Privacy Policy

Cape Fear Devs (“we,” “us,” or “our”) values your privacy. This Privacy Policy explains how we handle information when you use the apps listed below, visit our website, or contact us.

Effective Date: October 14, 2026
Operator: Philip Fairchild, operating under the Cape Fear Devs brand in Connecticut, United States
Contact: philanco@hotmail.com

This revision clarifies data handling and privacy rights and adopts the support-retention schedule described in Section 5. It also explains local diagnostic events, cloud synchronization, sharing, advertising services, and deletion. Publishing this notice does not enable new app analytics uploads.

1. Scope

This Privacy Policy covers the following Cape Fear Devs apps, our website, and support communications:

Simple Habits Daily Tracker
Ripple Wave Puzzle
Simply Done: Daily Tasks
CardBoard+

App features and privacy controls can differ by version. Section 9 explains those differences. FrostBite has a separate version-specific privacy policy for its app behavior; this notice still explains how we handle website visits and support communications. Additional apps will be identified in the notice that applies to them.

2. Information We Collect

Depending on the app and features you use, information is processed to operate the app, synchronize data, provide support, deliver and measure advertising, and improve reliability. Some information stays on your device; other information is handled by Apple, Google, our hosting and email providers, or Cape Fear Devs as described below. Processing data locally does not mean that Cape Fear Devs receives it.

Depending on the app, this may include:

Data you create in the app (for example, habit names, progress, and settings)
Purchase and subscription status needed to unlock paid features
Notification preferences and permission state, when reminders are enabled
Optional health and fitness data from Apple Health/HealthKit where a supported app feature is enabled
Advertising-related data from advertising and consent SDKs in apps that support ads (for example, device and ad identifiers, IP address, ad interactions, and diagnostics/performance signals). Ripple Wave Puzzle is configured to request non-personalized ads.
For CardBoard+, first names or nicknames, player and team names, game titles, scoring settings, scores, rounds, turns, timer and dice state, game history, statistics, and optional live spectator-session data
Basic technical data provided by Apple for app operations
Local diagnostic and usage events, including random identifiers and timestamps, as described for each app
Your email address, message, and attachments or diagnostic files when you contact us
Network and technical information, such as IP address, requested page, browser information and request time, processed by our website host to deliver and protect the site

Advertising services process information as described in Sections 6 and 9. Depending on the service, its use of information and the applicable law, an advertising disclosure can be treated as a sale or sharing of personal information. Use the advertising privacy choices described for your app in Section 9, or contact us under Section 8 with a request about sale, sharing or targeted advertising.

3. How We Use Information

We use data to:

Provide and maintain app features
Save your preferences and progress
Sync CardBoard+ tables, players, in-progress games, presets, and history through your private iCloud database when enabled
Provide live, read-only CardBoard+ spectator sharing when the scorekeeper explicitly starts it
Process and restore in-app purchases/subscriptions
Serve and measure ads in supported free-tier experiences
Prevent abuse/fraud and maintain service integrity
Improve app reliability and performance
Respond to support and privacy requests
Deliver and protect our website
Comply with legal obligations

AI services and model training: Cape Fear Devs does not send customer or user data covered by this notice to AI services. We do not collect, use, or sell personal information for the purpose of training large language models.

4. In-App Purchases and Subscriptions

Some apps offer paid features through Apple In-App Purchases or Subscriptions.

Payments are processed by Apple, not by Cape Fear Devs. We do not receive your full payment card information.

We may use purchase entitlement information (for example, active subscription status) to enable premium features.

For apps with auto-renewable subscriptions, Terms of Use are available at Apple Standard EULA and on our Terms of Use page.

5. Data Storage and Retention

App data may be stored locally on your device and/or in Apple services associated with your Apple account, depending on app features.

CardBoard+ core game data is stored locally and may sync through the user’s private Apple CloudKit database when iCloud sync is enabled. Private CloudKit data is not visible to Cape Fear Devs through Apple’s developer portal.

When a CardBoard+ scorekeeper starts spectator sharing, the app creates a temporary record in its public CloudKit database. That record may include the game title, player or team names, scores, rules, timer and dice state, current turn, score history, winner, sharing status, and timestamps. Anyone with the six-character invite code, invite link, or QR code may be able to view that read-only game record.

Active CardBoard+ spectator sessions are treated as expired 24 hours after their last update, and finished spectator results are treated as expired after 7 days. The app requests deletion when sharing is stopped or a shared draft is discarded, and it attempts to delete expired records when they are next accessed. CloudKit storage and processing are also subject to Apple’s policies.

Retention depends on the data and where it is stored. On-device gameplay and task data can remain until it is deleted or replaced; diagnostic histories may be limited by event counts rather than age. Cloud data and copies shared with others require separate deletion steps. For support requests closed on or after October 14, 2026, we retain routine correspondence for up to 12 months after closure and diagnostic files or exports for up to 30 days after closure, unless a shorter period is appropriate or specific legal or dispute-handling obligations require longer retention. We previously retained support email indefinitely. Older messages are awaiting a review under this schedule and may remain until that review is completed. Apple, Google and our service providers handle records they retain under their applicable policies and our arrangements with them. Contact us about information held by Cape Fear Devs.

6. Third-Party Services

Our apps, website and support communications use the following services, depending on the features you use:

App Store and StoreKit (purchases/subscriptions)
Game Center (leaderboards, achievements, and player profile features where enabled)
iCloud key-value storage (cross-device app state sync when available; see app-specific details in Section 9)
Apple CloudKit private database (cross-device sync in supported versions of Simple Habits, Simply Done and CardBoard+, with controls described in Section 9)
Apple CloudKit public database (opt-in CardBoard+ spectator sharing)
Apple Health/HealthKit (optional health-related habit features)
TestFlight (beta distribution)
Google AdMob and Google User Messaging Platform (advertising and privacy/consent services in supported apps; initialization and technical processing can occur before an ad is displayed)
Netlify (website hosting and technical/security processing, plus the conditional Simple Habits usage-statistics service described in Section 9.1)
Microsoft Outlook/Hotmail (delivery and storage of support and privacy-request email)

If any app uses additional third-party services (for example analytics, ads, or crash reporting), that app section in Section 9 will disclose it. The relevant app section explains available advertising privacy controls. Non-personalized advertising does not itself mean that no data is processed or that consent is never required. See Apple’s privacy information, Google’s Privacy Policy, Netlify’s Privacy Statement, and Microsoft’s Privacy Statement.

7. Children’s Privacy

The apps covered by this notice are intended for a general audience and are not specifically designed or marketed to children under 13. An App Store content age rating is not a statement that an app is designed specifically for children. We do not knowingly collect personal information from children under 13.

For CardBoard+, scorekeepers should use first names or nicknames and should not enter sensitive personal information, particularly when adding children as players.

If you believe a child has provided personal information to Cape Fear Devs or through one of our apps, email philanco@hotmail.com with the app name and your concern. Please do not send additional sensitive information about the child. We will review the concern and take appropriate steps, including deletion or other action required by applicable law.

8. Your Rights and Choices

Depending on your location and applicable law, you may have rights to confirm whether we process your personal information, obtain access or a portable copy, correct inaccuracies, request deletion, withdraw consent, object to or restrict certain processing, or opt out of sale, targeted advertising or certain profiling. Where applicable, you may also request information about significant automated decisions concerning you and the third parties to which your personal information has been sold. The rights available depend on the processing and any applicable exceptions.

You can also:

Manage subscriptions in your Apple ID subscription settings
Control notification permissions in iOS Settings
Use device-level privacy controls in iOS (such as ad personalization/tracking controls, where available)
Delete individual CardBoard+ games, saved sessions, and history in the app
Stop CardBoard+ spectator sharing to request deletion of the public spectator record
Manage or delete CardBoard+ iCloud data through Apple’s iCloud settings
Delete an app’s ordinary local storage by deleting the app. This may not remove information retained in iCloud, Keychain, backups, Apple or advertising services, or copies previously shared with others. Offloading an app is different from deleting it and can retain its documents and data.

To make a privacy request, email philanco@hotmail.com with the app name and the request. For requests that require verification, we may ask only for information reasonably necessary to verify your identity and locate the relevant records. We do not use access-request identity checks for sale or targeted-advertising opt-outs; we may need limited information to identify which app or choice your request concerns. Do not send passwords, payment-card details, or complete habit or health histories. We will respond within the time required by applicable law and explain any applicable limitation or exception. We do not discriminate against you for exercising applicable privacy rights.

If we decline a request and you have an applicable right to appeal, reply to our decision or email the same address with the subject “Privacy appeal” and explain why you disagree. We will review the appeal and respond within the applicable legal deadline. Where available, you may also complain to your state attorney general or relevant data-protection authority. We cannot directly erase information held only on your device, in your private Apple account, or by a recipient you selected; we will explain available steps.

You can also raise a concern about how we handle personal information by emailing philanco@hotmail.com; you do not need to make a rights request first. Please describe the concern and the app or website involved without sending unnecessary sensitive information. We will acknowledge the complaint, investigate it, keep you informed and communicate the outcome. Where UK data-protection law applies, we will acknowledge a privacy complaint within 30 days. You may also contact the UK Information Commissioner's Office or your relevant data-protection authority.

9. App-Specific Privacy Details

9.1 Simple Habits Daily Tracker

Availability of iCloud Sync, Apple Watch features and advertising privacy controls depends on your app version. Shared usage uploads are currently disabled; the optional statistics described below apply only if they become available in a disclosed future version and you enable sharing.

What the app does: Tracks habits, daily progress, streaks, reminders, widgets, shortcuts, archives, history, and paired Apple Watch check-ins.

Data used by the app:

Habit entries you create, including names, goals, schedules and notes
Progress, completion history, archives, settings and on-device safety backups
Purchase status for premium access (monthly, annual, lifetime), if applicable
Optional HealthKit data, including step count, exercise minutes, and sleep data, only when you choose to connect a health-related habit
Optional ad-related data processed by Google AdMob in the free version
Local usage events, and optional shared usage statistics only if you enable sharing in a build with a configured endpoint

How data is handled:

Habit and progress data are primarily stored on-device. Widgets use an on-device Apple App Group.
If you enable iCloud Sync, manual habits and their history and notes sync through your private Apple CloudKit database to devices using the same Apple account. Those records are not sent to our analytics service.
HealthKit-linked habits, including related histories retained after disconnecting Apple Health, are excluded from this app's CloudKit sync.
HealthKit data is read only for habit tracking and is not sold, shared with advertisers, or used for advertising or marketing
Simple Habits does not write data to HealthKit
Your paired Apple Watch receives habit names, goals and current progress through Apple's WatchConnectivity. Offline check-ins remain queued until your phone acknowledges a save.
Subscription and purchase processing is handled by Apple
If ads are shown, Google AdMob may process device or advertising identifiers, IP address and approximate location, advertising and ad-interaction information, product interactions, crash data, diagnostics and performance signals under Google's policies.

Tracking/Advertising:

Simple Habits may display Google AdMob banner ads in the free experience. It requests non-personalized ads and uses Google User Messaging Platform to check applicable consent requirements before allowing ad requests.
Non-personalized advertising does not mean no data is collected. Google may use contextual information, approximate location, identifiers, frequency capping, fraud prevention, ad measurement and diagnostics to deliver and measure ads.
Available advertising privacy choices can be reopened from Privacy & Usage. We do not provide your habit content, HealthKit data or optional usage statistics to Google for ad targeting.
HealthKit data is never used for ads, tracking, or marketing
Purchasing Simple Habits Premium removes ads in the premium experience

Optional usage statistics:

Usage sharing is off by default and may be unavailable in some builds. When you enable Share Usage Statistics in a build with a configured endpoint, the app sends an event ID, timestamp, random installation identifier, app version/build, and limited feature, experiment, paywall and purchase information to our service hosted by Netlify.
Purchase events may include product and plan, transaction identifier, purchase amount and currency. Our service replaces installation and transaction identifiers with keyed pseudonyms before persistent storage. These statistics are pseudonymous, not anonymous.
Habit names, habit IDs, notes, raw progress amounts, HealthKit event names and health values are excluded from these uploads. We use shared statistics to understand activation, retention, feature usage and purchase conversion, not to target ads.
Raw service events become eligible for deletion 90 days after receipt; an hourly maintenance job removes expired records on its next successful run. Local history and pending queues have bounded event counts.
Netlify also processes network and technical information such as IP addresses to host and protect the service under its Privacy Statement. Our event store does not persist IP addresses or device advertising identifiers.

Choices and deletion:

Turning usage sharing off clears unsent events and stops future uploads, but cannot recall a request already transmitted. Clear Usage Data clears the local event history and pending upload queue, not server records or iCloud data. Some app settings, installation identifiers and activity bookkeeping remain.
To request access or deletion of shared usage records, contact us first. We may ask for event or installation identifiers to locate records and verify the request. Do not send habit histories, health information, or a complete export unless we explain which information is needed.
Turning iCloud Sync off stops future syncing but does not erase records already in iCloud. Manage stored iCloud app data through Apple's iCloud settings. A synced habit deletion retains a deletion marker to prevent an older device from restoring it unintentionally.
You control whether progress images include habit names and where exports or images are sent through Apple's share sheet. The destination you choose receives that shared content.
Deleting the app removes its ordinary local app storage but does not automatically delete iCloud, backups or previously transmitted usage records. Manage Health permissions, reminders and subscriptions through Apple's settings.

9.2 Ripple Wave Puzzle

What the app does:
Ripple is a puzzle game with Voyage levels, Daily and weekly Impossible puzzles, Game Center features, sharing, and premium unlocks. Features and controls vary by app version.

Data used by the app:

Gameplay and progress data, such as levels, puzzle results, streaks, moves, lives, settings and badges
Purchase entitlement status for Ripple Premium
Game Center profile, achievement and leaderboard information when you use Game Center
Progress, settings and related game state synchronized through Apple’s iCloud key-value storage when available
Local gameplay and diagnostic events, which can include random installation and session identifiers, timestamps, app version/build, and gameplay, purchase-flow and advertising-event details
Advertising and consent information processed by Google AdMob and Google User Messaging Platform, including device or advertising identifiers, IP-derived approximate location, ad and product interactions, diagnostics, performance information and crash data
Content you choose to share, including supported puzzle invitations and results

Local storage and diagnostics:

Ripple automatically stores limited gameplay and diagnostic events on your device. Event details and available export controls vary by version. Records with random identifiers are pseudonymous rather than anonymous.
Our first-party analytics uploads are currently disabled. Where an export option is available, you choose whether to send a file; the people and services you select receive its contents.
Local event histories and pending queues are limited by event counts rather than a fixed number of days. A separate recording toggle and complete diagnostic erase control are not currently available in the app.
Some identity and game-attempt information is stored in iOS Keychain. Deleting the app may not erase that information or records retained in iCloud or backups. Contact us for help with available deletion steps.

Apple services and sharing:

When iCloud is available for your Apple account, Ripple may automatically synchronize progress, settings and related game state. The current app does not provide a separate in-app sync switch. Apple account and device settings affect iCloud availability.
Apple StoreKit handles purchases. We do not receive your full payment-card details.
If you use Game Center, Apple processes account, profile, achievement and leaderboard data.
When you share a supported puzzle invitation or result, the content may include your Game Center display name, an invitation identifier, puzzle details and your result. The people and services you choose receive that content and may retain or forward it.

Advertising and privacy choices:

Ripple may display Google AdMob rewarded and banner ads in the free experience. It requests non-personalized ads.
Non-personalized ads are not selected using your past behavior across apps or websites, but Google may still process contextual information, approximate location, identifiers, frequency-capping information, fraud-prevention signals, ad measurement and diagnostics.
Google advertising and consent services may initialize and process technical or consent information before an ad is displayed. Purchasing Ripple Premium removes displayed ads; it does not necessarily stop all Google-service initialization or processing.
Ripple uses Google User Messaging Platform to check applicable consent requirements. When available, advertising privacy choices can be reopened from Privacy Choices in Ripple settings. iOS also provides system privacy controls.
The current versions do not request App Tracking Transparency permission. This does not mean that no data is processed; Apple’s tracking permission and regional advertising consent are separate controls.

9.3 Simply Done: Daily Tasks

What the app does:
Simply Done helps you manage tasks, recurring tasks, archives, completion history and focus/check-in workflows. Cloud features and privacy controls depend on your app version.

Data used by the app:

Task titles, notes, subtasks, priorities, status, recurrence, archive/completion state and timestamps
Completion and focus history, themes, settings and reminder preferences
Purchase entitlement status for Simply Done Pro, including monthly, annual or lifetime access where offered
Notification permissions and reminder schedules
Advertising and consent information handled by Google AdMob and Google User Messaging Platform

Storage and Apple services:

Core task and preference data is stored on-device. In versions that support iCloud sync, task content and completion/focus history can also synchronize automatically through Apple’s private CloudKit database for your Apple account.
Synchronization depends on iCloud availability and the app version. The app can continue to use local storage when cloud synchronization is unavailable. A separate in-app sync switch is not currently available.
Widget display values are shared between the app and widget through on-device Apple App Groups.
Apple StoreKit handles purchases. We do not receive your full payment-card details.

Advertising and privacy choices:

Simply Done may display Google AdMob banner ads in the free experience and requests non-personalized ads. Google may process device or advertising identifiers, IP address and approximate location, ad and product interactions, diagnostics, performance information and crash data.
Google User Messaging Platform checks applicable consent requirements before ad requests. When available, you can reopen advertising privacy choices from Privacy Choices in settings.
Consent and advertising services may initialize and process technical information before an ad appears. Purchasing Simply Done Pro removes displayed ads; it does not necessarily stop all service initialization or processing.

Your choices:

Manage tasks and history using available in-app controls. Where cloud sync is supported, changes may synchronize to other devices using the same Apple account.
Deleting Simply Done does not automatically erase information already stored in iCloud or backups. Manage stored iCloud data through Apple’s available account and device settings.
Disable reminders in the app or iOS notification settings, and manage or cancel subscriptions in Apple’s subscription settings.

9.4 CardBoard+

What the app does:
CardBoard+ is a scorekeeping and game-night utility for board games, card games, dice games, and other tabletop games. It supports saved games, timers, dice, turn tracking, player statistics, result sharing, and optional live spectators.

Data used by the app:

First names or nicknames entered for players
Player and team names
Game titles, presets, notes, rules, and scoring settings
Scores, rounds, turns, timers, dice values, winners, and game history
In-progress game drafts and completed-game statistics
Optional live spectator data, invite codes, status, and timestamps
Optional share text or images you choose to send through the iOS share sheet
Purchase entitlement status for the Game Night Pass and original-player ad-free access
Optional ad-related data processed by Google AdMob in the free version, including device or advertising identifiers, coarse location or IP-derived location signals, ad interactions, advertising data, diagnostics, performance data, and crash data
Optional privacy or consent choices handled through Google User Messaging Platform where required or available

How data is handled:

Core game data is stored locally and may sync through your private iCloud database when iCloud sync is enabled.
Private iCloud data is not visible to Cape Fear Devs through Apple’s developer portal.
Live spectator sharing begins only when the scorekeeper explicitly creates an invitation.
Spectator records are stored temporarily in the app’s public CloudKit database and are read-only for spectators.
Spectators access a game using the six-character code, invite link, or QR code provided by the scorekeeper.
CardBoard+ does not require a Cape Fear Devs account.
If ads are shown, Google AdMob may process device and advertising identifiers, coarse location or IP-derived location signals, ad interaction data, advertising data, diagnostics, performance data, and crash data under Google’s policies.
CardBoard+ does not share player names, scores, game history, or spectator content with Google for ad targeting.
CardBoard+ does not use gameplay data for advertising, marketing, profiling, or cross-app tracking.

Tracking/Advertising:

CardBoard+ may display Google AdMob banner ads in the free experience.
CardBoard+ requests non-personalized ads. Google may still use contextual information, approximate location, device or advertising identifiers, frequency capping, fraud prevention, ad measurement, and diagnostics or performance signals to deliver and measure ads.
The current CardBoard+ build does not request App Tracking Transparency permission. This does not mean that no data is processed; Apple’s tracking permission and regional advertising consent are separate controls.
You can use iOS privacy settings and any available in-app consent controls to manage regional privacy choices.
Original 1.0 customers and customers who purchase the Game Night Pass receive an ad-free experience.

Retention and user choices:

Active spectator sessions are treated as expired after 24 hours without an update.
Finished spectator results are treated as expired after 7 days.
Stopping spectator mode or discarding the shared game requests deletion of its public spectator record.
You can delete games and history in the app and can manage private iCloud data through Apple’s iCloud settings.
You control whether content is shared through the iOS share sheet.

10. International Users

Cape Fear Devs operates from the United States. Apple, Google, Microsoft and Netlify may process information in the countries where they operate, which may differ from your country. Storage locations and handling depend on the service and your account settings; their privacy information is linked in Section 6.

Where European or UK data-protection law applies to our processing, the relevant legal basis depends on the purpose: providing services you request, our legitimate interests in supporting and protecting our apps and website, compliance with legal obligations, or your consent where required, including for optional health-data access or advertising-related processing. You may withdraw consent through available controls or contact us. Withdrawing consent does not affect the lawfulness of processing already carried out.

For rights requests governed by EU or UK data-protection law, we will respond within the applicable one-month period. If a lawful extension applies, we will explain the reason and revised deadline within the required time. Use the request and complaint routes in Section 8. You may complain to your relevant data-protection authority and seek a judicial remedy where available. Contact us for information about the processing or international transfers relevant to your use of our services.

11. Changes to This Policy

We will update the Effective Date when this notice changes. For material changes, we will provide additional notice and obtain consent or offer withdrawal or other choices where applicable law requires, including where a change would affect previously collected information. A policy update alone does not authorize materially different processing that requires consent.

12. Contact Us

For privacy questions or requests:

Philip Fairchild, operating under the Cape Fear Devs brand
Connecticut, United States
Email: philanco@hotmail.com