Privacy Policy
Scorh Relationship Pulse
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Scorh Relationship Pulse stores connection names and types, daily relationship ratings, journal text and emotion tags, important dates, challenge completion, love-language profile, a local profile name, score weights and reminder settings. These are saved on your iPhone in an AES-GCM encrypted Core Data store. The app automatically creates a random installation secret in the iOS Keychain; an encryption key is derived from it. Your language preference is stored locally in UserDefaults. Encrypted backups are sent to our Railway-hosted API and PostgreSQL database. The server stores encrypted payloads, record and connection identifiers, update timestamps and a hash of your installation secret. The authorization secret is transmitted over HTTPS but is not stored in plaintext by the application server. Hosting infrastructure necessarily receives requests, IP addresses and ordinary connection metadata. The app has no accounts, advertising or analytics SDKs and does not collect device location, contacts, photos or microphone recordings. The public API and website are proxied through Cloudflare, which terminates public HTTPS before forwarding requests to our Railway service.
How we use information
We process these records to show your private relationship journal, compute scores and patterns on your device, preserve separate connections, retain your choices and provide an encrypted installation-scoped backup. Optional reminders are scheduled locally by iOS. The server uses installation authorization and record identifiers to isolate, retrieve, update and delete your own records. Technical request information supports service delivery, security and troubleshooting. No email delivery, support form or automated external analysis is provided.
Service providers and sharing
Encrypted content and technical request information are processed by Railway as our hosting provider and by the infrastructure it uses to operate the service. Apple provides iOS local storage, Keychain and local notification capabilities on your device. We do not add advertising, marketing, social sign-in or analytics recipients. Our server does not intentionally log journal payloads or installation secrets; infrastructure may produce request and security logs. We have not established a specific retention period for Railway infrastructure logs or backups. Information may also be disclosed when legally required. Cloudflare provides the public HTTPS proxy and security infrastructure. In this role it receives IP addresses, request metadata, HTTP headers including installation authorization, and the client-encrypted request payloads. The payload encryption does not hide HTTP headers from the proxy. We have not established a specific retention period for Cloudflare infrastructure logs.
Data retention
Local records remain until you delete them or remove the application; iOS may retain Keychain items after uninstalling. Active encrypted server records remain until an authorized deletion request succeeds. Removing the app alone does not request server deletion. We do not promise automatic expiry. Hosting logs and any infrastructure backup copies follow provider practices; their exact retention and backup deletion schedule have not been established, and deletion from the active database does not guarantee immediate removal from every backup. The app excludes its local database directory from ordinary device backups. Cloudflare may retain infrastructure and security logs according to its provider practices; we have not established their exact retention period.
Deleting your information
You can delete journal entries, calendar events, a connection or all app data from the app. Deleting a connection removes its associated records from the active server database and replaces the encrypted whole-app backup on the next successful synchronization. Deleting all data clears local content and queues an authorized DELETE /user-data request. If offline, the server deletion remains pending; reopen the app while connected and check the backup status. Any new records are synchronized only after queued deletion is acknowledged. Infrastructure logs and backup copies are subject to the provider limitations described above. Losing the installation secret makes the encrypted server content inaccessible and prevents the app from proving authorization to retrieve or delete that installation; no cross-device login recovery is offered.
Permissions and your choices
Notifications are optional and requested only when you enable a daily or event reminder. Reminder text can include a connection name and event title, so consider your iPhone lock-screen preview settings. You can disable daily reminders or individual event reminders in the app, or withdraw notification permission in iPhone Settings. Withdrawing permission does not delete existing journal records. No geographic map, location, camera, photo-library, contacts or microphone permission is requested.
Your privacy rights
You can view and correct your records in the app and delete your data using the available controls. Depending on your location, you may have rights to access, correction, deletion, restriction or objection and to complain to a competent privacy authority. Privacy questions may be sent to basil.cumberbatch@icloud.com. This address is a public privacy contact, not an in-app account or email delivery service. Please do not send your installation secret or sensitive journal content by email. Because our records are installation-scoped rather than associated with an email account, we may be unable to identify or decrypt a record from your name or email address.
Security
The app encrypts saved content and backup payloads using AES-256-GCM with a key derived from a random per-installation secret. The secret is held in a device-only Keychain item and is never displayed. The server checks authorization using a hash of the presented secret and scopes database operations to that installation. Network requests use HTTPS. The secret is a bearer credential presented to the service, so this design does not claim protection against a compromised device or service. No system can guarantee absolute security. Keep your device secure and do not disclose installation credentials. Public HTTPS terminates at Cloudflare and requests are forwarded to the Railway service over HTTPS; Cloudflare is therefore part of the trusted request-processing infrastructure.
Children’s privacy
The app is designed for adults reflecting on close relationships and is not directed to children. It is a personal reflection tool, not a medical, psychological or relationship diagnosis. If you believe a child has supplied personal information, contact basil.cumberbatch@icloud.com without including sensitive journal details so we can discuss the available steps and identification limits.
Changes to this policy
We may update this policy when the app, processing or hosting arrangements change. The effective date on this page identifies the published version. Material changes will be reflected in the policy available from the app Settings and this public page. Review it periodically for current information.