Privacy Notice

What we collect and why

• Keeper account data — name, email address, and sign-in identifiers from Google if you use it. Used to create and secure your account (performance of our contract with you).
• Realm content — Adventurer first names or nicknames, age, reading mode, PINs (stored hashed), balances, quests, treasures, notes and Evening Council answers. Used to provide the service to your family (contract).
• Images you upload — treasure pictures and similar. Used to display them in your realm (contract).
• Technical and security data — IP address, device and browser information, session cookies, sign-in and PIN attempt records. Used to keep realms private and to prevent abuse (legitimate interests in security).
• Support messages — what you send us and our replies. Used to help you (legitimate interests / contract).

Adventurer profiles are created by an adult Keeper. We ask you not to enter more information about a child than your family needs — a first name or nickname is enough.

Artificial intelligence

Some optional Keeper tools (for example suggested Council awards) send the relevant Council answers to an AI model provider to generate a suggestion. Suggestions are advisory; a Keeper always confirms. This content is not used to train third-party models.

Who we share data with

• Hosting, database and authentication providers that run the service for us.
• Paddle.com, our Merchant of Record, for the sale of subscriptions, payments, tax compliance and invoicing. Card details are handled by Paddle and never reach us.
• AI model providers, for the optional features described above.
• Professional advisers (legal, accounting) and authorities where the law requires it.

We do not sell personal data or use it for third-party advertising.

Cookies

We use only essential cookies: a session cookie that keeps a Keeper signed in, and a short-lived signed cookie that identifies an Adventurer’s device after a correct PIN. We do not use advertising cookies.

Retention and deletion

We keep realm data for as long as the realm exists. A Keeper can permanently close a realm from the Royal Charter, which deletes the realm and its records. Closed-realm backups age out within 30 days. Records we must keep for tax or legal reasons are retained for the required period and then deleted or anonymised.

Security

Data is transmitted over encrypted connections and stored with access controls that scope every record to a single realm. PINs are stored hashed and repeated failed attempts lock the device out temporarily. No system is perfect, but we take appropriate technical and organisational measures to protect your family’s information.

Your rights

Depending on where you live, you may ask us to give you a copy of your data, correct it, delete it, restrict or object to processing, or port it elsewhere, and you may withdraw consent where we rely on it. Write to support@crownandacorn.app and we will respond within one month. If you are in the UK or EEA you may also complain to your local supervisory authority. Where data is transferred outside the UK/EEA we rely on adequacy decisions or standard contractual clauses.

Changes

We will post updates to this notice here and announce material changes in the app.