Privacy Policy

Information We Collect

We collect only what is necessary to provide the app's features:

• Account email and password — used to create and authenticate your parent account
• User ID — a unique identifier generated when you register, used to link your account to your data
• Child profile data — the name, age group, and avatar you choose when setting up a child profile
• Learning progress — XP points, daily streaks, completed stories and challenges, stored per child profile
• Subscription status — whether your account has an active premium subscription

We do not collect precise location, contacts, photos, or any device sensors.

How We Use Your Information

• Authenticate you and keep your account secure
• Save and restore each child's learning progress across devices
• Manage your premium subscription and unlock content accordingly
• Respond to support requests you send us

We do not use your information for advertising, profiling, or any purpose other than operating the app.

Children's Privacy

CodeTales is designed for children aged 6–14, used under parental supervision. Parent accounts are required to set up child profiles. We do not knowingly collect personal information directly from children — child profiles contain only a first name, an age group, and a chosen avatar.

If you believe a child has provided personal information without parental consent, please contact us and we will delete it promptly.

In-App Purchases

Premium subscriptions are processed entirely by Apple through the App Store. We do not collect or store your payment card details. Subscription management is handled via RevenueCat, which receives anonymised purchase receipts to verify entitlement status.

To cancel a subscription, go to Settings → Apple ID → Subscriptions on your iPhone.

Third-Party Services

We use a small number of trusted services to operate the app:

Data Storage and Security

Your data is stored on Supabase infrastructure with encryption at rest and in transit. We use industry-standard HTTPS for all network communication. Access to user data is restricted and not shared with any unauthorised parties.

Your Rights

You may request access to, correction of, or deletion of your personal data at any time. To delete your account and all associated data, use the Delete Account option in the app's Settings screen, or contact us directly.

If you are located in the European Economic Area, you have additional rights under GDPR, including the right to data portability and to lodge a complaint with your local supervisory authority.

Changes to This Policy

If we make material changes to this policy, we will update the effective date at the top of this page. Continued use of the app after changes are posted constitutes acceptance of the revised policy.