Privacy Policy

Account information. If you sign in with an email address, we store that address. If you play as a guest, we do not have one, a guest account has no email attached to it at all. We also store a display name and your timezone (the timezone is used to work out when your day rolls over).

What you write. The titles and notes of your quests and habits, and their due dates. This is the part worth being explicit about: people write real things in a to-do list, health, money, relationships. We store this so the app can show it back to you. We do not sell it, and we do not use it to target advertising.

Gameplay. Your character, stats, level, items, gold and gems, battle history, and any party you belong to. Members of a party can see the gameplay activity you contribute to that party.

Purchases. If you buy gems, we store what you bought, the amount, and identifiers from our payment processor. We never see or store your card number.

Subscription. If you subscribe, we store your subscription status, which plan you are on, when the current billing period ends, whether it is set to cancel, and the customer and subscription identifiers our payment processor gives us. We use this only to work out whether your account has access. Your card details stay with Stripe.

Usage analytics. Which pages you visit and how you interact with the app, along with browser, device type and approximate location derived from your IP address. This is linked to your account identifier so we can understand how real players progress. We do not record your screen, session replay is switched off.

Technical logs. Our hosting providers keep standard server logs, including IP addresses, for security and debugging.

• To run the game, there is no Adventurefy without your quests and character.
• To sign you in and keep your account secure.
• To take payment for gems and to handle refunds and disputes.
• To understand what is and is not working, so we can improve it.
• To meet legal and accounting obligations.

We use a small number of service providers. They only process data on our instructions, for the purposes above.

• Supabase, database, authentication and backend hosting.
• Vercel, website hosting and delivery.
• Stripe, payment processing. Stripe handles card details directly.
• Resend, sending sign-in emails.
• PostHog, product analytics.

We do not sell your personal information, and we do not share it with advertisers. We may disclose information if we are legally required to, or to protect the service and its users from harm.

Our infrastructure is hosted in the United States. If you use Adventurefy from elsewhere, your information will be transferred to and processed there.

We keep your sign-in session in your browser’s local storage, that is what keeps you logged in. Our analytics provider sets identifiers to recognise a returning browser. We do not use advertising or cross-site tracking cookies.

We keep your account data for as long as your account exists. Records of payments are kept longer where accounting and tax rules require it, and financial ledger entries are append-only by design, they are never edited or deleted, because an auditable record of who was charged what is the only way to keep the game economy honest.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, and to object to some processing. To exercise any of these, email hello@adventurefyapp.com.

Being straight with you about deletion: there is no delete-my-account button in the app yet. Deletion is handled manually when you ask, and we will confirm when it is done. Because the payment ledger is append-only, records of purchases are retained even after an account is removed, with personal details detached where we can.

Adventurefy is for people aged 13 and over. We do not knowingly collect information from children under 13. If you believe a child under 13 has given us information, email us and we will delete it.

Access to your data is restricted at the database level, so one account cannot read another’s. Traffic is encrypted in transit. No service can promise perfect security, but we take it seriously and design for it.

We will update this page when our practices change, and we will change the date at the top. If a change is significant, we will tell you in the app or by email.

Questions, requests, or complaints: hello@adventurefyapp.com.