Privacy Policy
Blooming Vista Diorama
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Blooming Vista Diorama keeps your terrarium layout, planted items, biome conditions, unlocked items, activity progress, preferences, and cached challenge and leaderboard information on your device. When the app attempts to use its online features, it creates a random installation secret in the device Keychain and includes it in an HTTPS authorization header for server requests. The server stores a SHA-256 hash of that secret, an internal random installation identifier, a random anonymous leaderboard name, daily challenge completion dates, identifiers and rewards, an aggregate completion count, and related timestamps. The service also receives ordinary network request information such as IP address and request metadata; Railway infrastructure may process request and operational logs. We do not ask for an account, name, email address, or location.
How we use information
Local information runs the terrarium, restores your progress, and keeps preferences and the last available online information for offline use. The installation secret lets the server recognize and authorize this installation. Server records rotate daily challenges, prevent duplicate daily rewards, show your anonymous challenge count in the leaderboard, and delete this installation's server records on request. Operational request information supports delivery, security, and troubleshooting.
Service providers and sharing
Railway hosts this application's backend and persistent storage and may process network and infrastructure logs as a hosting provider. The public leaderboard shares only random anonymous names and completed challenge counts with other users. We do not send terrarium layouts, planted items, settings, contact details, or the raw installation secret to other users. The app has no advertising, analytics, or email delivery integration.
Data retention
Local game data remains until you use Delete installation data in Settings or remove the app and its data. The device Keychain may persist independently of app deletion under platform behavior. During an offline deletion request, the app retains its Keychain secret until it can authorize server deletion, then removes the secret. Server installation and challenge records remain until the app successfully sends the deletion request or until the service is discontinued. The app retains a cached challenge and leaderboard snapshot until replaced or locally deleted. We have not configured app-level server backups. Device backups may contain local app data under your iOS backup settings. Railway may process infrastructure logs and may have platform recovery copies under its own practices; we do not claim a fixed retention period or immediate erasure from those systems.
Deleting your information
Use Settings > Delete installation data to erase local terrarium and cached data immediately and request deletion of this installation's server records. When online, the app sends the authorized request and then removes its Keychain secret. If offline, local data is still erased, while the app keeps the secret and retries server deletion when connectivity returns; it removes the secret after a successful response. You can also contact rozhkovadaryna032@gmail.com about privacy or deletion. Without the installation secret, we cannot reliably identify or recover an anonymous installation record. Railway infrastructure logs or recovery copies, if retained, follow the host's own retention and recovery processes.
Permissions and your choices
The app asks for local notification permission only if you turn on daily challenge reminders. Notifications are scheduled on your device. You can disable reminders in the app or withdraw notification permission in iOS Settings. The core terrarium does not require notification permission, location access, contacts, camera, or a user account.
Your privacy rights
You may view your local progress and anonymous leaderboard entry in the app, use Delete installation data to erase local data and request server deletion, or contact rozhkovadaryna032@gmail.com with a privacy request. Requests concerning an anonymous server record require the installation secret to identify the record; losing the secret prevents us from linking an installation to you. Applicable privacy rights depend on your location and may include access, correction, deletion, or objection.
Security
Online requests use HTTPS. The random installation secret is stored in the device Keychain and sent only in an authorization header; the server stores its hash and checks it before returning or changing installation data. The backend limits request size, validates inputs, and uses a persistent Railway volume. No system can guarantee absolute security; contact rozhkovadaryna032@gmail.com if you believe your installation data is at risk.
Children’s privacy
Blooming Vista Diorama is intended for people aged 16 and older and is not directed to children under 16. We do not knowingly request children's names, contact information, or accounts. If you believe a child has provided information through the service, contact rozhkovadaryna032@gmail.com.
Changes to this policy
We may update this policy when the app, its data handling, or hosting changes. The updated policy will appear at this page with a new effective date. Material changes to data handling will be reflected in the app or on this page before they apply where required. For questions, contact rozhkovadaryna032@gmail.com.