Privacy Policy
Royal Kite Workshop
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Royal Kite Workshop stores kite projects, names you enter, sail and frame settings, revision comments and dates, wind profiles, challenge progress, pending synchronization changes and flight replay frames locally on your iPhone. Language, units, sound and motion preferences are stored locally. Cloud sync is optional and off by default. If you enable it, the app obtains a random installation access secret, keeps that secret in the device-only Keychain, and sends project snapshots, revisions and saved wind profiles to our backend. Successful challenge results queued on your device are submitted as anonymous challenge number, peak altitude and holding time when sync is enabled. The server stores a hash of the installation secret and issuance date to authorize access; it does not require your name, email, account or password. Public leaderboard entries show only challenge number, altitude and holding time. When the app or a browser contacts the service, Railway infrastructure necessarily receives request information such as IP address, time, requested route and technical connection information. The app has no advertising or analytics SDKs.
How we use information
Local data lets you build, balance, fly, compare and reopen your kites without an internet connection. Optional cloud processing synchronizes snapshots for the same installation secret, processes deletion requests and ranks anonymous challenge results. The secret hash separates access to each installation’s private projects. Technical request information is used to deliver the service, apply request limits, operate hosting and diagnose failures. This app is an educational simulation and does not provide engineering safety assessments. There is no account system, email delivery, advertising, marketing profiling or geographic map service.
Service providers and sharing
The backend and public website run on Railway, which processes network traffic and hosts our service and persistent SQLite storage. The operator can administer this storage and hosting. Anonymous challenge measurements that you submit with sync enabled can appear in the public top-ten leaderboard; project names, designs, revision comments and installation identifiers are not included in the public leaderboard. Native Apple operating-system services provide networking, Keychain and device storage. We do not add third-party mobile analytics, advertising or external messaging services. We do not sell data. Information may be disclosed if legally required or necessary to protect service security; this policy does not claim any certification or unverified provider practice.
Data retention
Local projects, preferences, progress and replays remain until you remove or reset them, or device storage is removed. The current and most recently finished flight are retained for continuation and replay; completing a later flight replaces the previous replay. Cloud project snapshots remain until overwritten or deleted by the authorized installation, and its best result for each challenge remains until all cloud data is deleted. Turning synchronization off stops future sync but does not delete existing cloud copies. Installation secret hashes remain until the installation’s cloud data is deleted. The application does not configure scheduled database backups or a fixed expiry period. Infrastructure logs and any provider-maintained copies follow Railway’s actual hosting practices; we have not established a fixed retention duration for them and cannot promise immediate erasure from all infrastructure or historical copies.
Deleting your information
You can delete individual projects in My Projects, delete revisions in Revision History, delete wind profiles in Wind Bench, and reset local challenge progress in Settings. Project deletions are queued locally and applied to the server when sync is enabled and a connection is available. Changes to revisions and wind profiles update associated cloud project snapshots on the next sync. Settings includes Delete all local and cloud data: with the installation secret and a connection it deletes the installation record and its projects and leaderboard results from the active server database, revokes the secret, clears local workshop data and turns sync off. If that request fails, the app retains your data and secret so you can retry. Settings preferences remain on the device. Removing the app or losing the secret does not itself request cloud deletion, and we cannot promise recovery or identify your private cloud records without the secret. Deletion from the active database cannot retroactively withdraw a leaderboard measurement someone has already viewed or any separate device/provider backup. Contact WulstanMordaunt@icloud.com for privacy inquiries; do not send access secrets in email.
Permissions and your choices
The app requests no camera, photo-library, location, contacts, notification or microphone permissions. You can turn optional synchronization off in Settings and use the editor, wind profiles and flight simulation offline. Internet access itself does not display an iOS permission prompt. Sound and Reduce Motion can be changed in Settings; the app also respects the system Reduce Motion preference. Device backup settings are controlled through Apple’s operating system. No embedded maps or location collection are used.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or limit processing of personal information and to complain to a relevant authority. You can inspect and correct your projects locally and use the app’s deletion controls. Send privacy questions or requests to WulstanMordaunt@icloud.com. This address is a public privacy contact only and is not an account or in-app messaging service. We may need information sufficient to locate and verify the relevant installation, and we cannot promise to locate records after its secret is lost. Do not disclose your installation secret in correspondence.
Security
Public service communication uses HTTPS. The automatically issued, random installation secret is kept in a device-only Keychain entry; the server stores its SHA-256 hash rather than the original token. Private endpoints require a valid Bearer token and database queries scope records to the authorized installation. Requests are validated, bounded in size and rate limited; database queries use prepared statements. Local workshop writes are atomic. The backend runtime uses a dedicated unprivileged user after preparing its persistent storage volume. Application error logs do not deliberately include authorization tokens or project contents. These controls reduce risk, but no system can guarantee absolute security. Anyone holding your installation secret could access its cloud data.
Children’s privacy
The product is designed for kite enthusiasts and learners aged 12 and above. It does not require children to register or provide contact details. Optional sync uploads any project names or revision comments that a user enters, so avoid entering sensitive personal information. Younger users should use the app with a parent or guardian as appropriate. If you believe a child’s personal information has been processed inappropriately, contact WulstanMordaunt@icloud.com so we can consider the request and applicable obligations.
Changes to this policy
We may update this policy when the app’s features, backend processing or hosting practices change. The current policy is published at this public privacy page with its effective date. Material changes will be described in the updated policy and, where appropriate, within the app or release information. Review this page periodically. The app’s Privacy Policy link opens the currently published version.