Privacy Policy

Adult: email, password hash (we never store the password itself), family name, interface language.

Child (entered by the adult): first name or nickname, birth year, interests, quest progress and ⚡ charges. We do not collect a child's photos, email or contacts.

Payments: status, amount, currency and transaction ID. Card details are processed by Paddle; we never see them.

Technical data: IP address, browser and device type, in-app actions (for analytics and security).

To provide the service under our contract: account, season generation, calendar, progress.

To take payments and keep purchase records.

To send service emails: sign-in, confirmations, reminders.

To improve the product and protect the service from abuse (legitimate interest).

A child has no account of their own. All of the child's data is entered and seen by the adult. To generate quests we send the AI only age and interests — never the child's name.

Hetzner Online (Germany) — hosting and database.

OpenAI (USA) — quest generation: the child's age and interests, no name.

Paddle (UK) — payments, invoices, refunds.

PostHog (USA) — product analytics.

Umami — cookie-free visit statistics.

Crisp (France) — support chat on the website.

Email delivery service — service emails.

Telegram — internal notifications to the administrator about sign-ups and payments (email and event, no child data).

We do not sell data or share it with advertisers.

Some providers operate in the USA. Transfers rely on the European Commission's Standard Contractual Clauses or other lawful mechanisms.

Account data is kept while the account exists. After a deletion request it remains in backups for up to 30 days. Payment records are kept as long as tax law requires.

You can get a copy of your data, correct it, delete it, restrict or object to processing, or receive it in a machine-readable format. Write to alexander.burzev@gmail.com; we reply within 30 days.

You can also complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority of your EU country.

We use essential cookies for sign-in and sessions, and PostHog analytics cookies. Umami works without cookies.

Connections use HTTPS, passwords are stored only as hashes, and database access is restricted.

We will email you about material changes to this policy. Data questions: alexander.burzev@gmail.com.