Awenwood Privacy Policy

Overview

Awenwood has no advertising, public profiles, public chat, behavioural analytics, or location tracking.

Information used and purposes

An adult email supports passwordless Hearthkeeper sign-in. Family-created names, Young Villager profiles and age bands, Quests, Wishes, bounded family messages, anonymous sign-in and device identifiers, notification tokens and delivery status, Sparks, Village Growth, Meli history, synchronization metadata, minimized security events, and a versioned adult child-participation authorization are used to provide, synchronize, protect, support, and delete the private family service. Awenwood does not request exact birth dates, child email addresses, contacts, or precise location.

Storage, processors, and processing outside Québec

An offline local database is kept on paired devices. Supabase processes authentication, database, and synchronization data; Resend delivers adult sign-in emails; Google Firebase Cloud Messaging provides privacy-safe device notifications; Firebase hosts this public site; and Google Play distributes the Android app. The Production Supabase database is located in Canada Central, while these providers and their subprocessors may process information outside Québec or Canada under their applicable safeguards. Information is not sold or used for advertising.

Security

Network traffic uses encrypted HTTPS connections. Access is scoped by authenticated Huddle membership and approved devices. Guide PINs are stored only as salted digests. No system can eliminate all risk, including the risk of an unlocked or compromised device.

Retention and deletion

Confirmed in-app Huddle and account deletion remove applicable cloud and local information. Hearthkeepers can revoke devices and withdraw a Young Villager’s participation. Archived child information has a 90-day restoration period before child-specific information is deleted or anonymized. Operational records have defined 7-day, 24-hour, 30-day, or 90-day cleanup rules. Change history remains until active devices advance; devices inactive for 90 days must bootstrap. FCM tokens are removed on disable, invalidation, revocation, deletion, or 90 days of inactivity. The public account-deletion page explains how to request deletion without the Android app; account ownership is verified before deletion.

Children and adult authorization

A responsible adult must review a notice and affirmatively authorize participation before child-device pairing. Young Villagers use anonymous sign-in, do not create public profiles, and cannot communicate with strangers. Hearthkeepers can withdraw authorization, revoke access, archive, or request removal of the Young Villager.

Your privacy choices and rights

After we verify appropriate adult authority, you may request access to or correction of applicable personal information, withdraw child-participation authorization, request a portable copy where the law applies, or request account, Huddle, or Young Villager deletion. Withdrawal does not make prior authorized processing unlawful, and narrow records may be retained where required for security, deletion propagation, or law. You may also raise a privacy complaint with our Privacy Officer and, where applicable, seek recourse from the Commission d’accès à l’information du Québec.

Closed Test feedback

Added September 5, 2026: the optional website form collects feedback type, area, language, message and, only if you provide it, an adult contact email. We use this information to improve Awenwood and possibly follow up about your feedback. It does not create an account or a marketing subscription. Feedback and the optional email are scheduled for deletion after 180 days by daily cleanup. Global abuse-prevention counters, without IP addresses or device identifiers, are retained for no more than 30 days. Feedback is not public. Do not include sensitive information about a child. For privacy requests, contact privacy@awenwood.app.

Contact and changes

Send privacy questions, requests, or complaints to privacy@awenwood.app. We may verify identity and authority while asking only for information reasonably needed for the request. Material changes will update this notice and its date and will be communicated when required.