Privacy Policy
Custom Wood Furniture
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Custom Wood Furniture stores your project titles, wood choices, descriptions, start dates, status, checklist steps, inventory quantities and allocations, photo notes and dates, photographs, and local workshop preferences on your iPhone. Your optional craftsperson name is a local profile field, not an account. If you enable private sync, the app sends these workshop records, preferences and resized JPEG photographs to the application backend. A random installation secret is stored in the iPhone Keychain; the backend stores its SHA-256 hash as the installation identifier. Requests to the app API or these public pages also reach Railway infrastructure, which may process IP addresses, request paths, timing and technical connection information in infrastructure logs. The application does not include advertising or analytics SDKs, account registration, location collection or tracking.
How we use information
Local storage lets you plan furniture projects, track checklist progress, manage materials and tools, and keep a project-linked photo journal offline. Optional server storage keeps a private synchronized copy for this installation. The installation secret authorizes access to that copy. Technical request processing and limited application error logs support service operation and troubleshooting. Local backup export creates a JSON file with workshop records and embedded photographs so you can keep a copy using a destination you choose.
Service providers and sharing
The backend is hosted on Railway, which processes stored workshop data and network requests as the infrastructure provider. The app does not sell personal data or send workshop records to advertising, analytics, email delivery or social sign-in services. Application error logs contain a request identifier and technical error code, not workshop contents or the installation secret. Railway infrastructure logging is separate and may include network and request information. If you share an exported backup, the recipients and storage provider depend on the destination you select in the system share sheet. Apple system services handle the photo selection, camera permission and Keychain features according to your device settings.
Data retention
Workshop records and photo files remain on your iPhone until you delete them or remove the app. The installation key is held separately in Keychain and can persist according to iOS Keychain behavior; it is device-bound and is not included in exported backups. Synced records remain on the server until the installation deletes them; turning sync off stops further routine uploads but does not erase the existing server copy. There is no automatic time-based expiration of workshop records. The application does not configure a separate backup schedule for its Railway volume. Infrastructure logs and any infrastructure-level copies are subject to Railway operations; no fixed retention period is represented here. Exported files and device backups are controlled by their chosen destinations and your device settings.
Deleting your information
Delete an individual project, stock item or photograph using the app controls; project deletion also removes its steps, photo files and material links. These changes are saved locally first and reach the server on the next successful sync if sync is enabled. Delete all workshop data in Workshop clears local records, preferences and photo files and queues an authenticated server deletion even if routine sync is disabled. If offline, keep the app installed and reconnect so that queued deletion can complete. The server removes the installation records and photograph BLOBs from its active database. Database journals, infrastructure-level copies and storage remnants may persist until overwritten or removed by the hosting system; deletion is not a promise of immediate physical erasure of every copy. Exported backups must be deleted separately wherever you saved them. Removing the app while an erasure is pending can prevent that erasure from reaching the server.
Permissions and your choices
Camera access is requested only when you choose Take photo, to capture an image for a project. You can refuse or withdraw camera permission in iOS Settings and continue using other features. The system Photos picker gives the app only the photographs you select; the app does not request unrestricted photo-library access. Selected or captured images are resized and re-encoded as JPEG for local storage and optional sync. The app does not request location, contacts, microphone or notification permission. Disable optional sync in Workshop to stop further routine uploads; use Delete all workshop data to request server erasure.
Your privacy rights
You can review and edit workshop records in the app, export a local backup, turn optional sync off and delete your installation data. Privacy questions and applicable access, correction or deletion requests may be sent to rhosyn.ormston@icloud.com. This address is a public privacy contact, not an in-app messaging or account system. The service has no account email or identity directory, so a request may require information that safely establishes control of the relevant installation; do not email your installation secret. If the key is lost, there is no sign-in or cross-device recovery mechanism and the operator may be unable to identify or authorize access to the associated records. Applicable privacy rights depend on your location.
Security
The deployed API uses HTTPS. Every private endpoint requires the random secret for that installation, and the server scopes records and photo access to the hash of that secret. The app stores the secret in device-bound Keychain storage and does not include it in backups it exports. Server validation, payload limits and request limits reduce malformed input and resource abuse. Private photographs are served only after installation authorization, not from public gallery URLs. Local records use app-sandbox storage. These controls reduce risk but cannot guarantee complete security. Keep your device and exported backups protected.
Children’s privacy
Custom Wood Furniture is designed for adult hobbyists and professional woodworkers and is not directed to children. Woodworking tools and finishes require suitable training, protection and supervision. The app does not ask for age or knowingly create child accounts because it has no account system. Contact rhosyn.ormston@icloud.com if you believe a child has provided personal information that requires attention.
Changes to this policy
This policy describes the current app and backend practices. Updates will be published at this privacy page with a revised effective date when practices change. Review the policy after an app update or before enabling optional sync. Questions about policy changes can be sent to rhosyn.ormston@icloud.com.