Privacy Policy
Bovlda - American Football Pro
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Bovlda stores your plays, player positions and routes, playbooks, coaching notes, learning results, local profile name, role, avatar choice and preferences on your device. Draft plays and unfinished practice are also stored locally. No account, email address or password is requested. If you choose Upload Backup, the app encrypts an archive of these records on your device and sends the ciphertext to our backend. The backend stores that ciphertext, a SHA-256 hash of a random installation secret, a version number and creation time. The secret is held in the iOS Keychain and sent over HTTPS for authorization. The encryption key is derived locally and is not uploaded. Visiting this site or using cloud backup also sends normal network request information, including IP address and request metadata, to Railway infrastructure. We do not use advertising or analytics SDKs, geographic maps, cookies or tracking pixels.
How we use information
Local data enables creating, editing, animating, studying and organizing football plays without a network connection. Profile information personalizes the local interface. Optional cloud processing stores and retrieves your encrypted backups, limits each installation to its own data and allows you to delete that data. Request metadata may be processed by hosting infrastructure to deliver and protect the service. Cloud backup is initiated only by your explicit actions in Data Management.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes encrypted backup data and infrastructure request information as the hosting provider. The application server does not log backup contents or installation secrets; error logs contain a random request identifier and a generic error category. Railway infrastructure may maintain operational logs under its own service practices. We have not established a fixed retention period for those logs. Data you export through the iOS share sheet is delivered only to the app or destination you select and becomes subject to that recipient’s practices. We do not sell your information or share it for advertising.
Data retention
Local records remain until you delete individual items, clear local data, restore a different archive or remove the app, subject to iOS device-backup behavior. Keychain storage is managed by iOS and can persist independently of app files. The server retains the latest three backup versions for an installation, removing older versions when a new backup is saved. There is no automatic time-based expiration of the remaining versions. We have not configured a separate application-level archival backup system or a fixed Railway infrastructure snapshot-retention period; any provider-level residual backups and logs follow the provider’s actual availability and retention practices. Exported files and copies in device backups remain until you remove them from those locations.
Deleting your information
Use Profile → Data Management → Delete Cloud Backups to remove all backup rows for this installation from the active database. Clear Local Data removes local plays, playbooks, profile, settings and learning history, but does not remove cloud backups or files you exported. Delete those separately. Delete cloud backups while you still have the installation secret; there is no account recovery or cross-device sign-in, and losing the secret can make the encrypted data inaccessible to you and prevent authenticated deletion through the app. Deletion from the active database does not guarantee immediate removal from provider-managed residual backups or infrastructure logs. Those copies, if present, follow Railway’s retention practices. You may contact dorinda.allbones@icloud.com about deletion or other privacy questions; do not send your installation secret.
Permissions and your choices
Bovlda does not request location, contacts, camera, microphone, photo-library access, notifications or other protected-device permissions. The system file picker and share sheet grant access only to files or destinations you choose. You can cancel these operations and stop using cloud backup at any time. Cloud backup is optional and is never necessary for the offline editor, playback, library or learning tools. Changes to iOS permissions or removal of exported files can be managed through iOS and the destination application.
Your privacy rights
Depending on your location, you may have rights to access, correct, export, erase, restrict or object to processing of your information, and to complain to your local privacy authority. You can edit local records, export a device backup and delete local or cloud data in the app. For questions or requests, contact dorinda.allbones@icloud.com. We may need information sufficient to understand and verify a request, but never ask you to email your installation secret. Because cloud records are installation-scoped and encrypted, we cannot identify or decrypt your archive from a name or email address alone.
Security
Network communication uses HTTPS. Archives are encrypted on the device using AES-GCM with a key derived using HKDF-SHA256 from a cryptographically random 32-byte installation secret. The secret uses device-only iOS Keychain storage. The server stores only its SHA-256 hash for authorization, validates requests and applies request-size, timeout and rate limits. PostgreSQL transactions isolate installation writes and pruning. Local archive writes use atomic replacement and iOS file protection. Device backup exports are not encrypted by Bovlda: keep those files private. No security measure guarantees absolute protection; anyone with the installation secret can authorize access to its backups. There is no recovery after the secret is lost.
Children’s privacy
Bovlda is designed for football coaches and players and is not specifically directed to children under 13. We do not knowingly solicit personal information from children. A local profile name is optional. If you believe a child has provided information requiring action, contact dorinda.allbones@icloud.com; the encrypted and installation-scoped design may limit our ability to locate a record without access to the originating installation.
Changes to this policy
We may update this policy when the application or its processing changes. The effective date shown on this page identifies the current version. Material changes will be described in the updated policy and, where appropriate, in the app. Review this page before using new optional network features. Contact dorinda.allbones@icloud.com with questions about this policy.