Privacy Policy
Feet Flinder Relax
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Feet Flinder Relax is an adult personal observation diary. It stores check-ins, dates, activity types, subjective fatigue and comfort ratings, duration, footwear details, surfaces, breaks, standing or playing time, typed places, notes, body-zone sensations, follow-ups and rest entries on your iPhone. Photos you select, your optional name, profile photo and preferences also stay on your iPhone. Private background sync is optional and off by default. If you enable it, diary text, ratings and footwear records are sent to the application service; photos, profile name and profile photo are excluded. The app generates a random installation secret in the iPhone Keychain; the server stores a one-way hash to separate your records. There is no account, registration, email sign-in, social profile, automatic body measurement or geographic location collection. Hosting receives technical request information, including IP addresses, request time, endpoint and response status, when you use sync or visit the public website. On-device system diagnostics may record technical error domains and numeric codes, without diary content or installation secrets. Public API and website requests pass through Cloudflare, which terminates public HTTPS and proxies requests to the Railway service.
How we use information
Local records let you create, edit, reopen, compare and export your diary and view summaries of information you entered. Optional synchronization sends queued changes when the app is running and connectivity returns, and stores a private server copy for the same installation. The installation secret authorizes access to that copy. Photos illustrate your own records locally. Optional local notifications remind you to make a check-in or follow-up; no remote notification service sends diary content. Technical hosting information is used to operate, secure and troubleshoot the service. The app does not provide diagnoses, treatments, causal medical conclusions, advertising, analytics or marketing messages.
Service providers and sharing
Cloudflare provides the public HTTPS proxy for the API and website and processes requests, including network metadata and synchronized payloads in transit, before forwarding them to Railway over HTTPS. The application backend and public privacy page run on Railway infrastructure, which processes stored synchronized diary data and technical hosting requests as the infrastructure provider. The service uses SQLite on a persistent Railway volume. The application server does not log diary bodies, installation secrets or request paths; Railway, Cloudflare and their infrastructure may process technical network and operational logs. We do not sell diary information or send it to advertising, analytics, messaging or medical services. The app includes no third-party tracking SDKs. If you export a CSV and choose a destination in the iOS share sheet, the recipient or service you select receives that file under its own practices. Opening this privacy page also sends a normal web request to our hosting service.
Data retention
Diary records and selected photos remain in app storage until you delete them or remove the app, subject to any copies in backups you control. Replacing or cancelling a selected photo may leave an unused local image until all data is deleted. Synchronized records remain on the server until deletion is received and processed. Individual deleted records leave identity-and-timestamp tombstones to prevent stale sync from restoring their content. Delete All Data removes the installation's server rows, including tombstones. The installation credential remains in Keychain so a pending server deletion can be authorized; access is not recoverable through an account. There is no application-managed recurring backup or fixed expiry for live diary records. Device backups, exported files and any Railway or Cloudflare infrastructure backups or logs have separate lifecycles; we do not promise a retention period or immediate erasure from infrastructure copies that we have not verified. Local system diagnostic retention is controlled by iOS rather than an app-defined schedule.
Deleting your information
Use Delete All Data in Settings to erase the local diary, photos and profile fields and cancel scheduled reminders. It records a durable server-deletion request and retries it when connected, even when optional sync is off. Until the app confirms server deletion, the server copy may remain. Keep the app installed and open it with connectivity to complete that request. Deleting an individual check-in removes its local follow-ups and sends deletion markers during sync. Turning sync off alone does not erase an existing server copy. Removing the app before a pending deletion completes may leave server data that cannot be accessed without its installation secret. We cannot restore data after that secret is lost. Delete separately any files you exported or device backups you control. Active server rows are removed after a successful delete request; infrastructure backups and logs, if retained by hosting, may age out under their own lifecycle rather than being rewritten immediately.
Permissions and your choices
The system photo picker lets you select specific pictures without granting unrestricted photo-library access. The app does not request camera, geographic location, contacts, microphone or Health access. Notification permission is requested only when you enable a reminder. You can disable reminders in the app, withdraw notification permission in iPhone Settings and remove selected photos from records or delete all data. Withdrawing a permission stops the related capability but does not itself delete content you already selected. Private sync is an in-app choice, not a device permission; turn it off in Settings to stop future uploads.
Your privacy rights
You can review and edit entries, export all diary record types as CSV, delete individual records and request removal of all installation data from Settings without creating an account. Depending on applicable law, you may also have rights to access, correct, erase, restrict or object to processing and to complain to your local data-protection authority. For privacy questions contact eren.baker8943@gmail.com. This address is a public privacy contact, not an account or an app email-delivery feature. Do not send sensitive diary content or your installation secret by email. Since there is no account-based identity or recovery system, we may be unable to locate a server namespace after its secret is lost.
Security
The app uses iOS app storage and file protection for diary files and photos, keeps the installation credential in Keychain with device-only accessibility, and communicates with the deployed backend over HTTPS through the Cloudflare proxy. Cloudflare terminates the public TLS connection and forwards requests to the Railway origin over HTTPS; this is not end-to-end encryption that hides diary payloads from these infrastructure providers. The backend authorizes every private request using the hash of the installation-specific bearer secret, scopes database operations to that hash, validates payloads and uses parameterized SQL. There is no shared client password or public diary endpoint. Server diary fields are not end-to-end encrypted or encrypted separately by the application; infrastructure and hosting-account access controls protect the server environment. Anyone who obtains the secret can access its namespace. No storage or transmission system can be guaranteed completely secure.
Children’s privacy
Feet Flinder Relax is designed for adults who want to record their own observations after daily activities. It is not directed to children and does not include child profiles or social features. We do not knowingly seek personal information from children. If you believe a child has submitted information, contact eren.baker8943@gmail.com; use the in-app deletion controls where the installation is available.
Changes to this policy
This policy describes the application and service practices as of the effective date above. We will update this public page and effective date if processing changes. Review it from Settings or the public website. Material new optional processing will be described where you can make the relevant choice. The policy does not promise medical outcomes, account recovery or availability of a particular device backup.