Awenwood Privacy Policy

Overview

Awenwood has no advertising, public profiles, public chat, behavioural analytics, or location tracking.

Information used and purposes

An adult email supports passwordless Hearthkeeper sign-in. Family-created names, Young Villager profiles and age bands, Quests, Wishes, bounded family messages, anonymous sign-in and device identifiers, notification tokens and delivery status, Sparks, Village Growth, Meli history, synchronization metadata, minimized security events, and a versioned adult child-participation authorization are used to provide, synchronize, protect, support, and delete the private family service. Awenwood does not request exact birth dates, child email addresses, contacts, or precise location.

Storage, processors, and processing outside Québec

An offline local database is kept on paired devices. Supabase processes authentication, database, and synchronization data; Resend delivers adult sign-in emails; Google Firebase Cloud Messaging provides privacy-safe device notifications; Firebase hosts this public site; and Google Play distributes the Android app. The Production Supabase database is located in Canada Central, while these providers and their subprocessors may process information outside Québec or Canada under their applicable safeguards. Information is not sold or used for advertising.

Security

Network traffic uses encrypted HTTPS connections. Access is scoped by authenticated Huddle membership and approved devices. Guide PINs are stored only as salted digests. No system can eliminate all risk, including the risk of an unlocked or compromised device.

Private family letters and avatars.

Village Postbox lets an authorized adult send a short letter to an individual Young Villager in the same Huddle. Children can choose approved replies; they cannot type unrestricted messages, add attachments, send links or contact people outside their Huddle. Authorized Hearthkeepers can supervise child correspondence. A child's Postbox shows only correspondence involving that child. Sender and recipient names and selected illustrated avatars identify the people involved; avatars are not uploaded photos and do not indicate online presence.

Letters and preset replies are stored on participating devices and synchronized through the family service. The service also records verified receipt/read times and synchronization identifiers. Letter text is not included in diagnostic logs or push-notification previews. This is private family communication, not an end-to-end-encrypted messaging service. Please avoid including sensitive personal information. Existing Huddle/member deletion rules apply; no new automatic 90-day letter deletion period is introduced. The existing privacy contact remains available for access, correction, portability and deletion requests.

Optional sibling letters and Village figures.

A Hearthkeeper can allow selected children in the same Huddle to exchange five preset messages. This starts disabled. Children cannot write their own text, add attachments or contact anyone outside their Huddle. Hearthkeepers can supervise letters and reports and pause access. Children can block a sibling or report an unwanted letter. The service stores the chosen preset, sender and recipient identifiers, delivery and read information, permissions, blocks and reports. An offline letter is not confirmed delivered until the server accepts it. Sibling letters do not award Sparks or generate push-notification previews. Family display names and selected illustrated avatars may appear as Village figures on authorized Huddle devices; their movement does not indicate online presence. Private letter text appears only after authorized opening. Existing deletion rules apply; no new automatic retention period is introduced.

Retention and deletion

Confirmed in-app Huddle and account deletion remove applicable cloud and local information. Hearthkeepers can revoke devices and withdraw a Young Villager’s participation. Archived child information has a 90-day restoration period before child-specific information is deleted or anonymized. Operational records have defined 7-day, 24-hour, 30-day, or 90-day cleanup rules. Change history remains until active devices advance; devices inactive for 90 days must bootstrap. FCM tokens are removed on disable, invalidation, revocation, deletion, or 90 days of inactivity. The public account-deletion page explains how to request deletion without the Android app; account ownership is verified before deletion.

Children and adult authorization

A responsible adult must review a notice and affirmatively authorize participation before child-device pairing. Young Villagers use anonymous sign-in, do not create public profiles, and cannot communicate with strangers. Hearthkeepers can withdraw authorization, revoke access, archive, or request removal of the Young Villager.

Your privacy choices and rights

After we verify appropriate adult authority, you may request access to or correction of applicable personal information, withdraw child-participation authorization, request a portable copy where the law applies, or request account, Huddle, or Young Villager deletion. Withdrawal does not make prior authorized processing unlawful, and narrow records may be retained where required for security, deletion propagation, or law. You may also raise a privacy complaint with our Privacy Officer and, where applicable, seek recourse from the Commission d’accès à l’information du Québec.

Website feedback

Added September 5, 2026: the optional website form collects feedback type, area, language, message and, only if you provide it, an adult contact email. We use this information to improve Awenwood and possibly follow up about your feedback. It does not create an account or a marketing subscription. Feedback and the optional email are scheduled for deletion after 180 days by daily cleanup. Global abuse-prevention counters, without IP addresses or device identifiers, are retained for no more than 30 days. Feedback is not public. Do not include sensitive information about a child. For privacy requests, contact privacy@awenwood.app.

Optional birthdays and Family Reminders

Added October 3, 2026: a Hearthkeeper may record a child’s birthday month and day, without a birth year. The age group remains separately parent-managed. Birthday preferences and annual celebration Memories are private to authorized family devices. Family Reminders store the home timezone, title, date, optional time and note, intended family members, recurrence, notification choices, and read status. These features are optional and do not award Sparks.

A manual Spark adjustment records the authorized Hearthkeeper, amount, optional family-visible message, and transaction identity. Notification prompts do not include birthday dates, reminder details, or adjustment messages. Removing a birthday clears its month and day; existing celebration Memories remain until the child or Huddle is removed. Archiving a child removes their birthday data and Memories and removes them from reminder targets. Deleted reminders retain an identity, revision and scheduling metadata for safe synchronization, without the title, note or target list. Reminder read receipts and operational calendar metadata expire after 90 days; Spark history follows the existing ledger deletion rules.

Contact and changes

Send privacy questions, requests, or complaints to privacy@awenwood.app. We may verify identity and authority while asking only for information reasonably needed for the request. Material changes will update this notice and its date and will be communicated when required.