Privacy Policy

Information we process

Bounce Cup Daily stores campaign progress, unfinished games, records, achievements, cosmetic selections and settings locally on your device. It creates a random installation secret in the iOS Keychain. The app sends a SHA-256 hash of that secret as an installation token when saving, reading or deleting daily-challenge results. The server stores a further SHA-256 hash of the token, together with the challenge date, balls used, best streak, completion status, a random attempt identifier and the time of receipt. The original Keychain secret is not sent to the server.

Requests for the daily challenge, this website and the privacy policy reach Railway infrastructure. Network request metadata, such as an IP address, request time and requested address, may be processed by the hosting infrastructure. The application server temporarily uses the connection IP address for request limiting and logs request identifiers and operational events without logging installation tokens or result bodies. We do not request a name, email address, location, contacts, photos or an account.

How we use information

Local information lets you continue games, retain progress, apply your settings and display your own records. The installation token restricts access to the daily-challenge results from that installation. The backend supplies a shared daily configuration and stores results so the same installation can view its history. Operational request handling helps keep the service available and diagnose failures. We do not use advertising, third-party analytics, tracking or purchases in this application.

Service providers and sharing

The backend and this public privacy website run on Railway. Daily-challenge result data is stored in PostgreSQL connected to that service. Railway and its infrastructure providers process network requests and stored service data to operate the hosting platform. There is no public leaderboard or public access to installation history. We do not sell your information or send game data to advertising or analytics services. Information may also be disclosed where a valid legal obligation requires it.

Data retention

Local progress and settings remain on the device until reset or removed. The Keychain installation secret may remain available after the app is removed, depending on iOS behavior. Server results remain until you delete them through the app or the service removes them; no automatic expiry duration is currently configured. The history endpoint returns the latest 100 results, which is a display limit rather than a deletion schedule. Hosting logs and provider-managed copies follow the infrastructure provider's applicable practices; we do not assert a fixed log or backup retention period. Deleted data may remain in provider-managed backup copies until those copies expire under the provider's procedures. Depending on your device settings, local app files may also be included in device backups. Manage those copies through your device backup controls; a local progress reset does not alter backups that already exist.

Deleting your information

Use the server-results deletion control in the app's Settings to request deletion of all daily-challenge results associated with the current installation token. This removes those rows from the active database; it does not remove local campaign progress. Local progress can be reset separately in Settings. If a network deletion request fails, the app must receive a successful response before presenting server deletion as complete. Losing the installation secret prevents the app from accessing or proving control of its former results; there is no account-based recovery or transfer. You may contact the privacy address below with questions about deletion.

Permissions and your choices

The game does not require access to location, contacts, camera, microphone or photos. An optional local reminder for the daily challenge is scheduled only after you enable reminders and allow notifications. You can turn reminders off in the app or withdraw notification permission in iOS Settings. No server push-notification token is collected. Game settings, including language, sound, motion and control preferences, can be changed in the app. Device accessibility preferences can also affect presentation. Network access is used for daily challenges, private results and the public privacy policy. If the service is unreachable, the app can use a clearly marked local challenge; local challenge results are not submitted as server results.

Your privacy rights

Depending on the law that applies to you, you may have rights to access, correct, delete or restrict the processing of your information, object to processing, or complain to a relevant data protection authority. You can view the current installation's recent daily results and delete its server history in the app. For other privacy requests, use the contact address below. We may need enough information to verify your request; we cannot identify an installation from a personal name or email because the game does not collect those identifiers.

Security

The app keeps its random installation secret in the iOS Keychain. Production network requests use HTTPS, and the server checks the installation token before private-history operations. PostgreSQL queries use parameters, result input is validated, and the server stores a hash rather than the bearer token. Access to installation results depends on protecting the Keychain secret and derived token. No storage or transmission method can guarantee absolute security. The app does not provide account recovery after loss of the installation credential.

Children’s privacy

Bounce Cup Daily is designed for a general audience aged 14 and over. The app does not ask for an age, personal profile, account or direct contact details, and it contains no advertising or social messaging. If you believe a child has provided personal information through this service, contact the privacy address below so the concern can be reviewed. Parents can control the application's availability through the device's parental controls.

Changes to this policy

This policy describes the current application and backend practices. If processing changes, we will update this policy and its effective date on this page. Review this page when you want to understand how the latest version handles information. Questions about the policy or your information can be sent to the privacy contact shown below; the app does not contain a support-ticket or email-sending feature.