Privacy Policy
Wyldde: New Connections
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Wyldde: New Connections is a private journal for professional encounters. The app stores the optional local profile name, event names, types, dates, text addresses, notes, people’s names, specialties, companies, contact details, tags, photographs, captions, relationships, project links, results, roles and contributions that you enter on your iPhone. Selected images are resized and re-encoded as JPEG; original library files are not changed. The journal is stored in the app’s local Application Support directory, excluded from the app’s iCloud device backup. A random installation master secret is generated in the device Keychain when backup is first used. If you enable optional backup, encrypted record snapshots and encrypted image files are uploaded. The server receives an installation-specific authorization token derived separately from the encryption key, a hashed storage namespace, photo identifiers, encrypted file sizes and request metadata. The server does not receive the journal decryption key. Railway infrastructure receives network requests, including IP addresses, request times and technical connection information, when backup, health or public web pages are accessed. The app has no accounts, advertising, analytics SDKs or tracking cookies. A journal that cannot be read is never uploaded. If you deliberately restore a backup after a local read failure, an unreadable original is preserved in the same protected local directory for possible recovery.
How we use information
Local information provides the event timeline, people catalogue, shared photo gallery, encounter links and manually attributed collaboration results. Optional backup lets this installation save and restore its journal using its existing Keychain secret. Authorization tokens isolate installations, and photo identifiers let the server retrieve and remove the correct encrypted files. Technical request information supports delivery, security and operation of the hosting service. The Privacy Policy page is public and requires no login or cookies. Contact details entered for acquaintances are journal content; Wyldde does not send them messages or emails.
Service providers and sharing
Encrypted backups are processed by Railway as the hosting and private object-storage infrastructure provider in the configured European storage region. Railway and its infrastructure operators process technical network and service information needed to operate hosting. The server uses the AWS S3 software library to communicate with Railway’s S3-compatible storage; it does not send journal files to a separate Amazon storage account. Apple supplies the system photo picker and device Keychain. Opening an external project or contact web link sends a normal request to the website you choose, which applies its own privacy practices. We do not sell journal information or add advertising, CRM, newsletter or analytics recipients. Information may also be disclosed if required by applicable legal process.
Data retention
Local records remain until you delete them or erase the local journal. The app stores one current encrypted server snapshot per installation. A successful backup replaces that snapshot and removes server photo objects no longer referenced by the new snapshot. Interrupted uploads can leave encrypted photo objects until a later successful backup or server deletion; each installation is limited to 256 stored photo objects. There is no automatic age-based expiration implemented. Turning backup off stops future uploads but does not delete an existing backup. The application does not configure an additional backup archive or object version history. Railway may maintain infrastructure logs, operational copies or disaster-recovery copies under its own practices; we do not specify an unverified retention period or promise immediate removal from such copies.
Deleting your information
You can delete individual local records or use Settings, Erase Local Journal, to remove all journal records and photos. Removing an event preserves people, photos and results while removing that event’s links. Local deletion does not directly remove an existing server backup unless you upload the changed journal or choose Delete Server Backup. Settings, Delete Server Backup, turns automatic backup off and requests deletion of every current snapshot and photo object in this installation’s server namespace. A failed request is shown as an error and may be retried. Deletion does not remove your original Photos library images. Infrastructure logs and provider recovery copies are governed by the provider’s practices rather than the app’s deletion endpoint. If the Keychain secret is lost, the app cannot restore or authenticate deletion of the encrypted backup. No account, email address or recovery code is available to reconstruct that secret. Erase Local Journal also removes any preserved unreadable journal files.
Permissions and your choices
Wyldde uses Apple’s system photo picker, which gives the app access only to images you select and does not require access to your entire photo library. You may cancel selection or stop selecting photos at any time. If any photo access is managed by your iOS version, it can be changed in device Settings. Removing future access does not automatically erase copies already saved in the journal; delete those within Wyldde if desired. The app does not request location, maps, contacts, camera, microphone or notification access. Backup can be disabled in the app without preventing offline journal use.
Your privacy rights
You can inspect, correct and delete your journal records within the app. Depending on where you live, you may have rights to access, correction, deletion, restriction or objection, portability, and a complaint to your local data protection authority. Privacy questions and rights requests may be addressed to lilia_atwood@icloud.com. This email is a public privacy contact, not an app account or recovery service. Because the service has no user accounts and cannot decrypt backup content, identifying or recovering a particular encrypted installation from a name or email address may not be possible. Do not send the installation secret or other people’s private journal information with a request.
Security
The device generates a random 32-byte master secret using the operating system’s secure random generator and stores it in a device-only Keychain entry. Separate HKDF-derived keys are used for authorization and AES-GCM encryption. Backup records and photos are encrypted before HTTPS upload. The server checks a high-entropy installation token on each private request and derives an isolated storage namespace from its hash. Private object-storage credentials remain on the server. Local writes are atomic and use iOS file protection after first unlock. The application does not log request bodies or authorization secrets. Device compromise, loss of the secret, infrastructure incidents and access to an unlocked phone remain risks; no method of storage or transmission is guaranteed completely secure.
Children’s privacy
Wyldde is designed for adults and professionals who attend technology events. It is not directed to children under 13, and we do not intentionally seek information from children under 13. Please avoid recording children’s personal information in the journal. If you believe a child’s information has been processed inappropriately, contact lilia_atwood@icloud.com so the circumstances can be considered, subject to the encrypted and installation-scoped nature of the service.
Changes to this policy
This policy may be updated when the app’s features, data processing or hosting practices change. The current policy is available from Settings, Privacy Policy, and at the public privacy URL. The effective date above identifies this version. Material processing changes will be described in the updated policy; optional backup remains controlled from the app.