Privacy Policy

Information we process

Bless National Progress stores game progress, matched pairs, earned stamps, learned countries, preferences and the country catalog cache on your device. The app does not ask you to create an account, supply your name or provide an email address. A randomly generated installation secret is kept in the iOS Keychain and sent over HTTPS to authorize requests for daily challenges, catalog information and deletion. The application server stores only a cryptographic hash of that secret and its creation time, not the original secret or your game progress.

Requests also reach Railway, our hosting provider, which processes connection information such as IP addresses, request timing, requested paths and operational logs to deliver and protect the service. Opening this policy website also creates an ordinary hosting request. The application has no advertising or analytics SDKs, tracking cookies, location collection, contacts access or photo-library access.

How we use information

Local information lets you continue a board, remember learned flags, keep your atlas and stamps, and apply your chosen settings. The installation secret authenticates this device's backend requests without an account. The backend provides the current daily challenge and catalog version and lets you delete its installation record. Short-lived in-memory counters limit request rates; they are not game history. Optional daily reminders are scheduled locally on your device.

Service providers and sharing

Railway hosts the API and this privacy page and processes infrastructure requests and operational logs for that purpose. We do not send your local game progress or learned-country collection to Railway. Your installation secret is transmitted to the application server for verification but is not intentionally written to application logs. We do not sell information or share it with advertisers, and this app does not integrate advertising, analytics, social sign-in or external messaging providers. Apple may process device backups and notification permission choices under your device settings and Apple's policies.

Data retention

Local progress, settings and catalog information remain on the device until you reset or remove the relevant app data. The server retains the hashed installation credential and creation time until an authorized deletion request removes that record. Request-rate counters cover one-minute windows and are held only in process memory until removed or the service restarts. The service does not intentionally log authorization headers, secrets or game data. Railway infrastructure log and backup retention depends on the hosting configuration and provider practices; we do not promise a fixed retention period or immediate erasure of provider backups. Device or hosting backups, if present, may retain older copies until their normal replacement or deletion.

Deleting your information

You can request deletion of the server installation record from Settings in the app. Deletion requires a working network connection and the current installation secret. Once deletion succeeds, that credential can no longer access the API. A later use of an online feature may create a new independent installation credential. Local game data is separate from the server record; use the app's local reset control to remove progress. Removing the app removes its local container, but iOS Keychain items and device backups can have a different lifecycle. We cannot identify or recover an old installation from a name or email because no such account exists. For privacy questions or requests, contact Ellingworth223@icloud.com; do not include your installation secret.

Permissions and your choices

Notifications are optional. The app requests notification permission only when you choose reminders in Settings, and reminders are scheduled on the device without uploading game progress or a push token to our server. You can turn reminders off in the app or withdraw notification permission in iOS Settings. The offline campaign and locally stored atlas remain available without notification permission or an internet connection. You can choose Turkish or English and adjust available display and motion preferences without an account.

Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion or restriction of personal information, to object to certain processing, or to complain to your local privacy authority. Contact Ellingworth223@icloud.com with a privacy question or request. We will explain what information is available and how to use the device-based deletion controls. Because we do not have account names or emails associated with installation records, we may be unable to locate a record when its device credential has been lost. Do not send credentials or unnecessary personal information in a request.

Security

The public service uses HTTPS. The app keeps its installation secret in the iOS Keychain, and the server compares a cryptographic hash rather than retaining the original credential. Credentials are independently generated for each installation, and authenticated deletion applies only to that installation's record. The server enforces request, payload and time limits and stores installation records on a persistent Railway volume. No system or backup can be guaranteed completely secure; protecting access to your device also protects your locally stored progress.

Children’s privacy

This educational geography game is intended for curious players aged 10 and above, including younger players with appropriate parent or guardian involvement. It does not request a child's name, email, precise location or account profile, and it contains no advertising or user messaging. The minimal installation credential and hosting request information described above are still processed when online features are used. A parent or guardian can use the app's deletion and notification controls or contact Ellingworth223@icloud.com about privacy concerns.

Changes to this policy

We may update this policy when the app's actual data practices, features or hosting arrangements change. The effective date at the top identifies the current policy. The latest version is available through the app's Privacy Policy link and at the public /privacy page on the service. Material changes will be described through an updated policy and, where appropriate, an app update or other notice available within the app.