PENNY'S DRAGON ACADEMY

Privacy Policy

Effective September 28, 2026

This policy covers Penny's Dragon Academy at penny-game.tonygwu.com, including Adventure, Practice, Parents and Profiles. For privacy questions or requests, contact the project's operator at tonygwu@gmail.com.

Information we collect

• Parent accounts. When you sign in with Google, Google and our authentication provider, Supabase, supply and store your account identifier, email address and basic profile information, which can include your name and profile picture. We do not receive your Google password or request access to Gmail, Drive or contacts. Existing email accounts use Supabase authentication.
• Family settings. We store the family name, each child's display name and grade, selected learning topics and difficulty settings, and any vocabulary or education-pack content a parent supplies. Use a nickname for a child; a full legal name, birth date and child's email address are not required.
• Learning and game progress. Paired profiles store activity answers and drafts, help use, completion history, game settings, rewards, inventory and adventure progress. Recovery copies, imported saves and save revisions help restore progress and handle conflicting saves.
• Device connections. We store authentication and device identifiers, parent-approved child links, temporary pairing codes and related timestamps. A child does not need a Google account to pair a device.
• Technical and support information. Hosting and authentication providers process connection information such as IP addresses, browser details, request times and error or security logs. If you email us, we receive your email address and the information you include.

How we use information

We use this information to sign parents in, separate family profiles, apply learning settings, save and recover progress, connect approved devices, secure the service and respond to support or privacy requests. Learning records support the game's feedback and progression; they are not a formal assessment of a child's abilities.

We do not run advertising, install advertising trackers, sell or rent personal information, or share it for targeted advertising. The app does not include third-party audience analytics.

Children and parent controls

Parent accounts and cloud-profile setup are intended for a parent or legal guardian. The parent creates the child's profile, chooses learning settings and approves device pairing. Child profiles are not public, and the app has no public profile directory or public chat. Do not put sensitive personal information into vocabulary examples, story answers or uploaded files.

A parent can review education settings, export cloud progress and revoke a device in Parents. Revoking a device stops its cloud access when it next connects; it does not erase copies already stored on that device. To review other stored information, correct account or child-profile details, request deletion, or stop further collection for a child, email tonygwu@gmail.com. We will verify your authority over the family before providing or deleting its records.

Storage on your device

The app uses browser storage for saves, settings, sign-in sessions, paired profiles and pending cloud updates. Original unpaired game progress stays in that browser unless you explicitly export it or import it into a cloud child profile. Loading the website still sends normal connection information to our hosting provider.

Signing a parent out does not remove a child's separate device connection. Clearing this site's browser data removes local sessions and saves, but does not delete cloud records. Export any progress you want to keep first. Downloaded exports are files you control and can contain family or learning information.

Service providers and disclosures

• Cloudflare delivers and protects the website. See Cloudflare's Privacy Policy.
• Supabase provides account authentication, the family database and cloud progress storage. See Supabase's Privacy Policy.
• Google authenticates parents who choose Google sign-in. Google also handles messages sent to our Gmail contact address. See Google's Privacy Policy.

These providers process information to deliver their services and may process it outside your country. Family information is available to authorized family accounts, approved devices within their permitted access, and the operator when needed for administration or support. We may also disclose information when required by law or necessary to address fraud, abuse or a security incident.

Retention, deletion and security

Cloud family records and recovery history are retained to support your saved profiles and progress. The app currently has no automatic inactivity deletion or self-service account-deletion button. To end cloud storage, request deletion at tonygwu@gmail.com; please send the request from your parent account's email and do not send passwords or sign-in codes. We can remove the associated account, child profiles and cloud progress after verifying the request. Local copies and exports must be removed on your devices separately.

Service-provider backups and security logs can remain for their applicable retention periods, and records may need to be retained to meet a legal obligation. The app uses encrypted connections, account authentication and database access rules, but no system can guarantee absolute security.

Changes and contact

We will update this page and its effective date when our information practices change. If a change requires additional notice or permission, we will provide it before using information in that new way. Questions and privacy requests: tonygwu@gmail.com.