Privacy Policy
Mexidash - migratio culture
This policy explains how this application handles information and how to contact us about privacy.
Information we process
Mexidash stores your journal text, mood tags, entry dates, edit timestamps, saved guide references and pending changes in a local SQLite database on your iPhone. Reading content and its synchronization date are cached locally; your language and last opened material are kept in local preferences. An automatically issued random installation secret is stored in the device Keychain, without synchronization to other devices. The backend receives journal entries and stores them in SQLite with a hash of the installation secret and installation creation time. Deleted entries retain a synchronization marker with an entry identifier, mood and dates, but no journal text or saved reference. Public guide and policy requests also reach our hosting infrastructure, which necessarily processes network metadata such as IP addresses, request paths, timestamps and technical connection information. The app does not ask for an account, name, email address, location, contacts, photos or identity documents. Please avoid writing unnecessary sensitive information or document numbers in your journal.
How we use information
We use journal data and the installation secret to save, reopen, synchronize, edit and delete your own notes and calculate the mood chart you request. Cached bilingual guide content supports offline reading. Language and reading preferences personalize the interface and continue-reading feature. If you opt in, iOS schedules cultural reminders on your device; no remote push token is collected. Temporary upload files allow iOS to complete journal synchronization in the background. Network metadata supports delivery and security. A bounded in-memory request counter limits installation creation; it is not an analytics profile.
Service providers and sharing
Cloudflare terminates public HTTPS for the API and privacy website and proxies requests to the Railway service. In doing so, Cloudflare processes request and connection metadata and the contents needed to forward those requests, which may include journal data and the installation authorization header. The backend is hosted by Railway, which provides the application runtime, persistent storage and network infrastructure and processes data needed to deliver this service. Authorized operators of the service and its hosting infrastructure may have technical access for operation and security. The app includes no advertising, analytics, social sign-in, mapping, email delivery or other third-party tracking SDKs. We do not sell journal data or use it for advertising. Opening an official-source or privacy link sends a request to the destination website under its own practices. Data may be disclosed where legally required.
Data retention
Local notes remain until you delete them, erase the installation data or remove applicable device storage. The server keeps current journal entries until you delete them or erase the installation. Deleting an individual entry removes its text and source reference on the server while retaining synchronization metadata to avoid accidental reappearance. Pending local deletion is sent when connectivity returns. Temporary upload files are removed after their transfer completes. Installation erasure removes the installation record and its associated entries from the active database. The application does not implement a separate backup service or a timed log-retention policy. Infrastructure logs or provider-managed backups, if present, follow the infrastructure providers’ retention and deletion processes; we cannot promise immediate removal from those copies or a fixed duration. Device backups may contain local app data under your device settings; the installation secret is device-only and is not intended for recovery on another device.
Deleting your information
Delete a single note from My journal with confirmation. To erase all local and server journal data and revoke the installation secret, use Settings → Erase all my data and confirm while online. The app clears its local database and Keychain secret after the server confirms erasure, and starts a fresh installation. If a server request fails, erasure is not reported as completed; retry with a connection. Uninstalling the app alone does not request server deletion, and Keychain behavior can differ from app storage removal. There is no account or recovery process: if the installation secret is lost, the app cannot recover or prove ownership of the old journal. Do not send that secret by email. You can contact val.sotheran@icloud.com about privacy or deletion questions; the address is a public privacy contact, not an in-app messaging service.
Permissions and your choices
Notifications are optional and requested only when you enable cultural reminders in Settings. You can disable reminders in the app or withdraw notification permission in iOS Settings. Withdrawal stops future authorized alerts but does not by itself erase journal data. The app does not request access to geographic location, contacts, camera, microphone or photo library. Internet access is used for content delivery and private journal synchronization; reading the included content and writing local notes remain available offline.
Your privacy rights
Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a copy of your personal data, or complain to the relevant supervisory authority. You can read and edit journal entries in the app and use the deletion controls described above. For privacy requests contact val.sotheran@icloud.com. We may need enough information to understand and safely resolve a request, but do not email your installation secret or sensitive journal contents. Without that secret we may not be able to associate an email request with an anonymous installation.
Security
Public connections use HTTPS terminated by Cloudflare, which proxies to the Railway HTTPS origin. Private journal endpoints require the installation secret and enforce server-side installation ownership; the server stores a SHA-256 hash instead of the raw secret. The app uses device-only Keychain storage and iOS file protection for local journal and upload files. Request sizes and installation creation are limited. Application error logs omit journal text and credentials, although hosting infrastructure can process network metadata. Journal synchronization is not end-to-end encrypted, and no system can guarantee absolute security. Anyone who obtains an installation secret may access that installation’s journal.
Children’s privacy
Mexidash is intended for adults adapting to life in Mexico and is not directed to children under 13. We do not knowingly seek personal information from children. A parent or guardian who believes a child has submitted information can contact val.sotheran@icloud.com; avoid including sensitive information in the initial message.
Changes to this policy
We may update this policy when the app, hosting or processing practices change. The current version and effective date are shown on this page. Material changes will be reflected in the updated policy and, where appropriate, in the app. Contact val.sotheran@icloud.com for questions about this policy.