Privacy Policy
Nature Garden Path
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Nature Garden Path stores level progress, petals, unlocked flowers, saved routes, daily completion dates, optional gardener name, sound and motion settings, and reminder preferences locally on your iPhone. Daily puzzle and fallback caches are also local. The optional name is not sent to the server. When you complete a daily puzzle, the app automatically obtains a random installation secret, kept in the iOS Keychain on that device. The backend stores only its cryptographic hash, the installation creation time, the last solved UTC date and the streak count. Requests for daily puzzles include the requested date; streak requests include the completion date and installation authorization. Our Railway hosting infrastructure necessarily receives network information such as IP address, request time and technical request metadata when you use the daily service or visit this website. There are no accounts, advertising identifiers, analytics SDKs, location collection or cookies required by this service.
How we use information
Local data lets you continue a route, keep garden progress, collect flowers and use your chosen settings offline. The backend supplies daily puzzles and fallback content and maintains an installation-specific daily streak. The installation secret authorizes access to only that installation record. Technical infrastructure data supports delivery, reliability and security of the service. Local notifications are used only for the daily reminder you explicitly enable. We do not use your data for advertising or sell it. Weekly fallback content can refresh in the background when iOS permits, without sending personal game progress.
Service providers and sharing
The backend and this public policy are hosted on Railway, which processes service traffic and infrastructure logs as the hosting provider. We do not integrate advertising, analytics, email delivery, social login or other external application services. Apple provides the device operating system, Keychain and local notification facilities. Local app data may be included in device backups according to your Apple settings; the installation secret uses a device-only Keychain accessibility class. Information may also be disclosed if required by applicable law. We do not assert a fixed retention duration for Railway infrastructure logs because that duration is not controlled or established by this application.
Data retention
Local progress and preferences remain until you reset them, remove the app or remove the relevant device backup, subject to iOS storage and backup behavior. Daily caches are replaced as new content is downloaded. The server installation record remains until you request its deletion; there is no automatic expiry configured. Application request logs contain method and status, not request bodies or installation secrets. Railway may retain infrastructure logs according to its own operations. No application-managed database backup schedule is configured. Database journal pages and any infrastructure snapshots or device backups can outlast removal from active storage; we do not promise immediate erasure from those residual copies or an unverified backup retention period.
Deleting your information
In Settings, Delete installation data sends an authorized request that removes your active server installation record and then removes its Keychain secret. It requires an internet connection. If it fails, the app keeps the secret so you can retry and reports the failure. The local daily completion history is cleared after successful deletion, while ordinary level progress is kept. Reset local garden separately erases local game progress and preferences and cancels pending reminders; it does not delete the server record. Delete server data first if you want both removed. Removing the app alone is not a server deletion request, and iOS may retain Keychain items. If you lose the installation secret, there is no sign-in or cross-device recovery and we may be unable to locate or authorize deletion of that anonymous record. Contact godwin.ransome@icloud.com for privacy questions without sending your secret.
Permissions and your choices
Notification permission is requested only when you turn on the optional daily reminder in Settings. The reminder is scheduled locally and no push-notification token is sent to the backend. You can turn the reminder off in the app or withdraw notification permission in iPhone Settings at any time. The app does not request access to location, contacts, camera, microphone, photos or tracking. Network access is used for daily content and installation streak operations; ordinary garden levels remain playable offline.
Your privacy rights
Depending on your jurisdiction, you may have rights to access, correct or delete information, restrict or object to processing, request portability, or complain to a competent privacy authority. The in-app deletion control is the most direct way to remove an authorized anonymous installation record. You can change your optional local name and settings on the device. Send privacy enquiries to godwin.ransome@icloud.com. We may need sufficient information to verify authority over a request, but you should never email an installation secret. Because we do not keep an account or an email-to-installation directory, we cannot promise to identify a record after the device secret is lost.
Security
The deployed app uses HTTPS for backend communication. Installation secrets are random, device-specific and stored in Keychain using a device-only accessibility class. The server stores a SHA-256 hash instead of the plaintext secret and checks authorization for reading, updating and deleting private installation records. Database changes use transactions. Application logs omit authorization headers, request bodies and secrets. No shared application credential is embedded in the client. These measures reduce risk but no network, device or storage system can be guaranteed completely secure.
Children’s privacy
Nature Garden Path is designed for puzzle players aged 14 and older and is not specifically directed to younger children. It does not ask players for age, email address or contact details. If you believe a child has provided personal information through a privacy enquiry, contact godwin.ransome@icloud.com so we can address the request. There are no ads, purchases or social features in the app.
Changes to this policy
We may update this policy when the app's data practices or service change. The current policy will remain available at this page and from the app's Settings, with a revised effective date. Review the policy when using an updated version. Material changes will be described in the published policy; we do not operate an account email notification system.