Web-Hero Academy
Privacy Policy
Effective September 11, 2026
Overview
Web-Hero Academy is an educational game designed for children with parent-managed account and purchase features. We aim to collect only the information reasonably needed to provide, protect, and improve the app.
Information we collect
Children can use the free experience without creating an account. We do not require a child email address, phone number, photo, precise location, or date of birth.
If a parent creates a Parent Account or uses parent-facing features, Web-Hero Academy may process:
- the parent's email address and authentication information;
- an optional Hero nickname used for personalization;
- game progress, preferences, and unlock state;
- feedback submitted by the parent, including feedback category, message, app version, and platform;
- purchase and entitlement information required to unlock or restore Full Academy; and
- technical information reasonably necessary to operate, secure, and troubleshoot the app.
Parents should use a nickname rather than a child's full legal name.
Guest play and local data
Guest progress, preferences, and nickname personalization may be stored locally on the device. Local app data can generally be removed by clearing Web-Hero Academy's app storage or uninstalling the app.
Parent Accounts
Parent Account authentication and cloud data are provided through Supabase. On Android, Web-Hero Academy stores Parent Account session tokens in encrypted Android Keystore-backed storage. Parent Account information is used to authenticate the parent and, where applicable, save or restore cloud progress and purchase access.
Purchases
Full Academy is a one-time in-app purchase. Payment is processed by the applicable app store, including Google Play on Android. Diab Does Data LLC does not receive or store full payment-card details.
RevenueCat is used to help manage purchase entitlements and purchase restoration. Web-Hero Academy and these providers may process purchase identifiers, entitlement status, store transaction information, and an app-specific account identifier needed to verify or restore access.
Feedback and support
If a signed-in parent submits feedback inside the app, the message, category, app version, platform, and Parent Account identifier may be stored so we can investigate bugs, respond to feedback, and improve the product.
How we use information
We use information only as reasonably necessary to authenticate Parent Accounts, save progress and preferences, personalize the educational experience, verify Full Academy access and restore purchases, provide support, investigate bugs, protect the security and integrity of the app, and improve Web-Hero Academy.
Advertising and sale of data
Web-Hero Academy does not include third-party advertising in the current release. Diab Does Data LLC does not sell personal information for monetary consideration.
Service providers
We use service providers that process information on our behalf or as needed to provide their services, including Supabase for Parent Accounts and cloud data, RevenueCat for purchase entitlement management, and the applicable mobile app store for purchases.
Data retention and deletion
Parent Account information is retained while the account is active or as reasonably necessary to provide the service, comply with legal obligations, resolve disputes, and protect the service. A parent can use the in-app Delete Parent Account action to delete the Parent Account and its associated cloud data.
If the app is no longer installed or available, a parent can request deletion through our public Web-Hero Academy account deletion page.
Local Guest progress on the device is kept unless the user separately clears app data or uninstalls the app. Store transaction records may also be retained by Google, Apple, RevenueCat, or other payment providers according to their own legal and operational requirements.
Children's privacy
Web-Hero Academy is designed so children can use the core free experience without providing direct contact information. Parent-facing actions, including Parent Account creation and purchases, are separated from child gameplay. Parents should not enter unnecessary personal information about a child into nickname or feedback fields.
Security
We use technical safeguards intended to protect account and purchase information, including encrypted native session storage on Android, restricted cloud access controls, encrypted network connections, and platform-provided payment systems. No system can guarantee absolute security.
Changes to this policy
We may update this Privacy Policy as Web-Hero Academy changes. When material changes are published, the effective date at the top of this page will be updated.
Contact us
Questions, privacy requests, or account-deletion questions can be sent to contact@diabdoesdata.com.