Privacy Policy

Only a parent or legal guardian can create and manage a family account. Children do not create independent accounts and never enter an email address or phone number.

The parent or legal guardian creates the child profile, provides consent for the child's profile and activities, and can review, edit or delete it from the parent area.

Email address and/or phone number, used to sign in, to recover the account and to send service emails.

A 4-digit PIN chosen by the parent, used only to keep children out of the parent area.

Orders and requests the parent makes (for example a MyRugy Box request) and support messages the parent sends us.

If the parent signs in with Google or WhatsApp, we receive the identifier needed to recognise the account on the next sign-in.

First name (or nickname), birth year, gender and chosen avatar, entered by the parent so the game can speak to the child correctly and choose age-appropriate content.

Game progress: adventures completed, experience points, badges, village pins, streaks and language choice.

Photos the child or parent uploads as proof of real weaving work, and any file attached to a support message.

We do not ask a child for an email address, a phone number, a precise location, or contact details of any kind.

To find and fix faults, our private Game Health system records error categories, page templates, browser and operating-system families, language, app version, timing and a short list of named actions. A temporary session identifier connects these events; for a signed-in parent it may be associated with the parent account. We also count basic steps such as opening an activity or saving progress.

Diagnostics do not record screens, typed text, PINs, sign-in codes, payment details or child profile identifiers. They are processed in our existing Supabase database and visible only to authorised administrators. A parent may choose whether to attach diagnostic context to a support report. Daily maintenance on incoming activity clears technical diagnostics older than 30 days. For diagnostic abuse prevention, IP addresses are transformed into a daily changing hash, cleared after two days. Separately, when a parent is signed in, we retain the latest connection IP, device category, operating system, browser, approximate city/region/country inferred from the IP (not GPS), and observation time with the account for support and security. This replaces the previous connection, is shared with our authorised Kechart OS family-support staff, and is removed when the account is deleted.

The app contains no third-party advertising, no ad network and no advertising identifier.

We do not sell personal data and we do not use it to profile a child for marketing.

Myrugy processes personal data in accordance with Morocco Law No. 09-08 on the protection of individuals with regard to the processing of personal data and, where it applies, the requirements of the General Data Protection Regulation (GDPR).

Depending on the purpose, processing is necessary to provide the family service requested by the parent, meet legal obligations, protect the service and its users, or is based on the parent or legal guardian's consent. The parent or legal guardian provides consent for the child's profile and activities and may withdraw consent or request deletion by using the parent controls or contacting us.

Weaving proof photos are chosen by the parent or child from the device and uploaded to a private Cloudflare R2 bucket. They are never public: they are only shown through short-lived signed links to the parent and to our review team.

The photos are used to verify a real-world weaving step and to show the child's own work inside their Museum. They are not published anywhere else.

If the parent allows notifications, Apple issues a device token that we store against the parent account so we can send progress reminders and new-adventure announcements. The parent can turn notifications off in the app or in iOS settings, which stops them.

Supabase — accounts, authentication and the game database.

Cloudflare R2 — private storage for uploaded photos and support attachments; Cloudflare Images and Cloudflare Stream — game artwork and video delivery.

Resend — transactional email (verification, password reset, account notices).

WhatsApp Business messaging — sign-in codes and account messages for parents who choose WhatsApp.

Apple Push Notification service — delivery of notifications.

Kechart CRM — the parent's account, order and support details are synchronised so our team can manage orders and support. Kechart CRM acts as our service provider and processor, handles this data only on Myrugy's instructions, and may not use it for its own advertising or independent purposes.

App account, child profile, progress and uploaded photos are kept while the family account is open. The in-app deletion process starts after the parent's identity is verified. We normally complete deletion and other privacy requests within 30 days. Personal data is never kept longer than necessary for the purpose for which it was collected.

If we must keep records for accounting, tax, fraud-prevention or another legal obligation, we retain only what that obligation requires, keep it separate from active play data, restrict access, and anonymise or delete it when the retention duty ends.

If any step cannot be completed automatically, the request is recorded with a reference number, appears in our internal register and is completed by our team as part of the same 30-day process.

A parent can review, correct or delete a child profile in the app. Parent area → Settings → Delete family account erases the guardian account, every child profile, all progress, the uploaded photos, the support conversations and the sign-in itself, after the parent re-enters their PIN or password.

We normally complete deletion and other privacy requests within 30 days. If any part cannot be erased automatically, the app records a tracked request with a reference number for our team to complete. Email support@myrugy.com with the reference shown on screen if you want an update.

Copies held by services outside this app — our customer messaging and CRM system, WhatsApp/Meta and our payment provider — may require manual action. Our team includes them in the same deletion follow-up and applies any legal retention duty described above.

A parent can ask for a copy of the data held about their family using the same address.

Only an adult parent or legal guardian can open and manage the family account. That adult supplies and consents to the child's profile information and activities, and can review, correct or erase them from the parent area.

All traffic uses HTTPS. Uploaded files sit in a private bucket reached only through short-lived signed links. Connector credentials and service keys are held in a server-side vault and are never sent to the app.

Questions about this policy: support@myrugy.com — Myrugy Sarl, Zone Industrielle Al Massar, Lot 106, 1er étage, Marrakech, Morocco.