Privacy Policy
Super Lineup
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Super Lineup stores the projects you create, project names and dates, stage descriptions and status, dependencies, notes, links, copied files, cover choices and color choices in the app's private storage on your device. Language, appearance, accessibility, reminder and sync preferences are stored locally. An automatically generated random installation secret is kept in the iOS Keychain. When installation sync is enabled, project content and attached files are sent to the app's backend. The backend stores a hash of the installation secret as the storage namespace, project and material identifiers, update timestamps and file metadata. There is no user account, login, identity profile, contact list, analytics SDK or advertising SDK. Our Railway hosting infrastructure receives network requests, including IP addresses, request timing and technical connection information, when the app syncs or someone visits the public site or this policy. The application server does not intentionally log installation secrets or project payloads.
How we use information
Local storage makes planning, editing and viewing work available offline. Server storage provides synchronization for the same installation, retrying pending edits and file uploads after connectivity returns. Update timestamps resolve conflicting versions, and deletion markers prevent stale project versions from being restored. The installation secret authorizes access to that installation's projects and files. Optional local notifications remind you about stage start dates. Technical request information supports delivery, security, fault diagnosis and operation of the service. Opening an attached web link sends a request to the website you choose to visit.
Service providers and sharing
The backend and its persistent storage are hosted on Railway, which processes stored content and connection information as infrastructure provider. Apple provides iOS system services such as Keychain, the document picker, device backups when configured by you, and local notifications. Local stage reminders do not use a remote push delivery service. Links opened by you are handled by the destination website under its own practices. We do not integrate advertising, third-party analytics, email delivery, social sign-in or support-ticket providers. Project data is not exposed through a public project endpoint; access requires the installation secret. We may disclose information when required by applicable law or to protect the service and its users.
Data retention
Projects and copied materials remain on your device until you delete them or remove the app's local data. Archiving preserves a project. Server copies remain until the relevant project or material is deleted or you request deletion of all installation data. Pending changes and deletion requests remain in local storage until they are synchronized. Project deletion leaves a server identifier and update timestamp, without the project body, to prevent a stale retry from restoring deleted content; deleting all installation data also removes these markers. Settings and the installation key may remain separately, and iOS Keychain items can survive app removal. We do not specify a fixed retention period for Railway infrastructure logs or provider-managed backups because their actual retention is controlled by the provider and service configuration. Database storage pages, infrastructure snapshots or device backups can retain residual copies beyond logical deletion; they are not used as an active project library.
Deleting your information
Delete a project from its actions menu to remove its local stages and copied files and queue deletion of its server copy. Removing a material removes its local copy and queues server file deletion. Settings offers Delete all my data, which clears local projects and files and queues an authenticated deletion of this installation's server records and files, including deletion markers. If offline, reconnect and allow synchronization to finish the server deletion. This deletion is attempted even if ordinary synchronization has been turned off. The installation key is retained to authorize deletion and future use; deletion does not create an account. Uninstalling the app alone does not send a server deletion request. Removing live records does not immediately remove copies in provider or device backups; any such copies remain subject to their backup lifecycle. We cannot identify or recover a lost installation secret, or promise access to data after that key is lost. Contact WulstanMordaunt@icloud.com about privacy or deletion questions without sending your secret.
Permissions and your choices
The app requests notification permission only when you enable stage reminders. You can disable reminders in the app and withdraw notification permission in iOS Settings; planning continues to work. The system document picker gives access only to files you select, which the app copies into its storage. The app does not request camera, microphone, location, photo-library or contacts access. You can disable installation sync in Settings to stop ordinary project and file synchronization; local work remains available, and existing server copies remain until deletion. Opening a link is your choice and may leave the app.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete or restrict processing of your information and to raise a concern with a relevant privacy authority. You can inspect and edit projects in the app, disable sync and reminders, and use the project or installation deletion controls. Send privacy questions and rights requests to WulstanMordaunt@icloud.com. This address is a public privacy contact, not an app login or an in-app messaging service. Because the service uses an installation secret rather than a named account, we may need non-secret context to locate a request and cannot retrieve projects merely from your email address. Do not include sensitive project files or the installation secret in an initial inquiry.
Security
The deployed API uses HTTPS. A distinct random secret for each installation is stored in the iOS Keychain and sent in the authorization header for backend requests. The server derives a hash namespace and checks access on project and file operations. The app uses iOS private storage and file protection for saved library data; imported files are protected by the app sandbox and device protections. The backend validates payloads, limits requests and file sizes, and stores content on a persistent Railway volume. The secret is not a shared credential and is not recoverable through sign-in. No transmission or storage system can guarantee absolute security. Protect your device and avoid sharing its installation secret.
Children’s privacy
Super Lineup is a creative-production planning utility intended for general use by creators and event organizers, rather than a service directed specifically to children. It does not request age or knowingly solicit personal profiles from children. If you believe a child has provided personal information that should be removed, contact WulstanMordaunt@icloud.com. Avoid putting unnecessary personal information about children or other people into project notes or files.
Changes to this policy
We may update this policy when the app's features, infrastructure or data practices change. The updated policy will be published at this public privacy page with a revised effective date and remain accessible from the app's Settings. Review this page for the current description of processing. Material changes will be described through an appropriate app or policy notice. The current effective date is November 10, 2026.