Nine ThronesYour training, your data.
Nine Thrones keeps only what it needs to score your training fairly. This page explains exactly what that is.
Effective November 8, 2026 · Nine Thrones is made by Florida Brand (“we”, “us”).
1. Offline accounts
An offline account is saved only on your iPhone. Nothing about it is sent to our server, and it can never be moved to an online account. Deleting the app deletes it. (If we add iCloud backup, it will go to your private iCloud account, never to us, and this policy will be updated first.)
2. Online accounts: what our server stores
Online play runs on our server at api-ninethrones.florida-brand.com, hosted by Cloudflare. It stores:
- Your Apple account id. When you sign in with Apple, Apple gives us a random id that's unique to our app. We don't ask for your name or email, and we never see your Apple ID password.
- A device key. Your iPhone makes a private signing key (kept in the Secure Enclave where available) that never leaves the phone. Our server stores only its public half, to check that requests really come from your device.
- Your profile: the display name you choose (optional), your path (throne), and your time zone (so your training day starts at your midnight).
- Your training: for each set, the exercise, the reps or minutes, when it started and finished, whether the camera counted it, and the XP it earned. We use this to score you, enforce fair-play timing and build the leaderboards.
Leaderboards are public. Your display name (or “Hunter” if you haven't set one) and your XP appear on your path's leaderboard and other boards. Pick a display name that isn't your real name if you prefer.
3. The camera
When camera rep counting arrives, the camera will be used only while you choose to count a set. The video is analysed on your iPhone and is never recorded, saved or sent anywhere. Only the rep count and “counted by camera” reach our server.
4. Logs
The server notes each request's type, path, result and timing, plus the first few characters of the device id. It doesn't log your IP address, your account id or what you sent. Your IP address is used for a moment to stop request floods and isn't saved by us. Cloudflare handles network traffic under Cloudflare's privacy policy.
5. What we don't do
- No ads, and no analytics, crash-reporting or advertising SDKs.
- No selling or renting your data, and no sharing it for advertising.
- No access to Apple Health, contacts, photos or location today. If we add Apple Health (for running, walking and cycling), it will be optional, and this policy will say exactly what's read first.
- No cookies or trackers in the app or on this website.
6. Deleting your account
Settings in the app lets you delete your online account. That removes your account, devices, profile, sets, XP and leaderboard entries from our server. Signing out removes only that phone's device key. Request records used to stop replayed requests are deleted within a day.
7. Children
Nine Thrones isn't directed at children under 13. If you believe a child under 13 has given us personal information, email us and we'll delete it.
8. Your choices and rights
- Play offline, so nothing reaches our server.
- Leave your display name blank, change it, or delete your account at any time.
- Ask us for a copy of your data, to correct it or to delete it at tom@florida-brand.com. Depending on where you live (for example in the EU, UK or California), the law gives you these rights. We'll answer within 30 days.
9. Where data is processed
We're based in the United States. Cloudflare may process data in the US and other countries, with its own safeguards.
10. Changes
If we change this policy, we'll update the date at the top. If a change matters, the app will tell you before it takes effect.
11. Contact
Florida Brand · tom@florida-brand.com