Privacy Policy
Sporting Beat Replay
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Sporting Beat Replay stores project names, episode choices, editing configurations (camera cuts, trim times, playback speeds, graphic captions and positions, and sound choices), saved variants, modification dates and challenge progress on your device. Language, motion and sound preferences and the synchronization setting are stored locally. A random installation secret is stored in the device Keychain. When synchronization is enabled, project metadata and editing configurations and challenge progress are sent to our backend. No video files are uploaded. The backend stores a SHA-256 hash of the installation secret as the data ownership identifier. Railway receives network requests, including IP addresses and technical request information, when you use synchronization or visit the public website. The app has no accounts and does not ask for your name, email address or password. There are no advertising or analytics SDKs.
How we use information
Local information lets you edit and reopen sports replays offline, keep variants and record completed challenges. The optional backend synchronizes the data associated with this installation when a connection is available. The installation secret authorizes access to that installation’s records; it does not provide account recovery or transfer through sign-in. Technical request information is processed to deliver the service, limit abusive requests and diagnose availability problems. We do not use app data for advertising or profiling.
Service providers and sharing
The backend and this public policy are hosted on Railway. Railway and its infrastructure providers process requests and stored data to operate the service, including infrastructure logs that may contain IP addresses and request metadata. The application server does not log installation secrets or request payloads. We do not sell your information or share it with advertising or analytics services. If you contact the privacy address, your message is handled by the email providers involved in that correspondence. Disclosure may also be necessary to meet a binding legal obligation.
Data retention
Local projects and preferences remain on the device until you delete them or remove the app’s local storage. Keychain items can remain after uninstalling an app, depending on the operating system; deleting a project does not rotate the installation secret. Server records remain on the persistent Railway volume until deleted through the app. We do not apply an automatic expiry period. The app does not create separate server backups. Infrastructure logs, provider backups and residual storage are governed by Railway’s configuration and practices; no fixed retention period is asserted for them.
Deleting your information
Delete a project from Collection to remove its local record and queue deletion of its server copy. Settings provides Delete all my data to erase local projects and challenge progress and queue deletion of all records authorized by this installation secret. Server deletion completes when synchronization is enabled and the device can reach the service; a pending message is shown until then. Deletion removes active database records; residual database pages, infrastructure logs or provider backups may remain until storage is recycled or expires and are not selectively erased by this app. Keep the app and installation key until pending deletion completes. If the secret is lost, we cannot identify or restore its private server records through an account or email login.
Permissions and your choices
The app requests no camera, microphone, location, contacts, photo library or notification permissions. Sports scenes and audio are bundled with the app. Network access is used for optional synchronization and opening the public privacy page. You can turn synchronization off in Settings and continue editing offline; doing so stops subsequent sync attempts but does not delete existing server copies or cancel a request already in flight. You can change language, sound and motion settings at any time. To remove synchronized information, use the deletion controls and allow the queued request to complete.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing of personal information, or complain to a relevant authority. You can view, rename and delete your projects in the app. For privacy questions or rights requests, contact xanthe.st1well@icloud.com. Do not send your installation secret by email. We may need enough non-secret information to understand a request, and our ability to identify installation-scoped records is limited without the authorized app. The public email address is a privacy contact, not an account or an in-app message delivery service.
Security
The app uses HTTPS for deployed network communication. The installation secret is randomly generated on the device and protected in Keychain with a device-only accessibility class. The server hashes this secret and scopes queries and mutations to its hash; another installation cannot list, change or delete those records. Local project files use iOS file protection. The backend uses a persistent SQLite database, input validation, request size limits and rate limiting. Possession of the secret grants access to its records. No security measure can guarantee absolute protection, and loss of the secret prevents recovery.
Children’s privacy
Sporting Beat Replay is intended for teenagers aged 14 and above and young adults interested in sports and editing. It is not designed for children under 13. We do not knowingly seek personal information from children under 13. If you believe such information has been provided, contact xanthe.st1well@icloud.com so we can assess an appropriate response within the limits of installation-scoped identification.
Changes to this policy
We may update this policy when the app or its processing practices change. The current policy will be published at this public privacy address with a revised effective date. Review it periodically and before enabling synchronization after an update. Material changes will be explained in the app or its release information when appropriate.