Who looks after your information?
Tweed Technology Limited is responsible for Hero Academy and is the controller of personal data processed to provide it. We are registered in England and Wales, company number 07820713. Our registered address is Clavering House, Clavering Place, Newcastle upon Tyne, England, NE1 3NG.
Contact [email protected] about privacy, access, correction or deletion. Our company privacy policy lists ICO registration ZC115765.
This notice covers heroacademy.app, Reading Adventure, NumberQuest and ChoreQuest. It explains the child-facing services specifically. The company’s general privacy policy also describes its wider business; its statement that those general services do not address under-13s does not describe Hero Academy.
What information is used?
| Where | Information | Where it goes |
|---|---|---|
| Homepage | Network and security information such as IP address, requested page and browser information. | Hosting and security providers serving the website. This homepage has no advertising, analytics SDK, sign-up form or tracking pixels. |
| Reading Adventure | Hero nickname, appearance, completed activities, attempts and accessibility or voice settings. | Stored in your browser on your device. The game code does not send these progress records to us. |
| NumberQuest | Player nicknames, appearance, points, progress, answers, practice records and settings. | Stored in your browser on your device. The game code does not send these progress records to us. |
| ChoreQuest | Parent/carer email, household membership, child nickname and appearance, chores, schedules, approvals, points or money records, paired devices, security and audit records. | Stored online to operate the household service. Child access uses pairing and a PIN where configured, without a child email address. |
| Support | Your contact details and the information you choose to send us. | Used to answer and resolve your request. |
Please use a child’s nickname rather than their full name. Do not put addresses, school details, health information or other sensitive information into hero names or chore descriptions. ChoreQuest does not currently support photo uploads or process bank/card payments. Recording a reward or payment does not move money.
Reading and NumberQuest use your device’s speech feature only when you request it. They do not use the microphone or record your child’s voice. Voice availability and any online voice processing depend on the device and voice provider you choose.
Why we use it
We use the information needed to run the adventures, remember progress, manage household permissions, approve chores and rewards, protect accounts and respond to support requests. We do not sell children’s information, use it for targeted advertising, or build advertising profiles.
For the parent’s account and household service, our basis is performing our agreement with the adult. For proportionate security, service operation and support, including the minimum child records needed for a parent-managed household, we rely on legitimate interests, taking children’s rights and interests into account. We rely on legal obligations where the law requires records or disclosure. If an optional future feature needs consent, we will explain it and obtain the appropriate consent before enabling it; accepting a privacy policy is not itself consent for every use of data.
There are no public child profiles or public chat in these services. ChoreQuest records are available to the household members according to their role and permissions. Grown-ups should check who they invite and revoke devices they no longer use. We do not make legal or similarly significant automated decisions about a child.
Who helps deliver the service?
Cloudflare provides the main website and NumberQuest hosting and security, plus ChoreQuest’s application, database and related storage. GitHub Pages hosts the Reading website. ChoreQuest uses Cloudflare Turnstile for account and pairing security and Resend for sign-in and invitation emails when email sign-in is enabled. Email delivery uses the adult’s email address and the relevant message; children do not need email accounts.
These providers may process network, account or message data in countries outside the UK. Appropriate contractual safeguards, such as the relevant UK transfer terms or an applicable adequacy arrangement, are required where applicable. We do not promise UK-only hosting. We may also disclose information where legally required, to protect the service, or to professional advisers bound by confidentiality.
Provider information: Cloudflare privacy, GitHub privacy, and Resend privacy.
Saving, keeping and deleting information
Reading and NumberQuest keep local progress until it is reset, the browser removes it, or you clear that site’s data. Saved backup files remain wherever you put them. The websites, a home-screen shortcut and a future installed app may have separate storage; progress does not automatically sync between them.
ChoreQuest keeps active household, chore and reward records while needed for the household service. Its maintenance process removes expired sign-in links, sessions, pairing data and rate-limit records; operational application logs are scheduled for removal after 30 days and audit records after one year. Financial and household records currently remain until household deletion unless a lawful retention requirement applies. Hosting/security-provider logs and backups follow the provider’s retention arrangements and may take additional time to expire.
A household owner can use ChoreQuest’s authenticated export and deletion controls. Account deletion requires dealing with owned households first. Some account references may be pseudonymised to maintain records belonging to another household. Contact us if you need help or want to request deletion of a child’s information. We may need to verify your authority to protect the family’s records.
Your choices and rights
You and your child have rights to information about processing and, where applicable, access, correction, erasure, restriction, portability and objection. Where processing relies on consent, it can be withdrawn. Contact [email protected]; please do not send passwords, PINs or sign-in links.
You can complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint. You do not have to contact us first. We would welcome the opportunity to help.
See Cookies & storage for device controls and Help & contact for a clear route to request account or household deletion.
Changes and the mobile app
The iPhone and Android app is being prepared and is not yet available in the stores. Before release, this notice and the store privacy disclosures must reflect the final app’s storage, permissions, providers and account flows. A future feature that changes how information is used will be explained before it is introduced.
We update the date on this page when it changes and will provide a prominent notice or an appropriate account message for material changes affecting your family.