Further to above. I have subsequently tried lots of ways and it seems impossible to extract any personal information from creatorUserRecordID without permission granted by the user, or if the cloudkit is set up as shared use. So I am assuming creatorUserRecordID is a not a privacy issue or classified as data collection because it is simply part of cloudkit infrastructure but basically a dead reference without user permission. So the reference that says "Every user of the app has a unique user record that is empty by default. Apps can add data to the user record on behalf of the user, but don’t store sensitive data in it" means the creatorUserRecordID is just a ID created for that user especially for that container and is not linked to their device or personal details unless the user grants the creatorUserRecordID to gain access to their CKUserIdentity. So if permission is not given the creatorUserRecordID is basically just a random reference that only the user has control over. If someone more expert than me could clarify if this is correct it would be most useful, so that I can simply ask the user if they are happy to submit their score, without any further concern over data collection or privacy. Thank you

Thanks. That all makes sense And reassuring to know as my current set up is working well for my needs. Thank you