Privacy Policy
Paper Keepsake Lab
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Paper Keepsake Lab stores the item names, material types, storage places, dates, photographs, care checks, damage notes and pin positions, storage comparisons, favorite guides, local display name and language choice that you enter on your device. The app creates a random installation secret in the iOS Keychain. If you choose encrypted backup, the service receives an installation-secret bearer credential, encrypted archive data, encrypted photographs, opaque record identifiers, and request metadata. The service stores a hash of the secret, encrypted backup and media bytes, and server timestamps. Hosting infrastructure necessarily receives connection and request metadata such as IP address and route; application errors are logged with a request ID and error text, without request bodies or bearer secrets. There is no account, email delivery, analytics SDK, advertising SDK, or third-party sign-in.
How we use information
Local records help you catalog paper keepsakes, track their condition, compare inspections and storage options, and see care reminders. The bundled guide is available offline. Optional server processing stores encrypted backup versions and media for this installation, retrieves them at your request, and enforces access isolation. Request metadata and service logs support delivery, security and fault diagnosis.
Service providers and sharing
Local records stay on your device unless you choose a server backup or use the iOS Share action for a guide. Optional encrypted backups and media are processed by our Railway-hosted service and its PostgreSQL infrastructure. Railway and its infrastructure providers may process network metadata, operational logs and service backups under their own practices. We do not send your archive to advertisers, analytics services or an email provider. The guide Share action sends only the guide text to the destination you choose through iOS.
Data retention
Your local archive and photographs remain until you delete an item, delete all local data, or remove the app and its local data. The service retains at most the five newest encrypted backup versions for an installation; it does not apply a time-based expiry. Encrypted media remains until individually deleted or until you delete the installation's server data. Server deletion removes the installation's current database rows for backups and media. Railway infrastructure logs and backups may persist according to Railway's own retention practices; we cannot promise immediate removal from those systems or state an unverified retention period. The Keychain secret may persist according to iOS behavior after app removal; it is not a recovery account.
Deleting your information
You can delete an item and its linked local checks, pins and photographs in the app. Settings lets you delete all local archive data and separately delete this installation's server backup and media. These are separate actions: deleting local data does not automatically delete server data, and deleting server data does not erase local data. Without the installation secret, the service cannot identify or recover the installation's data for you. For privacy questions or assistance with a request, contact wystan.spindler@icloud.com.
Permissions and your choices
The camera permission is used only when you choose to take an item photograph. The photo library picker is used only when you choose an existing picture. Notification permission is requested only when you enable local care reminders. You can deny or later withdraw camera and notification access in iOS Settings; existing local records remain available. You can stop selecting library images at any time. Denying these permissions does not prevent reading the archive or guide.
Your privacy rights
You can view, edit and delete local records in the app, and you can delete this installation's server data from Settings while you still have its secret. You may contact wystan.spindler@icloud.com with privacy questions or applicable data requests. We cannot link an anonymous installation to a person or restore access after its secret is lost. Rights available under local law may vary.
Security
The app keeps the installation secret in the iOS Keychain and encrypts optional backup content and media on the device with AES-GCM before upload. The service authorizes private routes using a hash of that secret and scopes records to it. Transport uses HTTPS on the deployed service. The server stores opaque encrypted payloads and does not hold the decryption key. No security system can guarantee absolute protection; device and hosting security also matter.
Children’s privacy
Paper Keepsake Lab is intended for adults caring for family paper keepsakes and is not directed to children. We do not knowingly solicit information from children. A user controls what information and photographs they add.
Changes to this policy
We may update this policy when the app, service or processing changes. The effective date above will be updated, and the current policy will remain available at this page. Material changes will be reflected in the app or this page as appropriate. Privacy questions can be sent to wystan.spindler@icloud.com.