacy contact to ask about a data request, but recovery or identification without the secret cannot be promised. Do not send your secret by email.
Permissions and your choices
The app does not request location, photos, camera, microphone, contacts, tracking or notification permissions. Internet access is used for daily routes, leaderboard results and deletion. System Reduce Motion is respected, and additional motion, sound and music preferences are available in Settings. You can stop server requests by not opening online destinations; offline campaign and endless play remain available. Existing server data is removed through the deletion control while connected.
Your privacy rights
You can inspect game progress and results in the app, change preferences, and delete data associated with your installation. Depending on your location, applicable law may give you additional rights concerning access, correction, deletion, restriction or objection and a right to contact a supervisory authority. For privacy questions or requests, contact beau.everleigh@icloud.com. Explain the request without sending passwords or installation secrets. Since the service uses anonymous installation credentials rather than accounts, our ability to identify or provide records after credential loss is limited.
Security
Production communication uses HTTPS. The app keeps its random installation secret in Keychain with this-device-only accessibility, and the server stores a SHA-256 hash. Protected endpoints validate the installation credential, and deletion is scoped to that installation. SQLite transactions and validation protect stored game values. Server operator credentials, if configured, are not embedded in the app. No network or storage system can guarantee absolute security. Leaderboard values are bounded client-reported game scores, not verified competitive attestations.
Children’s privacy
The game is intended for a general audience aged twelve and older and is not designed to collect personal profiles from children. There are no accounts, chat, user-entered names, advertising or purchases. Anonymous installation credentials and game results are processed when online play is used. A parent or guardian with access to the device can use the deletion control or contact beau.everleigh@icloud.com with privacy questions.
Changes to this policy
This policy may be updated when the game or its processing changes. The effective date on this page identifies the current version. Material changes will be reflected in the public policy and, where appropriate, accompanying app information. Check this page for the latest description of actual processing.