Privacy Policy
Kit Turn Organizer
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Kit Turn Organizer stores the equipment names, notes, current holder names, participant labels, accessory checklists, preparation durations, replacement choices, scheduled turns, event kits, condition notes, damage flags, selected photographs and handover history that you enter. These records and reminder preferences are stored locally on your device. If you enable private backup and sync, the same records, including selected photographs, are sent to our backend and stored in PostgreSQL. The server automatically issues a random installation secret; the device stores it in Keychain and the server stores its cryptographic hash, revision number and creation/update timestamps. There are no user accounts, login credentials or email collection. Requests to the app API, public home page and this policy also expose network information such as IP address, request time, URL and technical connection information to Railway hosting infrastructure. The app does not collect geographic location, contacts, advertising identifiers or analytics events.
How we use information
We use the records you enter to organise shared equipment, calculate preparation and booking conflicts, find free windows, assemble event kits and document handovers. Local notification preferences schedule reminders on your device. Optional server storage provides a private copy for this installation and checks concurrent changes and overlapping turns. The installation secret authorises access to only that installation’s data. Network information is processed to deliver the service, limit abusive requests and diagnose availability. Sharing and JSON export occur only through the system action you choose; the app does not send messages or email on its own.
Service providers and sharing
Railway hosts the application backend and its PostgreSQL database and processes service requests and infrastructure logs. We do not include advertising, analytics, social sign-in or messaging SDKs and do not sell your records. Our application logs startup/availability messages and internal error request identifiers, not installation secrets, photograph contents or request bodies. Railway may handle network and operational logs as part of hosting; we do not control all infrastructure log fields. If you choose a sharing or export destination, that destination receives the content you select under its own terms. Device backups and system photo services, where enabled by you, are governed by your device provider.
Data retention
Local records remain until you delete an item or all app data, or remove the app’s local storage. When enabled, server records remain until you use Delete all my data; disabling sync does not delete an existing server copy. This service does not implement a scheduled record expiry or a separate application backup system. PostgreSQL is stored on persistent Railway infrastructure. Hosting logs and any provider or device backups may remain according to the relevant provider settings and policies; we do not promise a specific duration or immediate erasure of such copies. An installation secret can remain in Keychain after app removal, so uninstalling alone should not be used as a server deletion request.
Deleting your information
Deleting an item removes its local turns, reservations and condition history and removes it from kits and replacement lists; if sync is enabled these changes are submitted to the server. Settings contains Delete all my data, which first requests authenticated deletion of this installation’s database row and all stored records and photographs, then clears local records, pending reminders and the installation secret. An existing server copy requires a working connection for this operation. If the request fails, the local data and secret are kept so you can retry. Exported copies, photographs in your original photo library, device backups and provider backups are not deleted by this app. We cannot recover records or locate an installation solely from a name or email when its secret is lost.
Permissions and your choices
Camera access is optional and used only when you choose to take an equipment or condition photograph. You may select individual photographs through the system photo picker; the app does not scan your whole library. Notification permission is optional for local preparation and return reminders. You can decline permissions and still manage equipment and schedules. Withdraw camera or notification permission in iOS Settings; disable reminders in app Settings to cancel pending app reminders. Delete selected app photographs through item editing or data deletion. Withdrawing permission does not erase already saved photographs or server records. No location permission is requested.
Your privacy rights
You can inspect and edit your records in the app, export them as JSON and delete your installation’s data from Settings. For privacy questions or requests, contact FergusCavell404@icloud.com. This address is a public privacy contact and is not an account or app email delivery feature. Depending on where you live, applicable law may provide access, correction, erasure, restriction, objection or other rights, including a complaint to your local authority. We will consider requests in accordance with applicable law and may need enough information to verify that the records belong to your installation without asking you to post its secret publicly.
Security
The deployed API uses HTTPS. A cryptographically random per-installation secret is stored in device Keychain with device-only accessibility; the server stores a SHA-256 hash and checks authorisation for private routes. Database writes use transactions and revision checks, and input validation and request limits help protect integrity. Local app records use atomic file writes and iOS file protection. The server database is reached through Railway’s private service network. No universal secret is embedded in the app and private data is not available on public routes. These measures reduce risk but no storage or transmission system can be guaranteed completely secure. Do not use this planner to store highly sensitive information.
Children’s privacy
This equipment planner is intended for adults and small groups organising shared tools and supplies, rather than for children. We do not knowingly seek children’s personal information. Participant names and notes are supplied by the device user, who should avoid entering children’s personal information without appropriate authority. If you believe such data has been provided improperly, delete it in the app or contact the privacy address.
Changes to this policy
We may update this policy when the app’s processing or hosting practices change. The current policy is available publicly at /privacy and through the Privacy Policy link in Settings. The effective date identifies the current version. Material changes will be reflected in the policy and, where required by applicable law, communicated appropriately. Review the policy when enabling sync or after an app update.