🏠1. Who We Are
Everland is developed and operated by Fantastic Labs SL. We are the data controller for the personal information described in this policy. If you have questions, see the Contact Us section.
📋2. Information We Collect
We collect only the information needed to provide and improve the Everland experience.
| Category | What We Collect | Why |
|---|---|---|
| Parent account | Email address, display name, Sign in with Apple identifier | Create and authenticate your account |
| Parent questionnaire | Household type, morning vibe score, stress level, connection score, morning priorities | Personalise your morning routine recommendations |
| Child profile | First name, age, chosen character | Power the in-app adventure and XP system |
| Progress data | Completed tasks, XP earned, level, streaks, badges, session timestamps | Track progress and sync across devices |
| Routine settings | Wake-up time, selected routine tasks, task order | Customise and schedule your family's morning routine |
| Anonymous analytics | Aggregated, anonymised app usage events (no personal or child data) | Understand how the app is used and improve it |
⚙️3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and improve the Everland app
- Sync your family's progress across devices via our cloud backend (Supabase)
- Authenticate you securely (email/password or Sign in with Apple)
- Personalise routine recommendations based on your questionnaire answers
- Send important service-related communications (account security, policy updates)
- Analyse anonymised usage patterns to improve features and fix bugs
We do not use your information for targeted advertising, and we do not sell your data to third parties.
🧒4. Children's Privacy
Everland is a parent-controlled app. Only parents can access and operate the app — children never interact with account settings, data, or any controls directly. All child profile data is entered by a parent or guardian and is accessible only through the parent's authenticated account.
We do not share, and will never share, any data relating to a child with any third party — under any circumstances. Child data is used solely to power the in-app experience for your family and for nothing else.
We comply with the Children's Online Privacy Protection Act (COPPA) and applicable international children's privacy laws. We do not knowingly direct Everland at children under 13 as independent users, and we do not knowingly collect personal information directly from children without verifiable parental consent.
If you believe we have inadvertently collected personal information from a child without appropriate consent, please contact us immediately and we will delete it promptly.
🔐5. Device Permissions
Everland requests only the permissions it actually needs:
🛡️6. How We Store & Protect Your Data
Your data is stored in two places:
- On your device — using Apple's SwiftData framework and the iOS Keychain. Authentication tokens and your parental PIN hash are stored in the encrypted Keychain, never in plain text.
- In the cloud — on Supabase (hosted on AWS), protected by TLS in transit and encryption at rest. Access is controlled by row-level security policies so each account can only access its own data.
We take reasonable technical and organisational measures to protect against unauthorised access, loss, or disclosure. No system is 100% secure, but we continuously review and improve our security practices.
🔗7. Third-Party Services
We use a small number of carefully chosen third-party services:
| Service | Purpose | Data shared |
|---|---|---|
| Supabase | Cloud database & authentication backend | Account and progress data |
| Apple Sign In | Passwordless authentication option | Apple-assigned user ID, optional name/email |
| Anonymous analytics provider | App usage insights | Anonymised, aggregated events only — no personal data |
We do not share your personal information with any other third parties, advertisers, or data brokers.
🗓️8. Data Retention
We keep your account and family data for as long as you use Everland. If you delete your account:
- Your personal data and child profiles are deleted from our servers within 30 days.
- Anonymised, aggregated analytics (which cannot identify you) may be retained for product improvement purposes.
- We may retain data for longer if required by law.
✅9. Your Rights
Depending on where you live, you may have the following rights regarding your personal data:
To exercise any of these rights, contact us at the address below. We will respond within 30 days.
🌍10. International Data Transfers
Everland is operated from the United Kingdom. If you use the app from outside the UK or EU, your data may be transferred to and processed in countries with different data protection laws. Where required, we rely on appropriate safeguards (such as Standard Contractual Clauses) to protect your data during any such transfers.
📝11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you in the app and update the effective date at the top of this page. Continued use of Everland after changes are posted constitutes your acceptance of the revised policy.
💬12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out:
Fantastic Labs SL
Privacy enquiries & data deletion requests welcome.