Privacy Policy
Mym:Détente en soirée
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Mym:Détente en soirée is a personal facial-care ritual app. It does not require an account, email address, password or social sign-in. The app stores your optional local name, selected facial zones, program and duration, language, reminder preferences, current ritual progress, completed exercise identifiers and dates, skin, mood and tension ratings, diary notes, and diary photos on your device. To synchronize records, the server receives your installation identifier, profile preferences, completed session records, ratings, diary dates and notes, and a flag indicating whether a diary entry has a local photo. Photo images, photo-library identifiers and local photo file paths are not uploaded. An automatically created random installation secret is stored in the device Keychain; the server stores a hash of that secret. When you use the API or visit the public website, Railway infrastructure receives connection information such as the requesting IP address, request time, requested route and technical response information. The application has no analytics, advertising, tracking, purchase or third-party social SDK.
How we use information
Local information supports your chosen rituals, exercise timer and continuation, diary, calendar, personal trends and local reminders. Server records support synchronization, reliable retries and maintaining saved server metadata for this installation. The installation identifier and secret authorize access only to this installation's private records. Technical connection information is used by the hosting infrastructure to deliver requests and operate the service. The app does not use your records for advertising, send marketing messages, or upload photos for analysis. Facial-care content is general wellness guidance and is not a medical diagnosis or treatment service.
Service providers and sharing
The backend and public privacy website are hosted by Railway. Railway processes server storage and network traffic as the infrastructure provider. The service uses a private SQLite database on a Railway persistent volume and does not send diary, profile or session data to an analytics, advertising, messaging or photo-processing provider. App notifications are scheduled locally through Apple's operating system, rather than through a remote push service. Apple provides the camera, photo-selection, notification and Keychain facilities on your device. Depending on your device and backup settings, Apple may include local app data in device backups; those backups are controlled by your Apple settings and terms. We do not sell your personal records or make them public. Disclosure may be required when a valid legal obligation applies.
Data retention
Local records and photos remain on the device until you delete them or remove the app, subject to device backups and operating-system behavior. Keychain credentials may survive app removal, depending on the operating system. Server records remain until you delete an individual diary entry or request deletion of all installation data; there is no automatic inactivity-expiry period. The application does not create a separate server backup archive. Railway may retain infrastructure logs or provider-managed storage copies according to its service controls; this policy does not claim a fixed retention period for those copies or logs. Deletion from the active database cannot guarantee immediate removal from every provider or device backup.
Deleting your information
You can remove individual diary entries and their local photos in the app. Settings provides a confirmed action to delete all local and server data for your installation. Server deletion removes the installation, profile, sessions and diary metadata and invalidates its secret. Deletion requires a network connection to reach the server; when it is pending offline, keep the app and its installation credentials until synchronization finishes. Deleting the app alone does not send a server-deletion request. Without the installation secret, there is no account-based recovery or way to prove access through an email login. Contact Percy1Elmsworth@icloud.com with privacy questions or deletion requests; do not email your installation secret or sensitive photos. Removal from Apple or other device backups is managed through the relevant backup settings.
Permissions and your choices
Camera access is requested only when you choose to take a diary photo. You can choose an existing image with the system photo picker instead; the app receives only the image you select and does not upload your photo library. Notification permission is requested only when you enable local reminders. The app does not require location, contacts, microphone, health-record or tracking permissions. You can deny or withdraw camera and notification access in iOS Settings and continue using rituals and text notes. You can stop sharing additional images by closing the picker, and delete previously saved photos within the app. Revoking a permission does not automatically delete records or photos already saved.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing of your personal information and to complain to your local data-protection authority. The app lets you view your records, update preferences and notes, and request deletion. For additional requests or questions, contact Percy1Elmsworth@icloud.com. We may need enough non-secret information to understand the request and verify that the requested data belongs to you. There is no account directory or email-based recovery mechanism, so loss of an installation secret can limit our ability to identify or authorize access to a particular installation. Do not send your installation secret in a message.
Security
The app communicates with the deployed service over HTTPS. Each installation receives an independent randomly generated secret, held in the iOS Keychain. The backend stores its SHA-256 hash and checks installation authorization on every private-data route. Private records are partitioned by installation identifier, and requests and record sizes are validated and bounded. Photos remain in app-local storage. The server does not log authorization tokens or diary and profile request bodies; unexpected-error logs contain an opaque request identifier. Railway operates the hosting infrastructure and its technical logs. No system can guarantee absolute security. Anyone with access to an unlocked device or the installation secret may be able to access its records, so keep the device and secret private.
Children’s privacy
This app is designed for adults interested in personal facial-care routines and is not directed to children under 13. It does not collect a birth date or provide child profiles. If you believe a child has supplied personal information through the app, contact Percy1Elmsworth@icloud.com so the concern can be reviewed. The app is a general wellness tool and does not replace professional health advice.
Changes to this policy
This policy may be updated when the app's processing or hosting practices change. The effective date on this page identifies the current version. The public Privacy Policy link in the app opens this page without requiring a login or cookies. Material processing changes will be reflected here, and any additional notice or consent required by applicable law will be provided before that processing begins. Questions about this policy can be sent to Percy1Elmsworth@icloud.com.