Privacy Policy

Who this policy is for

HeroForge is a service for parents and guardians. A parent creates the account and provides limited information about their child so the experience can be personalized. We do not knowingly allow children to create their own accounts or provide information directly to us without a parent.

What we collect

We collect only what the service needs to work. Specifically:

From the parent / guardian:

• Email address (to create and secure your account, and to send you service messages such as session reminders and account notices)
• Authentication information needed to log you in securely

About the child (provided by the parent):

• The child's first name or nickname
• The child's gender (used to show the correct version of the story characters and language)
• The child's age (used to tailor the content to your child's stage — we do not collect an exact date of birth)
• The parent's answers to the optional "Compass" questionnaire about the child
• The child's progress through the sessions

We do not collect the child's full name, exact date of birth, photograph, location, contacts, or any biometric data. We do not ask the child to provide information directly.

Technical information:

• A device notification token, if you enable notifications, so we can send reminders to your device
• Basic, aggregated usage information needed to operate and improve the service (for example, whether a session was completed). We do not use advertising trackers or advertising identifiers in the app.

Payment information:

• Payments are processed by our payment provider (Moyasar). We do not store your card number. We keep a record that a subscription was purchased, its plan, and its status.

How we use information

We use the information above to:

• Provide the daily sessions and personalize them for your child
• Save your child's progress so you can continue where you left off
• Send you service messages you would expect: session reminders, a weekly summary of your child's activity, and important account or payment notices
• Process and manage your subscription
• Keep the service secure and working correctly

We do not sell your information. We do not use your or your child's information for third-party advertising. We do not show ads in the app.

Notifications

If you allow notifications, we send occasional, gentle reminders (for example, that a new session is ready) and a weekly summary. You can turn notifications off at any time from your device settings, and you can unsubscribe from email messages using the link in any email we send.

Who we share information with

We share information only with the service providers that make HeroForge work, and only as needed:

• Supabase — secure database and account authentication
• Moyasar — payment processing (they handle card details, not us)
• Google Firebase (Cloud Messaging) — delivering notifications to your device
• Resend — sending service emails
• Vercel — hosting the service

These providers process information on our behalf under their own security and privacy obligations. We do not share information with advertisers.

We may disclose information if required by law, or to protect the safety, rights, or security of our users or the service.

How long we keep information

We keep account and progress information for as long as your account is active. If you close your account or ask us to delete your data, we delete it, except where we must keep limited records for legal or financial reasons (for example, proof of a transaction).

Your choices and rights

You can:

• Access or correct your information by contacting us
• Delete your account and associated data by contacting support@myheroforge.com
• Turn off notifications in your device settings
• Unsubscribe from emails using the link in any email

Because the account belongs to the parent/guardian, you are always in control of the limited information about your child.

Children's privacy

HeroForge is intended to be used by children with their parent or guardian. We collect only a first name/nickname and gender about the child, provided by the parent, and only to personalize the experience. We do not knowingly collect more than this, we do not let children make purchases, and we do not direct advertising to children (we show no ads at all). If you believe we have inadvertently collected information from a child without a parent's involvement, contact us and we will delete it.

Security

We use industry-standard measures to protect information, including encrypted connections and access controls. No system is perfectly secure, but we work to protect your information and to limit what we collect in the first place.

Changes to this policy

If we change this policy, we will update the date above and, for significant changes, notify you through the app or by email.

Contact

Questions about this policy or your data:

support@myheroforge.com

WhatsApp: +966 50 472 7799

HeroForge