Privacy Policy
Ohmy Fancy Desserts
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Ohmy Fancy Desserts stores dessert project names, shapes, layer materials and dimensions, glaze strokes and parameters, decoration positions, series names, editing drafts, and completed creative briefs on your device in a SQLite database. A durable local queue holds changes awaiting synchronization. Language and appearance preferences are stored locally. A random installation secret is stored in the iOS Keychain and is used to authorize private server requests; there is no registration or user account. The backend stores a hash of that secret alongside saved project JSON, generated exterior and slice preview images, and brief progress. Requests to the application service and this public website necessarily disclose network information such as IP address and request timing to the hosting infrastructure. We do not use advertising or analytics SDKs, location access, contact access, or tracking cookies.
How we use information
Local project data supports building, reopening, editing, comparing and exporting desserts and working offline. The server copy synchronizes saved projects, previews and progress for this installation. The installation secret authorizes access and separates one installation from another. The queue retries changes after connectivity returns. Optional local notifications remind you about an unfinished brief. Photos permission is used only to add an image when you choose export. Hosting request information is processed to deliver and operate the service.
Service providers and sharing
The backend and this policy are hosted by Railway, which processes requests and stores the service database on a persistent volume as our infrastructure provider. Railway infrastructure may process network and operational logs. The application server does not record request headers, authorization secrets, project payloads or request paths in its own request logs. No advertising, analytics, social sign-in, email-delivery or other auxiliary providers are integrated. Exported images are added to your Apple Photos library at your direction; any Photos or device backup synchronization follows your Apple settings. If you email the privacy contact, your message is handled by the email providers involved. We do not sell your project data.
Data retention
Projects, drafts, preferences and queued changes remain on your device until you delete them or remove the app, subject to iOS storage and backup behavior. The installation secret uses a device-only Keychain accessibility class; iOS may retain Keychain items after app removal, and the secret is not intended for transfer to another device. Saved server projects, images and progress remain until an authorized deletion request is processed. We have not configured an application-level automatic expiry or a separate application backup schedule. Railway may retain infrastructure logs or provider-managed backup copies according to its service operation; we do not assert a fixed retention duration for those records. Local app data may be included in device backups under your iOS settings.
Deleting your information
You can delete a saved project with confirmation, which removes its local saved copy and queues deletion of its server project and images. Delete all data in Settings removes local projects, the draft and progress, cancels pending local reminders, and queues removal of all server projects, images and progress authorized by this installation. While offline, server deletion completes only after synchronization succeeds. The installation secret is retained so queued deletion can be authorized. Removing the app before synchronization can prevent pending server deletion. Images already exported to Photos and copies in your device backups are not removed by app deletion controls; manage those through Apple Photos and backup settings. Provider-managed logs and backups are not directly modified by an application deletion request and may remain until the provider removes them. If the installation secret is lost, we cannot promise recovery or identify its server data from a name or email address.
Permissions and your choices
The app requests add-only Photos permission when you choose to export an exterior or slice image; it does not read your photo library. Denying permission leaves project editing and saving available. Optional notification permission is requested only when you ask for a reminder, which is scheduled locally. You may revoke these permissions in iOS Settings and cancel the local reminder inside the app. The app does not request location, camera, microphone, contacts or geographic mapping access. Network synchronization uses the configured HTTPS service without an additional iOS permission prompt.
Your privacy rights
You can inspect and edit your projects, export generated images, delete individual projects or all app data, change language and appearance, and withdraw optional permissions. Depending on your location, you may have rights to request access, correction, deletion, restriction or other information about personal data processing, and to complain to a relevant supervisory authority. For privacy questions or requests, contact AramintaPomeroy@icloud.com. This is a public privacy contact, not an app sign-in or a delivery address for project recovery. Please do not send your installation secret. Because there is no account or email identifier, we may be unable to associate an email request with particular installation data.
Security
The iOS client uses HTTPS for deployed API requests. A cryptographically random secret unique to the installation is held in Keychain; the server hashes it and scopes every private project, image and progress operation to that hash. There is no shared app credential or public access to private records. Requests are validated and bounded in size, and the database enforces project/image relationships. Local state and queued mutations are saved transactionally. Server deletion cascades to associated images. These measures reduce risk but cannot guarantee absolute security. Anyone who obtains the installation secret may access the corresponding server data; do not disclose it.
Children’s privacy
This creative utility is intended for culinary enthusiasts aged 16 and older and is not directed at young children. It has no public profiles, social posting, advertisements or account registration. We do not intentionally ask children for contact information. If you believe a child has provided personal information through this service, contact AramintaPomeroy@icloud.com so the circumstances can be assessed.
Changes to this policy
This policy describes the current app and backend practices as of the effective date above. We will update this public page and its effective date if those practices materially change. The Privacy Policy link in app Settings provides access to the current page. Review the policy when updating the app or before using a newly introduced data-related feature.