Privacy Policy
UVU: Unique Voices Unite
This policy explains how this application handles information and how to contact us about privacy.
Information we process
UVU: Unique Voices Unite is a sound detective game. It stores case progress, discovered clue identifiers, completion dates, sound or description mode, the active case, language, volume, haptic and reminder preferences on your device. The five included cases, artwork and nonverbal sounds are bundled locally. Downloaded case metadata and sounds may be cached on your device. When connected, the app obtains a random installation identifier and secret, saves the credential in the device Keychain, and sends that installation’s case progress, completion dates, mode, introduction completion flag and update time to the game server. The server stores the installation identifier, a hash of its secret and creation time, and the synchronized progress. It does not request your name, email address, contacts, location, microphone recordings or an account. Requests to the API and this website necessarily expose connection information such as IP address, request time and technical HTTP metadata to the hosting infrastructure. The app does not contain advertising or analytics SDKs.
How we use information
Local storage lets you play offline, resume investigations, replay discovered sounds and keep your preferences. Server processing synchronizes this installation’s progress, authorizes private access and supports deletion. Public catalog and audio endpoints deliver game content and updates. Connection and limited infrastructure or error logs support service operation, security, troubleshooting and abuse prevention. The server applies temporary in-memory request limits by connection address. Optional local notifications remind you about an unfinished case; they are scheduled on your device and are not an email or remote messaging service.
Service providers and sharing
The application backend and public privacy website are hosted on Railway. Railway and its infrastructure providers process requests and store the service’s persistent data as hosting providers. Apple provides the operating system, Keychain and optional local notification facilities; this app does not send game content to an external analytics, advertising, email or social sign-in provider. No personal progress is publicly listed or shared with other installations. Authorized service operators can access infrastructure and the database to run and maintain the service. Information may also be disclosed where legally required. We do not sell game data. Device backups, if enabled by you through iOS, are controlled by your Apple settings and may include ordinary app files; the installation credential is marked device-only and is not a cross-device recovery mechanism.
Data retention
Local progress and preferences remain until you use Delete my data or remove the app’s local storage. Cached content may remain while the app is installed; deletion of game progress does not require erasing publicly available bundled game assets. A device Keychain credential can persist separately from ordinary app files. Server installation records and synchronized progress remain until an authorized deletion request is processed; the service does not currently implement an automatic expiration period. The application does not prescribe a fixed hosting-log retention period. Railway’s infrastructure logging and any operator-managed backups follow their actual hosting configuration; no specific log or backup retention duration is promised here. The app does not create a separate backup service.
Deleting your information
In Settings, Delete my data clears local progress and requests deletion of this installation and its progress from the active server database. If you are offline, the app records a pending deletion and retries when a connection is available; server deletion is complete only after the request succeeds. The installation credential is removed from Keychain after successful server deletion. Data in infrastructure logs or any existing backups may remain until those records expire or are overwritten under the hosting or backup configuration and are not necessarily removed immediately by the in-app action. Removing the app alone does not send a server deletion request. If the installation secret is lost, there is no login-based recovery or cross-device transfer, and we may be unable to identify or authorize access to that installation’s data.
Permissions and your choices
Notifications are optional and requested only when you enable reminders in Settings. You can turn reminders off in the app, or withdraw notification permission in iOS Settings; turning reminders off removes pending game reminders. The game continues without this permission. The app does not request location, microphone, camera, photo-library or contacts permission. Audio playback uses bundled or cached nonverbal sounds, not microphone access. You can use written sound descriptions and change volume and haptics without granting additional permissions.
Your privacy rights
You can view your progress and change preferences in the app, disable reminders, and request deletion through Settings. Depending on your location, applicable law may provide rights to access, correct, delete, restrict or object to processing, or receive a copy of your data. Contact raffielfenwicke@icloud.com for privacy questions or requests. This address is a public privacy contact, not an app account or automated email delivery feature. Please do not send your installation secret. We may need enough information to verify a request and may be unable to associate a person with an installation because no account or personal profile is collected.
Security
The deployed app uses HTTPS for server communication. Each installation uses its own cryptographically random secret; the iOS app stores it in Keychain with device-only accessibility, and the server stores a SHA-256 hash rather than the raw secret. Private progress and deletion endpoints verify that credential for the requested installation. Local progress is written atomically with iOS file protection. The backend validates and limits requests and uses a persistent SQLite database on the hosting service’s volume. These measures reduce risk but cannot guarantee absolute security. Anyone who obtains the installation secret could access or delete that installation’s server progress.
Children’s privacy
UVU is intended for an audience aged 16 and older and is not directed to young children. It has no accounts, advertising or social features and does not ask for a date of birth. If you believe a child has provided personal information in connection with this service, contact raffielfenwicke@icloud.com so the concern can be reviewed with appropriate verification.
Changes to this policy
This policy describes the current app and backend practices. It may be updated when game functionality, hosting or data handling changes. The effective date at the top identifies the current version. The latest public policy is available through the Privacy Policy link in the app’s Settings and at this website’s /privacy path. Material changes will be described in an updated policy and, where required, communicated through the app.