home

privacy policy

last updated: september 5, 2026 · version 1.3.

overview

jack maguire island, or jmgi, is developed by ryan guild. nearby channels connect participating devices through bluetooth or a local network. nearby use does not require a jmgi account or an internet connection.

private online fleets are optional. they use an internet connection and the icloud account already signed in on your device. jmgi does not display ads, sell personal information, or include analytics, advertising, or in-app tracking software.

information on your device

jmgi stores vessel identity and contact information, settings, nearby messages and audio, delivery state, queued and carried messages, hidden messages, blocked senders, and optional plain-text message logs. it also stores captain's log notes, gather history and trivia scores, passage progress, and cached online messages and attachments.

your vessel name may be a call sign. the app uses cryptographic keys and internal identifiers to recognize the same vessel across connections and name changes. a vessel identity authenticates an app identity, not a person's real-world identity. identity keys may remain in the device keychain after the app is deleted.

sensitive app-managed message, audio, courier, and media storage uses device data protection. app-managed courier and media storage is excluded from ordinary device backup. exports, screenshots, and copies saved in another app have that destination's storage and backup behavior.

nearby communication

participating devices exchange the vessel information and content needed to communicate. direct links are authenticated and encrypted. initial bluetooth and local-network advertisements do not contain your vessel name, persistent vessel identity, or icloud account identifier.

devices that forward messages process routing, timing, size, and delivery information. encryption does not hide all communication metadata. other recipients can copy content they receive.

private online fleets

jmgi encrypts private fleet messages, fleet state, and attachments on the sending device before uploading them through apple's cloudkit service. attachment data is stored as encrypted cloud assets. the developer does not receive the keys needed to read private fleet message and attachment content through this service.

fleet participants receive vessel profile information and the content they are authorized to access. internal identifiers connect online profiles with the app's vessel identity. apple processes the icloud account, record ownership, device, timing, size, delivery, and other service information needed to operate cloudkit and notifications, under apple's privacy policy.

a fleet can hold up to 20 vessels. an invitation link can be reused until it expires after seven days, but it does not grant access by itself. the fleet admiral approves each request. new members receive messages sent after they join.

fleet content follows a seven-day history window, with at most the newest 500 messages shown. attachment availability also expires, and the local attachment cache has age and size limits. clearing history removes the fleet's visible history; other members can request that the admiral clear it. deletion of encrypted cloud records is retried by the app as the relevant devices reconnect. physical cloud deletion can be delayed and is not guaranteed to occur at the instant content disappears from the app.

photos, video, audio, files, and links

jmgi receives the photos and files you select through system pickers and the content you explicitly paste. it does not scan your photo library or continuously read the clipboard. selected attachments stay in a draft until you transmit them.

photos and videos sent through the media preparation flow are re-encoded to remove embedded location, device, and other source metadata. this does not remove information visible or audible in the content. ordinary file attachments are copied as files and may still contain document properties, embedded metadata, filenames, or other personal information.

the microphone is used for recordings you start. nearby recording stops on release, interruption, timeout, or backgrounding; jmgi does not record ambient audio in the background. online recordings remain attachments in your draft until you send them. received audio and video do not autoplay.

jmgi does not fetch web-link previews. it shows the destination for confirmation before opening a link outside the app. the browser or destination then handles the visit under its own policies.

permissions and notifications

nearby radio and private fleet message alerts use generic visible text rather than message content, vessel names, or fleet names. ios and icloud control when background work and notifications can occur.

v1.3 does not request device location access. locations you choose to include in messages, links, media, or files can still be shared with recipients.

gather, passage, and apple intelligence

gather participants share the session information, questions, answers, and scores needed to play nearby. completed sessions and scores are stored on participating devices. passage saves its voyage locally; optional nearby assistance exchanges the information needed for that assistance.

where available and enabled, apple intelligence runs on the device to generate trivia, help squelch assess message meaning, or vary passage report wording. these features do not send prompts or messages to a developer-operated ai service. built-in trivia, the standard squelch filter, and passage remain available without these intelligence features.

blocking, reporting, and support email

nearby blocking removes the sender's visible nearby history and last contact from your device, disconnects that vessel, and ignores its future nearby traffic. online blocking hides that sender's messages and alerts without deleting the fleet's shared history.

reporting prepares an email containing the selected message and relevant internal identifiers. your mail app may save or sync the draft. the report is sent only if you choose to send it.

if you send a support email or report, the developer and email providers receive your email address and the content you include, such as message details, attachments, or diagnostics. these may remain in support email records. contact us to request deletion of information held in those records; we cannot delete copies held by other users or their providers.

retention and your choices

nearby conversation views generally retain channel 16 messages for 24 hours, channel 68 messages for one hour, and channel 72 relays for seven days, subject to local storage limits. queued direct texts expire after at most 24 hours. optional text logs are separate from these conversation windows.

menu › settings › clear local messages clears nearby message history, saved nearby audio, local queued and carried content, hidden messages, last contact, and optional in-app message logs. some contact, identity, block-list, and replay-prevention information remains. this action does not erase copies already delivered to another device or delete online fleet history.

clear captain's log separately. use fleet controls to leave a fleet or, as admiral, clear its history or close it. you can revoke permissions, turn alerts off, stop using online fleets, or delete the app. deleting the app removes ordinary local app data, but does not immediately remove cloud records or copies on other devices, and keychain identity keys may remain.

screenshots, exported logs, saved attachments, backups, email, and copies held outside jmgi are not removed by the app's clearing controls.

this website

these pages use no analytics, advertising scripts, tracking cookies, or third-party fonts. the website host receives connection information, such as your ip address and requested page, to serve the site and may retain operational logs. opening the app store, an external link, or an email app is subject to that service's policies.

contact and updates

for privacy questions or requests, email support@jackmaguireisland.com. updates to this policy will appear on this page with a revised date.