Private by default. Connected only when you ask.

01 / Scope

What this policy covers

This policy describes information handled by the HostKit iPhone app, the first-party feature-suggestion service, and this HostKit support website. “HostKit,” “we,” and “us” refer to the developer operating these services. It does not replace the privacy policies of Apple, Cloudflare, Google, or other services you choose to use.

02 / Local app data

Information that stays on your device

HostKit stores the following locally so the app works as expected:

• Appearance, sound, haptic, and timer-cue preferences.
• Scoreboard team count, team names, and scores.
• Temporary timer and Quick Decision state while the app runs.

HostKit does not send this local hosting data to its developer. Persisted app data remains until you change or reset it, delete the app, or manage a device backup through Apple. Apple may handle app downloads and device backups under Apple’s own terms and settings.

03 / Feature suggestions

Information submitted when you choose “Suggest a Feature”

Sending a suggestion is optional and requires a network connection. A submission may contain:

• Your suggestion or other message.
• An optional feedback category.
• An optional reply email address.
• App context: HostKit’s app identifier, app name, version, build number, and platform.
• A randomly generated submission identifier plus client and server timestamps used for delivery, duplicate prevention, and records.
• An internal review status used to organize product planning.

Do not include passwords, financial information, health information, details about children, or other sensitive personal data in a suggestion.

04 / Network and service data

Cloudflare processing

The feature-suggestion API and this website use Cloudflare. When a request reaches Cloudflare, Cloudflare may process IP address, request headers, timestamps, security signals, and other network metadata to deliver and protect the service. The HostKit Worker uses the request IP as a temporary rate-limit key, but the Worker code does not write the IP address into the feature-suggestion database.

Cloudflare may process and retain request metadata according to the account configuration, Cloudflare’s service terms, and its Privacy Policy. This website does not add analytics scripts or advertising cookies.

05 / Uses

Why we use submitted information

• Receive, review, categorize, and prioritize product feedback.
• Understand which HostKit version produced a submission.
• Prevent accidental duplicate submissions and abuse.
• Reply when you provide an email address and a response is useful.
• Maintain, secure, troubleshoot, and improve HostKit.
• Comply with applicable legal obligations.

HostKit does not use submitted information for targeted advertising, cross-app tracking, or sale to data brokers.

06 / Sharing

Service providers and disclosures

Information may be processed by:

• Cloudflare, which hosts the support site, feature-suggestion API, rate limiter, and D1 database.
• Google, when you contact the public Gmail support address or receive a reply. Google processes email under its Privacy Policy.

We may also disclose information when reasonably necessary to comply with law, enforce rights, protect users or the service, investigate abuse, or complete a business transfer with appropriate safeguards. We do not sell personal information.

07 / Retention

How long information is kept

There is currently no fixed automatic deletion schedule for feature suggestions. Suggestions and related app context are retained for as long as reasonably necessary to evaluate and prioritize product ideas, respond when appropriate, maintain product-planning and operational records, resolve disputes, protect the service, and meet legal obligations. Information that is no longer reasonably required may be deleted or de-identified.

Support emails are retained for as long as reasonably necessary to address the request and maintain appropriate support records. You may request earlier deletion, subject to verification and any information we must keep for legitimate security or legal reasons.

08 / Your choices

Access, correction, and deletion requests

You can use all core HostKit tools without submitting a feature suggestion. If you submit one, you may request access, correction, or deletion by emailing flowstatecoders@gmail.com with the subject “HostKit Privacy Request.”

To protect users, we may ask you to verify a request. If you included a reply email, contact us from that address where possible. If you did not include an email, provide the approximate submission date, category, app version, and enough of the message to locate it. We may be unable to identify an anonymous submission when the supplied details are insufficient or match multiple records.

09 / Security and transfers

How information is protected

HostKit uses HTTPS for submissions, validates incoming fields, limits request rates, and exposes no public route for reading the feedback database. Access to stored submissions requires authorized Cloudflare credentials. No method of storage or transmission is completely secure, so absolute security cannot be guaranteed.

Cloudflare and Google may process information in countries other than your own, subject to their contractual and legal safeguards.

10 / Children

Classroom and family use

HostKit is a general-audience hosting utility and is not designed to collect personal information from children. Children should not submit personal information through Suggest a Feature or support email. An adult supervising classroom or family use should contact support on their behalf.

11 / Changes

Policy updates

This policy may be updated when HostKit’s features, service providers, or legal obligations change. The effective date and version at the top of this page will be revised. Material changes will be communicated through an appropriate channel when required.