Privacy Policy
Fun Wood Craft
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Fun Wood Craft stores your maker name, language and appearance choices, project titles, notes, dates, completion status and photos, material checklist, saved ideas, favorite techniques and last-viewed technique locally on your iPhone. The optional backup sends only an encrypted copy of your project journal, including project photos, to our Railway-hosted server. The server stores a random installation identifier, a hash of the installation secret, creation and backup-update timestamps and the encrypted archive. The installation secret is stored in device-only Keychain and is also transmitted over HTTPS for installation registration and private-request authorization. The backend processes the secret transiently and stores only its hash. The encryption key is derived locally from that same secret and is not separately stored by the server. The app also requests the public technique catalogue, and the privacy website receives web requests. Railway infrastructure receives connection information such as IP addresses and request metadata. The application temporarily uses IP addresses in memory to limit abusive requests. There are no user accounts, analytics SDKs, advertising identifiers, location collection or contact forms.
How we use information
Local data supports your private workshop journal, preparation checklist, inspiration board and preferences. Optional encrypted backups let this installation save and restore its journal while its original Keychain secret remains available. The public catalogue keeps bundled educational content current; a local cache supports offline use. Installation identifiers and secret hashes authorize access to the correct archive. Infrastructure information, bounded temporary request counters and minimal error logs support hosting, security and troubleshooting. The app does not use this information for advertising or profiling.
Service providers and sharing
The backend and public website are hosted by Railway, which processes network and infrastructure information to provide the service. Project archives are transmitted over HTTPS and stored in encrypted form. The service receives the installation secret for authorization and could derive the archive key from it; the implemented backend does not decrypt the archive. This encryption protects stored archives and is not a guarantee that the service itself cannot access their contents. The app uses Apple system photo selection, camera, Keychain and file-export interfaces. A JSON export is a readable file shared only with a destination you choose through the system interface; that destination may have its own data practices. We do not include advertising, analytics, social login or messaging providers, and do not sell your personal workshop data.
Data retention
Local personal records remain until you delete them or remove the app; iOS manages device backups and system storage according to your device settings. The installation secret is stored in a device-only Keychain item and may survive app removal, but is not transferable by this app to a new device. The server retains one latest encrypted journal per installation until authorized deletion; replacing a backup replaces the active archive. Turning backup off stops future uploads but does not delete an existing archive. No scheduled server snapshot backup has been configured by this application. Railway may retain infrastructure logs or underlying storage remnants under its own practices; this application does not establish or promise a fixed retention period for those records. Temporary rate-limit counters expire in memory after their request window and are pruned periodically. Minimal application error logs contain a random request identifier and error category, not journal contents or credentials.
Deleting your information
You can delete individual projects and personal ideas in the app, and remove checklist entries. With backup enabled, project changes are uploaded to replace the current encrypted archive. Delete all personal data in Settings clears projects, checklist, private ideas, maker name and activity locally while retaining your language and appearance choices and built-in content. It also requests deletion of the installation credential and archive on the server. If offline, a local pending-deletion flag retains the credential solely to retry deletion after connectivity returns; uploads remain blocked until deletion completes, then the app removes the credential from Keychain. SQLite deletion removes active records but does not promise immediate forensic erasure from database pages, filesystem or infrastructure copies. Copies you exported and device backups must be deleted separately. If you lose the installation secret, the app cannot recover or authorize access to that server backup.
Permissions and your choices
Camera access is requested only when you choose to photograph a craft. Photo selection uses Apple’s system picker and provides only photos you select; the app does not request full-library access. Selected photos are resized and re-encoded as JPEG for local storage, without intentionally retaining source metadata. No location, microphone, contacts or notification permission is requested. You can withdraw camera access in iPhone Settings and continue using the app or choose an existing photo. Declining or cancelling photo selection leaves your other data unchanged. Changing app language updates app text; Apple-controlled permission prompts follow the device’s preferred supported language.
Your privacy rights
You can inspect and edit local records, export the project journal as JSON, disable future uploads and request deletion within Settings. Depending on where you live, you may have rights to access, correct, delete or restrict processing, object to processing, or complain to your local data-protection authority. For privacy questions or rights requests, contact endel.appleton@icloud.com. This address is a public privacy contact, not an account or an in-app messaging feature. Because there is no account and the server stores encrypted archives, we may be unable to locate or decrypt an archive without its installation identifier and authorized device; never send your installation secret by email.
Security
Private endpoints require the unique randomly generated 256-bit installation secret, checked against its SHA-256 hash for the requested installation. The app derives an AES-GCM encryption key from that secret with an application-specific SHA-256 prefix and authenticates encrypted archives before restoring them. HTTPS protects deployed network requests, including the secret sent for authorization; Keychain protects the secret at rest on the device. Because the archive key is derived from the authorization secret that the service receives, this is storage encryption rather than end-to-end encryption against the service. Local writes are atomic and use iOS file protection. The server applies payload-size, request-rate and storage limits and SQLite transactions. No common client credential or server secret is embedded in the app. These safeguards reduce risk but cannot guarantee absolute security, especially on a compromised device or if you share exported files.
Children’s privacy
Fun Wood Craft is intended for adult and teenage hobbyists, not directed to young children. Woodworking and hot or sharp tools require appropriate protection, manufacturer instructions and adult supervision for young makers. The app has no accounts, public posting or social features. We do not knowingly seek personal information from young children. If you believe a child has supplied personal information that needs attention, contact endel.appleton@icloud.com.
Changes to this policy
We may update this policy when the application or hosting practices change. The current version and effective date appear on this public page. Material changes to the information processed or its purposes will be reflected here and, where appropriate, in the app before new optional processing is enabled. Please review this page periodically.