Steady Wings
Privacy Policy
The short version
- No sign-up, ever. The game never asks for your real name, email or payment details.
- Your progress stays on your iPhone. Captain name, Miles, Wings, stars and stats are stored locally and are not uploaded.
- We measure advertising. AppsFlyer tells us which campaign brought you to the app, using device and attribution identifiers.
- Notifications are opt-in. If you allow them, your device token is sent to our server so we can deliver them.
01Who we are
Steady Wings is an iPhone game developed and published by Karla Armstrong ("we", "us"). This policy explains what happens to data when you install and play it.
It covers the Steady Wings iOS app (App Store ID 6794348465) and this website.
It does not cover the App Store itself, which Apple operates under
Apple's Privacy Policy.
For anything in this policy, or to exercise your rights, write to karlaarmst@gmail.com.
02Data kept on your device
Everything you build up as a pilot is written to your iPhone's local app storage
(iOS UserDefaults). It is not sent to us, and it is not synced or backed up to
any server we control:
- Your captain nickname (whatever you type, up to 16 characters)
- Miles and Wings balances, and your Hangar upgrade levels
- Stars per leg, completed legs, and badges earned
- Records: flights completed, total and best calm kilometres, best comfort, best streak
- Duty board progress, your daily-duty streak and Daily Storm best distances
- Your sound, music and haptics preferences
03Advertising attribution and analytics
We advertise the game, and we need to know which campaigns actually work. To measure that we use AppsFlyer, a mobile attribution service, which starts when you first open the app. AppsFlyer acts as our data processor and may process:
| Data | Purpose |
|---|---|
| AppsFlyer ID | A per-install identifier used to match your install to a campaign |
| Device & app info | Device model, iOS version, app version, device language and time zone |
| IP address | Fraud prevention, and deriving approximate country/region — we do not use GPS |
| Attribution data | Campaign, media source, ad set and ad name that led to the install |
| Install & session events | First open and subsequent app launches |
| Advertising identifier (IDFA) | Only if you explicitly allow tracking in the iOS permission prompt |
See the AppsFlyer Services Privacy Policy. You can also use AppsFlyer's opt-out page.
04Data sent to our own server
The app contacts a server we operate (through our hosting provider) on first launch and when you enable notifications. The following is transmitted:
- Your AppsFlyer ID, used as a pseudonymous user reference
- The attribution fields described above (campaign, media source, ad set, ad)
- Your push notification device token, if you granted permission
- Your device's preferred language code, so notifications can be sent in a sensible language
- Your IP address, which any web request necessarily reveals
We use this to deliver notifications and to understand campaign performance at the level of installs. We do not link it to your real-world identity, and we never receive your name, email address, contacts, photos or precise location from the app.
05Push notifications
Notifications are optional. iOS asks your permission first, and nothing is sent unless you agree. If you do:
- Apple issues a device token, which we store so our server can address messages to your device
- We record when a notification is delivered and when it is opened, so we can stop sending messages nobody reads
- Some notifications include an image, which your device downloads from our server — this reveals your IP address to it, as with any image on the internet
06Web pages opened inside the app
In some cases the app opens a web page supplied by our server, using Apple's in-app Safari
view (SFSafariViewController) or your default browser. That page is a normal
website: it can see your IP address and browser user agent, and may set its own cookies.
Content shown this way is governed by the privacy notice of the page you land on, not by this document. In-app Safari views keep cookies and browsing data separate from the app itself, and the app cannot read what you type into them.
07Crash and performance diagnostics
Apple can share aggregated crash logs and performance metrics with developers, which helps us fix bugs. This only happens if you have opted in on your device, and the reports Apple gives us are not linked to your identity.
Control it under Settings → Privacy & Security → Analytics & Improvements → Share With App Developers.
08Why we may process your data
If you are in the EEA or the UK, the GDPR requires us to state a legal basis for each purpose:
| Purpose | Legal basis |
|---|---|
| Running the game and saving your progress | Performance of a contract — you asked us to provide the app |
| Measuring advertising campaigns and preventing install fraud | Legitimate interests — operating a sustainable app |
| Sending push notifications | Consent — the permission you gave on your device |
| Reading your advertising identifier (IDFA) | Consent — the App Tracking Transparency prompt |
| Fixing crashes and improving stability | Legitimate interests, and your Apple diagnostics setting |
Where we rely on consent, you can withdraw it at any time using the iOS settings described above; that does not affect processing that already took place.
10How long we keep it
- On-device game data — until you reset your progress or delete the app
- Push device tokens — until the token becomes invalid, you disable notifications, or you ask us to delete it
- Attribution and install records — kept no longer than needed to evaluate campaigns, and in line with AppsFlyer's standard retention periods
- Support emails — kept while we deal with your question, and for a reasonable period afterwards in case you follow up
11International transfers
Our service providers may process data in countries outside your own, including the United States. Where data leaves the EEA or the UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses in our agreements with those providers.
12Your choices and rights
What you can do right now, on your device
- Reset your progress from the Captain screen, or delete the app entirely
- Turn notifications off in Settings → Notifications → Steady Wings
- Deny or revoke app tracking in Settings → Privacy & Security → Tracking
- Stop sharing diagnostics in Settings → Privacy & Security → Analytics & Improvements
What you can ask us for
Depending on where you live, you may have the right to access a copy of your data, correct it, have it deleted, restrict or object to how we use it, receive it in a portable format, withdraw consent, and not be discriminated against for exercising any of these rights.
Email karlaarmst@gmail.com and we will respond within 30 days. Because the app has no accounts, please tell us enough to locate your records — for example the approximate install date and your device model. If we cannot identify any data as yours, we will say so rather than guess.
If you are in the EEA or the UK and are unhappy with our response, you can complain to your national data protection authority.
13Children
Steady Wings is rated 16+ on the App Store and is not directed to children. We do not knowingly collect data from children under 16. If you believe a child has provided us with data, contact us and we will delete it.
14Security
Requests between the app and our server use encrypted HTTPS connections, and access to our server is restricted. The app collects no passwords or payment details, so there are none to lose. No system is perfectly secure, but the small amount of data involved keeps the risk low.
15Changes to this policy
If we change how the app handles data, we will update this page and the "last updated" date at the top. For significant changes we will give notice in the app or on this website before they take effect. Older versions are available on request.
16Contact
Questions, requests, or something in the app that does not match what you read here: