Privacy Policy
Rain Rebuild Protocol
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Rain Rebuild Protocol keeps game progress, settings on your device. When the app syncs a backup, it sends an encrypted copy of game progress to our server together with a random installation secret used to identify that backup. The separate encryption key remains in the device's Keychain and is not sent to the server. The server stores a SHA-256 hash of the installation secret and the encrypted copy, not a user account or email address. Network requests also expose technical information such as IP address and request metadata to the hosting infrastructure.
How we use information
Local information runs the game, remembers your choices, and schedules optional gameplay notifications. The server uses the installation secret to allow this installation to upload, retrieve, replace, or delete its encrypted backup. Technical request information is processed to deliver the service, diagnose failures, and protect its availability. We do not use game progress for advertising or analytics.
Service providers and sharing
The backend and PostgreSQL database are hosted on Railway. Railway and its infrastructure providers process network traffic and store the encrypted backup as needed to operate the service; their infrastructure may also produce operational logs. We do not add an advertising, analytics, email delivery, or social login provider to the app. We do not sell game information.
Data retention
Local progress remains on the device until you reset it or remove the app, subject to the device's own storage and backup behavior. The server keeps the latest encrypted backup for an installation until it is replaced or deleted. Railway's infrastructure may retain copies in backups or logs under its own operational settings; we do not promise a specific purge time for those copies. Losing the installation secret can make the server backup inaccessible, and there is no account-based recovery.
Deleting your information
The app's reset control asks for confirmation, removes local game progress, and requests deletion of the installation's server backup. If the device is offline, the server request cannot complete until connectivity returns and the app retries; local deletion can occur first. Removing the app alone does not send a server deletion request. You can also contact us about a privacy request, but without the installation secret we may be unable to locate a specific backup. Deletion from the live database does not necessarily remove copies already retained by infrastructure backups or logs immediately.
Permissions and your choices
The game works without location access or contacts access. If you allow notifications, the app may show local reminders about in-game water levels and weather events. You can disable notifications in device settings. Gameplay and local progress remain available without a network connection; backup and server deletion need network access. You can request deletion of the server backup through the app settings.
Your privacy rights
You may use the app's controls to view or reset local progress and to delete the backup associated with this installation. For questions about access, deletion, correction, or other privacy rights that may apply where you live, contact us using the address below. Because there are no user accounts, identifying a backup requires the installation secret; we cannot restore one after that secret is lost.
Security
The app encrypts a game snapshot before uploading it, using an encryption key separate from the installation secret. The public service is intended to use HTTPS in deployment. The server validates the installation secret on each backup request, stores only its hash as the lookup key, and stores encrypted snapshot bytes in PostgreSQL; data stored by the server alone is insufficient to decrypt a snapshot. Protecting the device, encryption key, and installation secret matters because a compromised device may expose the backup. No security measure can guarantee absolute protection.
Children’s privacy
Rain Rebuild Protocol is designed for a general gaming audience and is not specifically directed to children under 13. We do not ask players to provide an age, create an account, or submit contact details. If you believe a child has provided information through this app and need assistance, contact us using the address below.
Changes to this policy
We may update this policy when the app or its data practices change. The current version will be published at this page with a new effective date. Material changes to how the app handles information will be reflected in the policy before the changed behavior is released.