Privacy Policy
Live Band Manager
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Live Band Manager stores level completions, earned cosmetic rewards, the selected look and current stage arrangements on your iPhone. Language, sound, haptic, movement and backup preferences are stored locally. Keychain also records a pending deletion until server revocation is confirmed. Automatic private backup sends game progress and arrangements to our server, linked to a randomly assigned installation identifier. A secret for this installation is stored in the iOS Keychain; our server stores its SHA-256 digest for request verification. Enrollment returns the secret over HTTPS once; later requests use signatures. We do not ask for a name, email address, account, location, contacts, photographs or microphone recordings. Requests to our website and API necessarily disclose connection information, including IP address, request time and basic HTTP information, to our hosting infrastructure.
How we use information
Local storage makes the game playable offline and restores your arrangement when you reopen it. The optional server copy backs up progress for the same installation while its secret remains available. Installation identifiers, signature verification keys, timestamps and short-lived request nonces authorize access to your own backup and prevent replay. Infrastructure request information is processed to deliver and protect the service. We do not use advertising or analytics SDKs.
Service providers and sharing
The backend and public privacy page are hosted by Railway, which processes requests and stores the service database on a persistent volume as our infrastructure provider. Railway may process infrastructure and operational logs containing connection information. The application does not send progress to advertisers, social networks or an analytics provider. Opening this policy in a browser also involves that browser and its network providers. We may disclose information if required by applicable law.
Data retention
Local progress remains until you remove the app or its data. Keychain items may persist independently of app removal under iOS behavior. Server progress and its installation verification record remain until you use Delete server copy or operational removal occurs; no fixed automatic expiration is implemented. Replay nonces expire after the five-minute request window and expired entries are cleaned during authenticated requests. We do not configure application-level backup snapshots. Railway storage, infrastructure logs and any provider-managed residual copies are subject to its operations; we have not established a guaranteed retention duration for them.
Deleting your information
In Settings, Delete server copy removes the installation registration, stored progress and replay records from the live database after a valid signed request. It also removes the local Keychain enrollment and turns automatic backup off. Your local game progress is kept. Turning backup off alone stops later backups but does not delete an existing server copy. Deletion requires the installation secret; if it is lost we cannot offer account-based recovery or locate a copy from an email address alone. Residual provider storage or backups, if any, are not directly erased by the app and may remain until overwritten or removed through provider operations. Contact Amabell994@icloud.com for privacy questions and deletion assistance, without sending the installation secret. If a deletion response is interrupted, the app retains pending deletion status, blocks new backup writes and checks revocation on an explicit deletion retry.
Permissions and your choices
The game requests no camera, microphone, location, contacts, photo-library or notification permission. It plays bundled audio and uses optional haptics. Music, performance sound, effects, haptics and reduced movement can be controlled in Settings. You may turn automatic backup off at any time; offline local play remains available. System accessibility and device-level controls also remain available.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your personal data and to complain to a relevant authority. Your progress can be changed by playing and arranging stages, and your server copy can be deleted in Settings. Contact Amabell994@icloud.com to exercise applicable rights or ask about this policy. We may need enough information to verify a request while avoiding disclosure of your installation secret. There are no user accounts or cross-device sign-in features.
Security
HTTPS protects network transport. Each installation has a separate random secret, kept in ThisDeviceOnly Keychain storage, and the server verifies HMAC-SHA256 request signatures against its stored digest. Timestamp checks and durable unique nonces limit replay; private progress routes require authorization. Local progress uses atomic file writes, and server mutations use SQLite transactions. No common embedded client credential grants access to private data. No storage or transmission system can be guaranteed completely secure.
Children’s privacy
Live Band Manager is designed for a general teen and adult audience, particularly players aged 16 and older, and is not directed at children under 13. We do not knowingly request children’s personal contact details. If you believe a child has provided personal information through this service, contact Amabell994@icloud.com so that we can assess and address the request.
Changes to this policy
We may update this policy when game features, processing or hosting practices change. The effective date shown on this page identifies the current version. Material changes will be reflected in the app or on this policy page as appropriate. You can review this page at any time from Settings.