1. Overview

My apps are designed with privacy as a default. Most operate entirely on-device and do not require you to create an account or transmit personal data to any server I operate.

Some do talk to a server I run, and their own sections say exactly what is sent. In the Benefits: UK Child Benefits iOS app, the only part that does is its Local support directory; its calculator website also sends anonymous usage statistics (section 10). Neither involves an account, and nothing you enter into the calculator leaves your device. CHRO sends nothing at all (section 11). AstroSelf keeps your details on your device but asks a public astronomy service for planet positions; section 13 says exactly what it sends.

Slow6, my board game, runs online play and optional accounts on a server I run; section 12 sets out what it keeps. This website is covered in section 14.

Where data is collected — for example through optional crash reporting — it is collected only to the extent necessary to maintain and improve the app.

2. Data I Collect

The type and extent of data collected varies by app. The following describes categories of data that may be collected across my apps:

Data You Provide

Some apps allow you to enter information — such as numerical inputs or preferences — to generate results. This is processed locally on your device and is not transmitted to me or any third party, unless an app’s own section says otherwise (AstroSelf sends your birth date and time to a public astronomy service — see section 13).

Usage & Diagnostic Data

Where enabled, I may collect anonymised crash reports and basic usage analytics. This may include:

• App version and iOS version
• Device model and general device characteristics (not a unique identifier)
• Crash logs and error reports
• General feature usage patterns

This data does not identify you personally. You can control this via iOS Settings under Privacy & Security → Analytics & Improvements.

Data Not Collected

Unless explicitly stated within a specific app’s section (Slow6 accounts are the exception — see section 12; AstroSelf keeps a birthplace you enter on your device only — see section 13), I do not collect:

• Name, email address, or contact information
• Location data
• Financial or payment information
• Health or biometric data
• Camera or microphone data
• Contacts, photos, or files from your device

3. How I Use Data

Any data collected from within my apps is used solely to identify and fix bugs, understand how features are used, ensure the app functions correctly across devices, and comply with legal obligations. I do not use app data for profiling or targeted advertising.

This website does not display advertising or set cookies; how it counts visits is in section 14.

4. Sharing & Service Providers

I do not sell, rent, or trade your personal information to any third party. Data may be shared only with service providers who assist in crash reporting, who host this website, who run the Local support directory and website statistics of Benefits: UK Child Benefits (section 10), or who run Slow6 (section 12) — in each case under data processing agreements, except the public astronomy service that AstroSelf asks for planet positions, which is not my service provider and has no agreement with me (section 13) — when required by law, or in the event of an ownership transfer (with advance notice to users).

Apple

All apps are distributed via the Apple App Store and may use Apple frameworks. Apple’s practices are governed by Apple’s Privacy Policy. Where an app uses an Apple service directly (the Family Hub maps in Benefits, Apple Maps place search in AstroSelf, and Sign in with Apple, notifications and Messages in Slow6), its section says so.

Cloudflare

Cloudflare hosts this website, the Benefits calculator website and its directory service, and Slow6, as a data processor on my behalf. See the Cloudflare Privacy Policy.

ephemeris.fyi & Netlify

AstroSelf asks the public ephemeris.fyi service (hosted by Netlify) for planet positions. It is not a service provider acting for me and I have no agreement with it; what is sent to it is set out in section 13.

Resend

Resend sends Slow6’s emails (section 12).

Crash & Analytics Reporting

Where used, crash reporting tools receive only anonymised technical data. No personally identifiable information is included. Specific tools in use are named in the relevant App Store listing.

5. Storage & Security

Data entered within the app is stored locally on your device using iOS standard mechanisms, protected by your device’s built-in security including passcode encryption. Where diagnostic data is transmitted, it is encrypted in transit using TLS.

Each product’s section says what it keeps in your browser or on your device, and what, if anything, it keeps on a server.

6. Data Retention

Local data is retained until you delete the app or clear its data via iOS Settings. Anonymised diagnostic data held by third-party providers is typically retained for 30–90 days. The Benefits calculator website’s usage statistics are kept for 90 days (section 10), and Slow6’s own retention periods are in section 12. AstroSelf keeps its data on your device until you remove the person or delete the app (section 13).

7. Your Rights Under UK GDPR

As a data subject under UK GDPR, you have the right to: access your data, have inaccurate data corrected, request erasure, restrict or object to processing, and receive your data in a portable format. My apps do not use automated decision-making.

Right to Complain

You may lodge a complaint with the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113.

8. Children’s Privacy

My apps are not directed at children under 13. I do not knowingly collect personal data from children. Apps such as family benefit calculators may be used by parents — any information entered is processed locally on the device only. If you believe your child has provided personal information, contact me at alexander@willcox.work.

9. International Data Transfers

This website, the Benefits calculator website and Slow6 are hosted by Cloudflare, which may transfer data to, and process it in, countries outside the UK — including the United States. The UK has recognised the US under the UK-US Data Bridge (an adequacy regulation), which provides a basis for these transfers under UK GDPR.

Data processed within most of my apps stays on your device and is not subject to international transfer. In the Benefits: UK Child Benefits iOS app, the exception is its Local support directory (section 10), which is served from Cloudflare’s global network; requests to it may be handled outside the UK, and carry no information identifying you.

AstroSelf’s requests to the ephemeris.fyi service, which is hosted by Netlify, may be handled outside the UK, including in the United States. They carry no information identifying you other than the IP address that any internet request reveals (section 13).

Slow6’s online play and accounts are held on Cloudflare’s global network, and its emails are sent by Resend, which may process them in the United States.

10. Benefits: UK Child Benefits

Benefits: UK Child Benefits is a calculator for UK family benefits, as an iPhone app and as a website at childbenefits.willcox.work. This section adds to the rest of this policy; where they differ for Benefits, this section applies.

The iPhone App’s Local Support Directory

The iOS app has a Local support area listing local parent groups and Family Hub contact details. Because those listings are added and corrected by other people using the app, the app fetches them once a day from a small directory service I run. Searching the Family Hub, childcare and local group lists never goes online: they are stored in the app, so your postcode is matched on your own phone.

Fetching the list sends nothing about you. If you add a group, add details for a Family Hub, or report a listing, the app sends that form to the same service with no name, no email address and no device identifier attached — only what you typed. Nothing from the calculator itself (income, household details, dates of birth or results) is ever included. As with any internet request, the service sees the IP address it came from; it keeps only a one-way hash of that for one hour, to stop a single connection flooding the directory.

The service runs on Cloudflare Workers and Cloudflare KV. Cloudflare processes those requests and stores the directory as a data processor on my behalf; I am the controller for the listings it holds.

Maps

The small map shown on a Family Hub comes from Apple, so Apple can see the area shown, as it would if you opened Maps. Nothing you entered into the app is sent with it. Apple’s handling of that request is covered by Apple’s Privacy Policy.

The Calculator Website

The website works out your results in your browser, and nothing you enter into the calculator leaves it. It sets no cookies. Your answers, up to ten previous results and a few settings are kept in your browser’s local storage until you clear them.

It counts visits with Cloudflare Web Analytics, which uses no cookies and does not recognise you between visits or across sites. It also sends short, anonymous notes about how the calculator is used — for example which screens you open and for how long, which check you choose, when a calculation finishes, the kind of device and browser, and any technical errors — to the same service I run for the app’s directory. The notes never include anything you enter into the calculator, your IP address is not stored with them, and each visit gets a random number that is never saved on your device. They are kept for 90 days.

The notes are off if your browser sends a Global Privacy Control or Do Not Track signal, and you can switch them off yourself. The website’s own Privacy Policy, linked from its welcome screen, describes them in full and has the switch.

11. CHRO

CHRO is an iPhone app that adds vintage-lens colour fringing to photos and video. This section adds to the rest of this policy.

Permissions

CHRO asks for the camera, to show its live viewfinder; the microphone, to record sound when you shoot video; and your photo library, to choose photos and videos to edit and to save the results. Each is used only on your device and only when you use that feature. You can change these permissions at any time in iOS Settings.

You can also open a photo in CHRO from the share sheet in Photos, Files and other apps; it is handled on your device in the same way.

Diagnostics

If you have chosen to share analytics with app developers in iOS Settings, Apple may pass me anonymised crash reports, as described in section 2.

12. Slow6

Slow6 is a board game you can play at slow6.willcox.work, in the Slow6 iPhone app and in Slow6 for iMessage. This section explains what Slow6 collects and why. It adds to the rest of this policy; where they differ for Slow6, this section applies.

On Your Device

Your settings, daily streak, archive progress, codes for online games in progress and, if you're signed in, your sign-in token are stored on your own device and used by the game. They aren't sent to me except as described below.

Anonymous Game Records

When a game finishes, Slow6 sends a record of it: the rules in use, both starting line-ups, who moved first, the moves, the result and final score, the game mode, which computer opponent (if any), the platform (web, iPhone app or iMessage) and the app version. After a Beta lab game, your thumbs up or down is sent the same way. These records contain no name, email address, account ID or device ID, and I don't store IP addresses with them. I use them only to study and improve the game's balance. An online game is only recorded if both players have sharing switched on.

Anonymous Usage Data

To understand how people use and find their way around Slow6, the game sends short usage events: when it opens, which screens you open (for example the home screen, How to play or Challenges), when you start and finish a game (its mode, Classic or Powers, which computer opponent, the result, how long it took and how many moves), tutorial and challenge progress, which powers you use, when you share, forfeit, restart or ask for a rematch, when you turn sound on or off, open an explanation, send feedback or sign in (not who you are), and error messages. Each event carries a random ID created on your device (so I can tell one device's visits apart), a session ID, the platform and the app version. This ID is not linked to your account, name or email, and I don't store IP addresses with these events.

Both kinds are switched off together in How to play → Privacy → Share anonymous usage and game data.

Online Games

When you play someone online, my server runs the game: it stores the moves, the display name you choose, and a random code that lets your device rejoin the game. Your opponent sees your display name.

Accounts (Optional)

If you create an account, I store:

• your email address, and your password as a salted, one-way hash (never the password itself); or, if you use Sign in with Apple, the identifier Apple gives me, your email address or Apple's private relay address, your name if you choose to share it, and a token Apple provides so I can revoke Sign in with Apple when you delete your account;
• your display name and a friend code;
• your game history and stats: results, final scores, points, who you played and when, and which challenges you've completed;
• your friends, friend requests and game challenges;
• sign-in sessions, stored only as one-way hashes;
• if you allow notifications in the iPhone app, a push token from Apple, used to tell you when it's your move or time is running out in an online game, and removed when you sign out;
• a count of failed sign-ins for an email address, used only to slow down password guessing and cleared when you next sign in.

What Other Players See

Your display name in games. Your friends, people with a pending friend request with you, and anyone you've played online can see your profile: display name, points, record, streaks and your games against them. Once you've played 3 online games while signed in, your display name and online record (games played, wins, draws, win rate and points) appear on the worldwide leaderboard, which anyone can see. If your display name is an email address, only its first few characters are shown (for example "ale•••"). You can change your display name at any time.

Emails & Feedback

If you ask to reset your password, Slow6 emails you a link that works for an hour. If you send feedback or a suggestion from the game, your message is emailed to me with the app version, the kind of device and where in the game you sent it from; if you add your email address, it's included so I can reply, but that's optional. Emails are sent for me by Resend, an email service.

Hosting

Slow6 runs on Cloudflare. Like any website, Cloudflare handles your IP address and basic request details to deliver the service, and briefly counts requests per connection to protect it from abuse; I don't store IP addresses in Slow6's own records. The Slow6 website loads nothing from anyone else: no ads, analytics or third-party fonts.

How I Use It, and the Legal Basis

• To run the game, online play and your account: necessary to provide the service you asked for (contract).
• Anonymous game records and usage data, to balance and improve the game: legitimate interests. They aren't linked to you, and you can opt out.
• To keep the service secure, for example limiting repeated failed sign-ins: legitimate interests.

Who It's Shared With

I don't sell or rent Slow6 data or share it for advertising. The service providers are Cloudflare, Inc. (hosting, storage and delivery, on servers worldwide), Apple (Sign in with Apple, notifications and Messages, if you use them) and Resend (sending emails).

How Long It's Kept

• Invitations nobody accepts: 24 hours. Online games: 30 days after the last move.
• Account data, history and friends: until you delete your account. Sign-in sessions: up to 180 days.
• Password reset links: one hour.
• Anonymous game records: kept, because they contain no personal data.
• Anonymous usage events: 90 days.

Your Choices

• Delete your account: Your account → Delete account. This removes your account, game history, points, friends, challenges and notification tokens, and revokes Sign in with Apple if you used it. Games you played online stay in your opponents' own histories, under the display name you had then.
• Stop sharing game records and usage data: How to play → Privacy.
• Your other rights, and how to contact me, are in sections 7 and 15. Like my other apps, Slow6 is not directed at children under 13 (section 8).

13. AstroSelf

AstroSelf is an iPhone app that shows a daily “Cosmic Score” and readings from several astrology traditions, calculated from the birth details you enter. This section adds to sections 1–9; where they differ, this section applies to AstroSelf.

What AstroSelf keeps on your device

For each person you add, the app stores the name you give, a birth date, an optional birth time, and an optional birthplace (the place name, its coordinates and its time zone). It also stores your settings (such as the reminder time), the charts and scores it has calculated, and the latest score for the home-screen widget. All of this stays on your iPhone, protected by your device’s security, and is shared only between the app and its widget. I do not have access to it. It is included in your iPhone’s own backups (iCloud or a computer) if you use them, and deleting the app does not delete those backups. If saved data ever becomes unreadable, the app keeps a copy of it on the phone until you remove a person.

What is sent, and to whom

The planet positions are calculated by ephemeris.fyi, a free, open-source astronomy service run by a third party; I do not operate it. When you add or edit a person — and again if the saved chart is no longer on your phone — the app asks it for:

• the positions of the planets at the moment of your birth, and 12 hours either side (to tell whether a planet was moving backwards), and the aspects between them — this is your birth date and, if you added one, your birth time (otherwise noon);
• separately, whenever you open or refresh the app or browse the Calendar, the positions of the planets on the dates involved (now and 12 hours either side, or each day shown). These requests do not relate to your birth.

These requests use a fixed reference location instead of your birthplace, and never include your name, your birthplace or any account or device identifier, beyond the standard details every request carries (such as the app and iOS version). Like any request over the internet, they reveal your IP address to the service and its host. ephemeris.fyi states in its privacy policy that it does not store, log or collect personal data; it is hosted by Netlify, which may collect operational and security data (see Netlify’s privacy policy). I have no agreement with either of them.

Your birthplace itself never leaves your device except for the place search below. The app keeps the answers it receives on your phone so it can work offline.

Place search

When you type a birthplace, the app uses Apple’s Maps search and geocoding to suggest places and find their coordinates and time zone. What you type is sent to Apple under Apple’s Privacy Policy. If a person was saved by an early version without a time zone, the app also asks Apple for the time zone of their saved coordinates. AstroSelf does not ask for your device’s location, and the birthplace is optional.

Reminders and the widget

The optional daily reminder is a notification scheduled on your iPhone; no server is involved. The widget reads the latest score the app saved on your device. You can turn the reminder off in the app or in iOS Settings.

Subscriptions

AstroSelf offers an optional paid subscription (monthly or yearly) that unlocks the full dashboard. Purchases are handled entirely by Apple through the App Store, under Apple’s standard terms; I am not given your name, payment details or Apple ID, only the App Store’s confirmation, on your phone, that a subscription is active. You can manage or cancel it in your Apple ID settings.

Deleting your data

Removing a person in the app’s Settings deletes their details and the charts and scores stored for them. Deleting the app deletes everything it holds. Because I do not receive this data, there is nothing for me to erase on my side; the sections above explain what the services named here may hold.

Reflection, not advice

AstroSelf is for reflection and entertainment. Its scores and readings are not predictions and are not medical, financial, legal or other professional advice.

14. This Website

Hosting & Analytics

This website is hosted on Cloudflare Pages and uses Cloudflare Web Analytics to count page views. It sets no cookies and does not build a profile of you; Cloudflare processes basic request data (such as IP address and browser type) to serve the site and produce aggregate statistics. See the Cloudflare Privacy Policy.

Fonts

The site’s fonts are served from willcox.work itself, so loading a page does not tell any font provider that you visited.

On Your Device

This website stores a single preference (your chosen light/dark theme) in your browser’s localStorage. This data stays on your device and is never transmitted.

Playing Slow6 Here

The Apps page lets you play Slow6 without leaving it. Nothing is loaded from slow6.willcox.work until you choose to play; once you do, you are using Slow6 and section 12 applies.

15. Changes to This Policy

I may update this policy to reflect changes in law, data practices, or app features. Material changes will be communicated via the App Store listing. The date at the top indicates when the policy was last revised.

16. Contact

I aim to respond to all privacy enquiries within 14 days, and within one calendar month as required by the UK GDPR.