Privacy Policy
Feet Find Size
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Feet Find Size is a parent-operated journal. On your iPhone it stores the child names, optional birthdays, avatar choices and photos, cover choices and photos, separate left and right foot measurements, measurement dates, widths, methods and notes, shoe photos and details, fit observations and their sources, shopping needs, candidates and decisions, reminder dates, and your selected profile and sync preference. Records are stored in Core Data and photos in the app’s local files. A random installation secret is kept in the iPhone Keychain. Optional sync sends structured profile, measurement, shoe, fit, shopping and reminder records, a device identifier derived from the installation secret, update timestamps and an avatar photo hash to the backend. Photo files are not uploaded. The server stores only a hash of the installation secret and its derived routing token. When the app or a browser contacts the service, Cloudflare handles the public HTTPS connection and forwards requests to the Railway-hosted service. These providers receive request traffic and may process IP addresses, request timing, paths, headers and technical connection information to deliver and protect the service. The app has no accounts, advertising or analytics SDKs.
How we use information
Local records help parents track growth, assess the fit of individual pairs, compare possible purchases and share a dated size card. Local notification scheduling delivers only reminders explicitly chosen by the parent. Optional sync keeps a private server copy for this installation and retries saved changes when a connection returns. The installation secret authorizes access to that copy. Technical request and error information is used to operate and troubleshoot the service. Measurements and observations are a personal journal, not medical diagnosis or a shoe-size guarantee.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway, which processes stored sync records and infrastructure request information as a hosting provider. Cloudflare operates the public HTTPS reverse proxy for the API and policy website. It terminates public TLS and forwards requests to the pinned Railway HTTPS origin, so it processes request traffic, including the headers and any sync data transmitted through it, as a network provider. Application error logs contain a generated request identifier and a system error code, not the submitted records, secret or authorization header. Railway and Cloudflare infrastructure may retain their own operational logs. We do not add advertising, analytics, email delivery or other external integrations. Size cards leave the app only when you use the system share sheet or save an image; the selected recipient or service and Apple Photos then handle that copy under their own settings and policies. Device backups may include local app records and photos according to your Apple backup settings.
Data retention
Local records remain until you delete them, remove the app’s data or otherwise erase the device. Photos referenced only by deleted records are removed from app storage when those records are saved as deleted; photos selected into a cancelled draft may remain in app storage until the app is removed. Saved or shared size-card copies are independent. Server sync records have no automatic expiration and remain until you delete the server copy or authorized changes replace them. Turning sync off alone does not erase an existing server copy. We have not established a fixed retention period for Railway or Cloudflare operational logs or provider backup copies and do not promise immediate erasure from provider-managed backups. The installation secret is device-only Keychain data and may remain after uninstalling; it is not a cross-device recovery account.
Deleting your information
You can delete measurements, shoes, shopping entries, reminders and child profiles in the app. Deleting a child removes its associated local records and cancels its scheduled reminders. With sync enabled, deletions are sent as the updated collections when online; until then the existing server copy can remain. Family includes Delete server copy, which removes the installation and its live database records, turns sync off and keeps your local journal. Re-enabling sync uploads the local journal again. If sync is disabled, use Delete server copy separately to erase older server data. Deletion from the live database does not guarantee immediate removal from infrastructure backups or operational logs. Delete exported cards separately from Photos and any recipients. If the installation secret is lost, the app cannot promise restoration or authorization to a server copy. Contact merrickharcout1@icloud.com for privacy questions or deletion assistance; do not send sensitive child information unnecessarily.
Permissions and your choices
The system photo picker lets you choose specific images for profiles and shoes. Camera access is requested only for taking a photo. Add Photos access is requested only when saving a size card to Photos. Notification permission is requested only when scheduling a parent-set reminder. You can decline permissions and continue the journal without the related feature, use the share sheet instead of saving a card, or choose a built-in cover and avatar. Withdraw camera, photo or notification permission in iPhone Settings. Withdrawing permission does not delete existing records, exported images or an existing server copy; use the app’s deletion actions and Photos as appropriate. The app does not request location, contacts or microphone access.
Your privacy rights
You can inspect and correct your journal within the app, delete records, disable optional sync, delete the server copy and share a dated size-card image. Depending on the law that applies to you, you may have additional rights to access, correct, erase, restrict or object to processing and complain to a relevant authority. Send privacy requests to merrickharcout1@icloud.com. We may need information sufficient to verify a request without exposing another installation’s data. No email address is needed to use the app and this contact address is not a login or a message-delivery service inside the app.
Security
The client communicates with the public API over HTTPS through Cloudflare, which terminates that connection and forwards traffic to the pinned Railway origin over HTTPS. A randomly generated installation secret is stored in device-only Keychain storage; the server stores a hash and checks the secret for every private operation. Knowing a family routing token alone does not authorize access. PostgreSQL access credentials remain in the backend environment. The app uses iOS sandbox storage and file protection for photo files, and the server limits request size and validates sync envelopes. These measures reduce risk but no storage or transmission method is guaranteed secure. Keep your device protected and do not share its installation secret. There is no account-based password recovery or cross-device restoration feature.
Children’s privacy
Feet Find Size is intended for parents and caregivers to operate, rather than for children to register or use independently. It can contain information about children that a parent chooses to enter. Enter only what you need for the journal, avoid unnecessary sensitive notes, and review the contents of a size card before sharing it. The service does not provide child accounts, social features, advertising or public child profiles. A parent can remove a child’s records and the installation’s server copy using the controls described above.
Changes to this policy
This policy may be updated when the app’s data handling or service changes. The effective date at the top identifies the current version. The public Privacy Policy link in Family opens the current policy. Material new processing requiring a choice will be reflected in the app’s controls or permission flow. Contact merrickharcout1@icloud.com with questions about changes.