Your family's privacy

This page is a short, plain summary. The official texts are the Privacy Policy and the Terms of Use. If this page and those pages ever differ, they are the ones that count.

The short version

Your children’s names, progress and answers stay in the app, on the device they play on.
There are no ads, no tracking cookies and no analytics. We never sell data.
We only ask for a child’s first name.
Payments are handled by Stripe. We never see your card number.
TimesHero follows Malaysia’s Personal Data Protection Act 2010 (PDPA).

What stays on your device

The app keeps its information in the browser storage of the phone or tablet:

your parent PIN, saved only as a scrambled value, not as the number itself,
your license key, once you buy,
each child’s first name, hero and school year,
each child’s learning: the facts practised, answers, points, Stars, crowns and badges, and the hero.

We cannot see this information. It is deleted when you remove a child, clear the browser’s data for TimesHero, or remove the app.

What our service keeps

Our service runs on Cloudflare. It keeps only what it needs to sell the pass, link a child’s tablet and run live battles.

A purchase record for the Lifetime Pass: the email address you gave Stripe, Stripe’s references, the pass status and your family’s device list. The device list does not contain children’s names.
Tablet links: which family a linked tablet belongs to, and a random identifier for the child, never a name.
A pairing code, for 10 minutes: while a 6-digit code is on the screen, the child’s first name, hero, school year and a copy of their progress, so the tablet can set itself up. This is the only place our service holds a child’s name.
Progress copies for families with the pass and for linked tablets, with no child’s name, so a tablet and your parent phone stay in step.
Short-lived records that remove themselves, such as a checkout in progress and counters that stop abuse.

Live battles, crash reports and feedback

Live battles: the other player sees your child’s first name and hero. Nobody else does. After a short introduction, the game runs directly between the two devices.
Crash reports: when something breaks, the app sends a small report about the error. It has no names, PINs, license keys, email addresses or progress.
Feedback: the feedback form sends us an email. Nothing from it is stored on our service.

Who else handles data

Cloudflare hosts the app and the service.
Stripe takes payments and sends receipts.
Resend sends the license key email and delivers feedback to us.

These companies run networks around the world, so data may be handled outside Malaysia. We use them only to run TimesHero.

Your rights

You can ask for a copy of the personal data we hold about your family, ask us to correct it, ask us to delete it, or withdraw your consent. Write to support@fmbuilt.dev from the email address you used to buy, or include your license key. We answer within 21 days.

Removing a child in the Parent Dashboard, with an internet connection, also deletes that child’s records from our service.