CubeTimer Privacy Policy
CubeTimer is a speedcubing timer made by Dong Huang ("I", "me"). This policy explains what the app stores, what it sends off your iPhone, and what you can do about it.
The short version
- Your practice solves stay on your devices and in your own private iCloud. Their times and scrambles are never uploaded to the app's server.
- Apart from syncing through your own iCloud, nothing leaves your device unless you sign in to the optional Sharing feature.
- If you do sign in, only a display name, an optional profile photo, a friend code, weekly totals and the five times of any daily challenge you play are shared, and only with friends whose requests you accepted.
- No ads, no analytics, no tracking, and no data is sold.
Data that stays on your devices
Practice solve times, scrambles, timestamps, training plans, goals, coach insights and settings are stored locally on your iPhone. I have no access to them. They are deleted when you delete the app, and they may be included in device backups that you control (for example, iCloud Backup).
If you are signed in to iCloud, your solves, training plans and goals are also synced through your private iCloud database (Apple's CloudKit) to your other devices that use the same Apple Account. That copy is stored by Apple under your account, counts toward your iCloud storage, and I have no access to it. Settings and coach insights are not synced. Deleting all solve data in the app also deletes the solves from iCloud and your other devices; deleting the app alone leaves the iCloud copy in place, and you can remove it from your iCloud storage settings.
Data collected when you use Sharing
Sharing is optional. If you sign in with Apple, the following is stored on the app's server:
- Account identifier and email address provided by Sign in with Apple. If you choose "Hide My Email", this is an Apple relay address. Your email is never shown to other users. The app also asks Apple for your name, only to suggest a display name when you first sign in; it stays on your iPhone and reaches the server only if you keep it as your display name.
- Display name that you choose, and a randomly generated friend code. The server checks each new display name against a list of words that are not allowed.
- Agreement to the Community Guidelines: which version you agreed to, and when.
- Profile photo, only if you set one: a small square copy of the picture you choose, re-encoded on your iPhone so that location and other photo metadata are removed before upload.
- Weekly totals for each training plan: number of solves, best single, best average of 5, and streak length. Individual practice solves are never uploaded.
- Daily challenge results, only if you start a daily challenge: for each of the five attempts, its time, any penalty (+2 or DNF), and when its scramble was shown and its time submitted; plus when you started, how many backup scrambles you used, your average and your best single. The scrambles are the same for everyone and come from the server.
- Friend relationships: friend requests, friendships, and people you have blocked.
- Reports you submit about another user: the reason and any note you write.
- Friend code lookups: when you looked one up, so that guessing codes can be rate limited.
How the data is used
Only to run Sharing: showing your display name, profile photo, weekly totals and daily challenge results to friends you accepted, running the daily challenge, letting people send you friend requests by code, keeping you signed in, and keeping the feature safe (blocking, reporting and rate limits). It is not used for advertising or profiling, and it is not sold or shared for anyone else's purposes.
Who can see what
- Friends whose requests you accepted can see your display name, profile photo and weekly totals.
- They can see your daily challenge results only after they have finished that day's challenge themselves, or once the day is over. Until then they only learn how many friends have finished.
- When you send someone a friend request, they see your display name and profile photo in their requests. Nothing else about you is visible to them unless they accept.
- A person you report is not told about the report. I review every report within 24 hours, and remove a reported name or profile photo, or delete an account used to harass people or share objectionable content, as the Community Guidelines describe.
Service providers
- Supabase hosts the database and sign-in service and processes this data on my behalf. Like most hosting services, it may keep technical logs such as IP addresses for a limited time for security and operations.
- Apple provides Sign in with Apple, under Apple's own privacy policy.
Retention and deletion
Sharing data is kept while your account exists. Signing out does not delete it. Daily challenge results are the exception: they are deleted automatically after 30 days.
To delete your account, go to Me → your name at the top → Delete account in the app. This permanently removes your account, display name, profile photo, friend code, friendships, friend requests, blocks, reports made by or about you, all uploaded weekly totals and all daily challenge results, and also revokes CubeTimer's Sign in with Apple access to your Apple Account. The solves on your iPhone are not affected. You can also email me to ask for deletion, and you can stop using Sign in with Apple for CubeTimer in your iPhone's Settings.
Security
All network traffic uses HTTPS. Database access rules ensure that only you and friends you accepted can read your data. Your sign-in credential is stored in the iOS Keychain.
Children
Sharing is not intended for children under 13. If you believe a child under 13 has created an account, contact me and I will delete it.
Your rights
You can change your display name or profile photo in the app at any time, remove the photo, and delete your account as described above. Depending on where you live, you may have further rights to access or correct your data. Email me to make a request.
Changes to this policy
If this policy changes, the updated version will be posted on this page with a new effective date.
Contact
Dong Huang · huangdgm@gmail.com