Privacy Policy
To Bowlers Play
This policy explains how this application handles information and how to contact us about privacy.
Information we process
To Bowlers Play stores campaign progress, active game state, cosmetic selections, language and control preferences locally on your device. If you use online daily challenges, the app obtains a random installation secret and keeps it in the device Keychain. Our backend stores only a SHA-256 hash of that secret, its creation time, and daily challenge dates, pins knocked down and throws used. Results are associated with the installation hash, not a name or account. Campaign and local two-player games are not uploaded. Requests to the app service and this website also reach Railway infrastructure, which processes network information such as IP addresses and request metadata. The application temporarily uses connection addresses in memory to limit installation provisioning. We do not request names, email addresses, contacts, location, photos or advertising identifiers. Pending daily results awaiting upload are also kept locally until successfully sent or server data is deleted in Settings.
How we use information
Local data lets you continue games, remember preferences and unlock cosmetic rewards. The installation secret authorizes your daily challenge requests and deletion of your own server data. The server selects the daily lane, stores your best reported daily result, and provides an anonymous table of results and a result count. These results are self-reported and do not identify players. Temporary connection counters help prevent abusive provisioning. Hosting request information supports delivery, reliability and security. Optional reminders are scheduled on the device; no push token or reminder service is used. A local pending-results queue lets you retry failed uploads after reopening the app or starting another lane.
Service providers and sharing
The backend and this public policy are hosted by Railway. Railway receives service requests and may process infrastructure logs and network metadata as the hosting provider. Anonymous daily results, without installation hashes or secrets, are returned to other authorized installations as top scores and a total count. The app uses Apple system services for Keychain storage and optional local notifications. We do not integrate advertising, third-party analytics, social login, email delivery or other external application SDKs, and do not sell personal information.
Data retention
Local game state and preferences remain until removed with the application or otherwise removed through device storage controls. Keychain items may survive uninstalling; deleting server data in Settings removes the stored installation secret. The server retains the installation hash and creation time until deletion. Daily results are limited to the current UTC date and the six preceding dates; older rows are removed on subsequent service requests. Temporary provisioning counters expire after a one-minute window or a server restart. We have not configured application database backup schedules or separate archives. Railway may have infrastructure logs, replicas or recovery copies under its hosting practices; we do not assert a fixed retention period for those copies. Pending uploads remain on the device until sent or removed by the server-data deletion action; dates outside the server’s seven-day acceptance window remain local.
Deleting your information
Use Delete my server data in Settings while connected to remove the installation row and all associated daily results from the live database. The app removes its Keychain secret only after successful server deletion and keeps your offline campaign. Deletion also removes those results from subsequent aggregates. If deletion fails, the app reports the error so you can retry. Connecting again creates a new independent installation secret. There is no account recovery or cross-device restoration; losing the secret can prevent us from identifying the associated data. Local game data can be removed through device app-storage controls. Deletion does not guarantee immediate removal from provider infrastructure logs or recovery copies; such copies remain subject to the provider’s practices and are not exposed as active game records.
Permissions and your choices
The only optional permission is local notifications, requested when you explicitly enable the daily reminder in Settings. You can turn the reminder off in the app or withdraw notification permission in iOS Settings. Declining does not prevent play. The app does not request access to camera, microphone, photo library, contacts or location. Network access is used for optional daily challenges and opening this policy; the campaign works offline.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete or restrict processing of information associated with your installation, or to complain to a relevant data protection authority. You can delete live server records directly in Settings. For privacy questions or rights requests, contact swithin.inwood2@icloud.com. Do not send your installation secret by email. Since there is no account or name attached to game results, we may be unable to locate data without an authorized installation; we will explain applicable verification and limitations.
Security
The app uses HTTPS for the deployed API and stores its installation secret in device-only Keychain storage. The server stores a cryptographic hash rather than the raw secret, validates requests and requires the installation credential for protected endpoints and deletion. SQLite data is on the Railway persistent volume with restricted application file permissions. These measures reduce risk but cannot guarantee absolute security. Keep your device secure; there is no password recovery or transfer between devices.
Children’s privacy
The game is designed for players aged 14 and older and is not directed to children under 13. It does not request a child’s name, age, email address or account. If you believe a child has provided personal information through the service or a privacy contact, please contact swithin.inwood2@icloud.com so we can review the situation and take appropriate action.
Changes to this policy
We may update this policy when the game, its processing or hosting practices change. The effective date on this page identifies the current version. Material changes will be described in an updated policy and, where appropriate, through the app. You can revisit the Privacy Policy link in Settings at any time.