Privacy Policy
Spot-a-friend Super
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Spot-a-friend Super stores the friends, names, notes, meeting dates, plans, favourites, place names, categories, addresses, optional coordinates, photo captions, photographs and relationships that you choose to add in a local collection file on your device. Photos imported through the system picker or camera are resized and re-encoded for the collection. A randomly created installation root secret is stored in the device-only Keychain when you first use backup. There are no user accounts. Manual backup is optional and disabled by default. When you upload a backup, the app sends an encrypted snapshot, a derived installation authorization token and ordinary network requests to the backend. The server stores only ciphertext, a hash identifying the installation, file size and modification time. The root secret and encryption key are not sent. Railway infrastructure receives request metadata such as IP addresses and request timing when you visit the public website or use backup.
How we use information
Local information lets you remember people and places, connect shared photographs, record meetings, convert plans into meetings and view memory collections. Optional coordinates help you recognize a place in an address list; the app contains no geographic map. The optional backend saves one encrypted snapshot for restoration while this installation retains its device key. Separate cryptographic derivations authorize access and encrypt content. Temporary request counters protect the service against excessive requests. Public website requests deliver this policy and the home page.
Service providers and sharing
The backend is hosted on Railway, which provides the server, persistent volume and network infrastructure and processes encrypted snapshots and operational request metadata. The application has no advertising, analytics, social sign-in, email delivery or external messaging SDKs. Apple system services operate the photo picker, camera, location permission controls and device storage. If you use Share Photo, iOS sends the photo to the destination you explicitly choose, subject to that destination's practices. The app does not publish your collection. The backend does not receive the key needed to decrypt your collection.
Data retention
Local records remain until you delete them, clear local data or remove the app's data. Device backup and operating-system storage behavior are controlled by iOS and your device settings. The device-only Keychain root is not synchronized by this app and may persist across an app reinstall on the same device; no recovery after loss is promised. The backend retains the latest encrypted snapshot until you delete it or the deployment owner removes it. A new upload replaces the active snapshot. Request rate counters remain in memory and expired entries are removed on subsequent requests or process restart. The application does not create a separate server backup archive. Railway may retain infrastructure logs or storage backups under its own operational policies; this app does not specify or control a retention period for those copies.
Deleting your information
Delete individual records from their detail screens or use Clear All Local Data in Settings to remove the local collection. Deleting a friend, place or meeting removes its links while keeping photographs in Gallery; deleting a photograph removes it from every linked section. Clear All Local Data and Delete Server Backup are separate confirmed actions. Use Delete Server Backup while the installation key is available to remove the active server snapshot. Turning manual backup off does not delete an existing copy. Server deletion unlinks the active file and does not guarantee immediate physical media erasure or removal from infrastructure backups. If you lose the installation key, the app cannot retrieve, decrypt or identify that snapshot for you through an account recovery flow. Contact swithin.inwood2@icloud.com with privacy questions without sending private collection content or keys.
Permissions and your choices
Camera access is requested only when you take a photo. Optional location access is requested only when you choose Use Current Location. You can deny or withdraw these permissions in iOS Settings and continue using manual addresses and coordinates. The system photo picker gives the app only the images you select without requiring broad photo-library access. Withdrawing permission does not delete photos or coordinates already saved; delete those items or clear the collection separately. The app does not request contacts access or background location.
Your privacy rights
You can inspect, edit and delete the collection through the app and control whether a backup is uploaded. Depending on applicable law, you may have rights concerning access, correction, deletion, restriction or objection to processing and the right to contact a relevant privacy authority. Send privacy inquiries to swithin.inwood2@icloud.com. This email is a public privacy contact, not an account or an in-app support service. Because there are no accounts and the server stores encrypted content under an installation hash, the operator cannot read your collection or recover a lost encryption key. Do not email the installation secret or encryption key.
Security
Local saves use atomic file replacement and iOS file protection. A device-only Keychain item protects the random installation root. HKDF-SHA256 derives independent authorization and encryption keys; the app encrypts snapshots with authenticated AES-GCM before upload. HTTPS protects transport. Each installation's authorization token controls only its own encrypted snapshot, and the server stores a SHA-256 hash rather than the raw token as the file identifier. The server validates request sizes, restricts file permissions and limits requests. Application logs exclude tokens, bodies and request access details, but hosting infrastructure may process network logs. No security measure guarantees absolute protection. Keep your device and operating system secure.
Children’s privacy
This app is designed for adults organizing their personal social memories and is not directed to children under 13. It does not ask for age or knowingly create child profiles. Only add information and photos you are entitled to keep, and respect the privacy of the people pictured. If you believe a child's data has been provided inappropriately, contact swithin.inwood2@icloud.com; local information remains under the device user's control and encrypted server content cannot be read by the operator.
Changes to this policy
This policy may be updated when the app's processing or hosting practices change. The effective date on this page identifies the current version. Review the Privacy Policy link in Settings for the latest public policy. Material changes will be described in the updated policy and, where appropriate, in the app or its release information.