Privacy Policy
- A parent or guardian creates the account. We never ask a child for personal information.
- We collect only what the app needs to work: a parent's email, a first name and age for each child, and their progress.
- There are no ads in the app, no chat or messaging, and we never sell or share family data for marketing.
- You can see, correct or delete your family's data at any time by emailing us.
1. Who we are
Kingdom Legacy is operated by Delon Temo, trading as Kingdom Legacy (ABN [ABN]), a sole trader in Australia ("we", "us"). We are responsible for the personal information we hold, and we handle it under the Australian Privacy Act 1988 and the Australian Privacy Principles. Families outside Australia are covered by the same practices, and for families in the United States we follow the Children's Online Privacy Protection Act (COPPA) approach described in section 4.
Questions or requests: delon.temo@gmail.com.
2. What we collect
| Who | Information | Why |
|---|---|---|
| Parent or guardian | Email address and a password (the password is handled by Google Firebase Authentication and is never visible to us), an optional family name, notification preferences | To create and secure your family account, sign you in, and send the emails you choose |
| Each child profile | First name or nickname, age in years, a chosen avatar, and optionally a photo the parent adds. A photo is reduced to a small avatar (at most 300 pixels) on the device before it is saved, is kept only inside your family's own record, and is shown only within your family's account. It is never shown on Family Hub party screens and never sent to any other service. | To show each child their own profile and pitch lessons to their age |
| Each child profile | Progress: stories read, lessons and games completed, scores, badges, daily quest counters, last active date | To save progress so a child can continue where they left off |
| Subscription | Plan (Free, Plus, Premium or Church & School), trial start and end dates, and, once payments are enabled, a subscription reference from Apple, Google or our web payment provider. Card details are entered on their screens, never on ours; we never see or store card numbers. | To know which stages your family can open |
| Family Hub party (the TV and phones) | When a phone joins a party it is signed in anonymously. The room keeps the player name the family typed, the avatar chosen and that night's scores | To run the party on the TV; the room record is not linked to a child's profile and holds no photo |
| Website visitors | If you join the waitlist: your email address, first name and number of children | To email you once when the trial opens |
We do not collect location, contacts, device identifiers for advertising, or any information from a child directly. Children do not enter email addresses, passwords or messages anywhere in the app.
3. How we use it
- Run the app: sign-in, profiles, saving progress, opening the stages you have access to.
- Keep the service safe: preventing abuse of the sign-in system and protecting your account.
- Talk to you: transactional emails such as password resets and trial notices, and, if you opt in, a weekly progress summary. Marketing emails are only sent to parents who joined the waitlist or asked for them, and every one has an unsubscribe link.
- Improve the app using aggregated, de-identified usage counts (for example how many families finished a stage). We do not build advertising profiles.
4. Children's privacy
Kingdom Legacy is designed for families with children aged three to twelve and is set up and controlled by a parent or guardian. In practice this means:
- Only a parent should create an account, add or remove a child profile, or add a photo; the hero set-up is written for parents. Starting a trial and subscribing sit behind a parent check that a young child cannot pass.
- We collect the minimum information about a child needed to run the app (a first name or nickname, an age, progress) and only from the parent.
- There is no chat, no messaging, no public profiles, no user-generated content visible to anyone outside the family, and no advertising.
- A child's photo is optional. It is used only as the child's avatar inside your family's account, is never used to train any software, and can be removed by the parent at any time by choosing a built-in avatar or deleting the profile. We recommend the built-in avatars for younger children.
- A parent can review, correct or delete a child's information at any time (section 7). For families in the United States this is your right under COPPA; we honour it for everyone.
5. Who we share it with
We do not sell personal information and we do not share it with advertisers. The only organisations that handle your data on our behalf are the service providers we need to run the app:
- Google Firebase (Google LLC): sign-in, database and hosting. Data is stored in Google Cloud data centres and protected by Google's security programme.
- Apple, Google or a web payment provider once paid subscriptions are enabled. They process card details under their own privacy policy; we receive only a confirmation and a subscription reference.
- An email service for the emails described in section 3.
We may also disclose information if the law requires it, or to protect the safety of a child or the security of the service.
6. Cookies, analytics and advertising on the website
The app itself sets no advertising cookies and contains no advertising. On the website we may use advertising platform tools (such as the Meta or TikTok pixel) to measure whether our own ads brought you here. These tools may set cookies in your browser; you can block them in your browser settings and the website will still work. We never place these tools inside the app that children use.
7. Your rights: access, correction and deletion
Email delon.temo@gmail.com from the address on your account and we will, within 30 days:
- send you a copy of the information we hold about your family;
- correct anything that is wrong;
- delete your family account, every child profile and all progress. Deletion is permanent.
You can do this yourself at any time in the app: open the Parent Dashboard and choose "Delete my family's account". You can also remove a child profile or a photo at any time from the family settings. If you are unhappy with how we handled a request you may complain to us first, and then to the Office of the Australian Information Commissioner (oaic.gov.au).
8. How long we keep it
We keep account and progress data while your account exists. When you delete your account it is removed from our live database at once and from any backup within 35 days. Family Hub party rooms are temporary and hold no child profile. Waitlist emails are deleted or moved to your account within 90 days of launch.
9. Security
Data is encrypted in transit and at rest by Google Cloud. Every family's data is locked to that family's sign-in by database security rules, so no other user of the app can read it. Passwords are never stored by us. We restrict who can access production data and review the app's security before each release. No internet service is perfectly secure; if we ever believe your data has been exposed we will tell you promptly.
10. Changes to this policy
If we change this policy in a way that matters to you we will email account holders and show a notice in the app before the change takes effect. The date at the top always shows the current version.
11. Contact
Delon Temo, trading as Kingdom Legacy (ABN [ABN])
Australia
delon.temo@gmail.com