Privacy

Ichor: Bloodlines

Last updated: {{LAST_UPDATED}}

What is stored on your device

• The corpus — gods, heroes, relationships, myths, citations and the primary-source passages, in the language you read. Stored in the app's Application Support directory.
• Your photographs — anything you add to My Codex or use for a Bloodline card. These are written to the app's own storage on the device.
• Your preferences — chosen language, tradition filter, monochrome and pattern settings, notification time, which myths you have marked read, which passages you have saved.
• Caches — museum images and API responses, and translations of museum labels. These can be cleared at any time in Altar → Storage.

What Firebase collects

Ichor uses Google Firebase for three things, and nothing else:

• Firestore and Storage — read-only delivery of the corpus and its images. Requests are anonymous. The app never writes to the database.
• Crashlytics — diagnostic reports when the app crashes: device model, OS version, and a stack trace. No corpus content, no photographs, no identifiers you have given us.
• Cloud Messaging and Remote Config — a device push token so the Daily Myth can be delivered, and feature flags. The token identifies a device installation, not a person, and is discarded when you delete the app or turn notifications off.

Your photographs

Photographs you take or choose stay on your device. The marble and mosaic effects on a Bloodline card are applied locally with Core Image; nothing is uploaded to render them. A photograph leaves your device only when you explicitly use the share sheet to send it somewhere.

Translation

Museum labels arrive from the Metropolitan Museum in English and are translated using Apple's on-device Translation framework. That translation happens entirely on your device. Nothing is sent to Apple, and nothing is sent to us. If a language pair is unavailable, the English text is shown as-is.

The Metropolitan Museum of Art

When you view an entity or a myth, Ichor may request artwork records from the Met's public Open Access API. That is a plain anonymous HTTPS request containing a search term — no account, no device identifier, no advertising ID. The Met's own privacy practices apply to their servers. Results are cached on your device so the same request is not made twice.

Children

Ichor is not directed at children under 13 and does not knowingly collect personal information from them. It has no accounts, no messaging, no user-generated content shared with anyone, and no profile.

Deleting your data

Open Altar → Storage → Reset everything. That deletes the downloaded corpus, every photograph you added, and all preferences, returning the app to its first-run state. Deleting the app from your device removes the same data. There is no server-side copy to request the deletion of, because nothing you create is ever sent to a server.

Changes

If this policy changes materially, the updated date at the top of this page changes with it, and the new version is published here before it takes effect.

Contact

Use the form on the support page. It is the only contact route, and it does not require an email address unless you would like a reply.