Privacy Policy
Mini Chant for Friends
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Mini Chant for Friends stores the crews, friend names, nicknames, roles, chant text and assignments, event dates and text places, notes, selected photos, captions, recordings and recording metadata that you enter on your iPhone. Friends are local cards, not accounts. Photos selected through the system picker are copied into the app, and microphone recordings are created only when you choose Record. Optional cloud actions send an installation secret for authorization and, for backup, an archive encrypted on the device. The server stores a hash of the secret, an installation creation timestamp and the latest encrypted archive, including its size and file modification time. Requests to the website and API also expose network information such as IP addresses and request times to Railway infrastructure. The application has no advertising or analytics SDKs.
How we use information
Local data enables crew organization, chant editing and rehearsal, recording playback, event albums and memories. Optional cloud processing stores and restores the latest archive for the same installation and authorizes deletion. The secret is generated automatically, stored in this device’s Keychain and is not an account, password or social login. Public website requests serve this page, the home page and service readiness. No email delivery, support form, contact upload, face recognition or geographic map service is implemented.
Service providers and sharing
Cloud archives and authorization requests are processed by the application backend hosted on Railway, which supplies computing, persistent volume storage and network infrastructure. Railway may process infrastructure logs and network metadata. The backend does not intentionally log request bodies, authorization headers or IP addresses, and does not decrypt archives. There are no advertising, analytics or outbound messaging recipients. When you export an audio file or ZIP through the iOS share sheet, the destination you choose receives that file under its own practices. Exported ZIP files are not encrypted. Your privacy choices should also respect the people whose names, photos or voices you save.
Data retention
Saved journal records and media remain on the device until removed or the local journal is erased; media no longer linked to a saved record may remain in app storage until the journal is erased. Temporary import, trim and export files may remain in iOS-managed temporary storage until removed by the app or operating system. The cloud keeps one latest archive per installation until replaced or deleted. The installation hash and creation timestamp remain so the existing secret can authorize future operations even after archive deletion. There is no automatic expiry schedule. We do not claim a specific retention period for Railway infrastructure logs or provider backups. Files copied to your own export destinations or device backups are governed by those systems.
Deleting your information
Use Delete cloud archive in Settings to remove the active server archive, and Erase local journal to remove local journal data and media. These are separate confirmed actions; cloud failures are shown as pending and can be retried when connected. Deleting an event preserves its chants and recordings, and deleting a friend preserves old recordings. An archive already exported or copied to another service is not remotely erased by these actions. No application-managed historical cloud backup copies are kept; provider-managed snapshots, if present, follow provider handling and are not promised to disappear immediately. The installation authorization hash remains after archive deletion. Contact welcome@tobymartinez.site for privacy questions about retained service information; never send your installation secret by email.
Permissions and your choices
The microphone permission is used for recording chant performances. You may deny or withdraw it in iOS Settings and continue editing, rehearsing, importing audio and using saved content. Photo import uses the system photo picker and only the items you select are provided to the app; full photo library authorization is not requested. The app does not request contacts, location, tracking, notifications or camera access. Withdrawing a permission does not automatically delete media you already saved.
Your privacy rights
You can inspect and edit your records locally, export a complete archive and use the local and cloud deletion controls. Depending on your location you may have rights to access, correction, deletion, restriction or objection, and to contact a relevant data protection authority. For privacy requests contact welcome@tobymartinez.site. We may need enough non-secret information to understand a request, and cannot identify an installation from an email address because there are no accounts. Losing the installation secret prevents cloud recovery; portable ZIP exports are the alternative you control.
Security
Cloud communication uses HTTPS. The app encrypts archives with ChaChaPoly before uploading, deriving an archive encryption key from the installation secret with a separate domain label. The secret is held in device-only Keychain storage; the backend stores its authorization hash rather than the secret. The backend receives the secret transiently to authorize requests, enforces separate installation namespaces, bounds uploads and writes archives atomically to a Railway persistent volume. Local journal media is stored in the application sandbox. No system guarantees absolute security. Keep your device and unencrypted exports private, and do not disclose the installation secret.
Children’s privacy
The app is intended for friend groups and teams aged 14 and over and is not directed to children under 14. It does not require a birth date or collect an age profile. Do not save or share another person’s photos or recordings without appropriate permission. A parent or guardian with privacy concerns can contact welcome@tobymartinez.site and use the device’s local and cloud deletion controls.
Changes to this policy
We may update this policy when app or backend processing changes. The effective date at the top identifies this version. The current policy is available from the app’s Privacy Policy link and on this public page without login or cookies. Review it when deciding whether to use optional cloud backup.