Privacy Policy
Effective date: 6/1/2026 · Last updated: 6/1/2026
This Privacy Policy describes how Heroes Veritas (“we,” “us,” “our”) collects, uses, and protects information when you use the Heroes Veritas mobile application (the “App”).
We collect the minimum we need to operate the App and keep your hero’s journey persistent across devices. We do not sell your personal information, we do not use third-party advertising trackers, and we do not require Apple’s App Tracking Transparency permission to be granted.
Information we collect
Account information. When you create an account or sign in with Apple, we collect your email address and your display name (or the name your Apple ID provides via Sign in with Apple, which may be a private relay email). If you sign in with Apple, we receive an opaque Apple user identifier.
Hero / gameplay content. When you go through the Awakening flow and play the App, we store the choices you make as part of your hero’s identity — your hero name, region, origin, wound, calling, virtue, vice, daily oaths, story choices, the Marks you press, the Memoria you earn, the Fox you bond with, and your Chronicle of identity moments. This is the persistent record of who your hero has become and is required for the App to function.
Identifiers. We assign each hero a stable internal user ID (RootID) used to attach all of the above to your account. If you enable push notifications, we store an Expo push token so we can deliver session-relevant pings (e.g., a daily Hearth ready to claim).
Approximate device information and product analytics. We use PostHog to understand how players experience the App — which screens are reached, which rituals are completed, which features are tried. PostHog assigns an anonymous device identifier that becomes associated with your hero’s RootID after you sign in. We do not use this to track you across other apps.
Diagnostics. We use Sentry to receive crash reports and basic performance data when something breaks. Crash reports are tagged only with your RootID; we do not attach your IP address, screen recordings, or other personal context.
Location. When you open the Map to find nearby Veil rifts, the App requests your approximate location (foreground only) and sends your latitude / longitude to our server to return rifts near you. We do not retain your location on the server or associate it with your account — the request is made without your session token and the result is not persisted.
Purchases. If you buy Veil Essence or other in-app purchases, Apple’s App Store handles the payment. Apple does not share your payment details with us; we receive only an Apple-signed transaction receipt that we record (transaction ID, product purchased, environment) so we can credit your account and prevent duplicate redemptions.
What we do NOT collect
- Your name, address, phone, or any contact info beyond what you provide at sign-in
- Health or fitness data
- Browsing or search history outside the App
- Contacts, photos, audio, or files from your device
- Your IP address (in crash reports — Sentry’s default PII collection is disabled)
- Screen recordings or session replays
- Advertising identifiers (we do not use IDFA)
- Any data for cross-app or cross-site tracking
How we use information
We use the information above to: (i) provide the App’s core functions (signing you in, persisting your hero, delivering nearby Veil rifts, processing purchases); (ii) understand how the App is used, in aggregate, so we can improve it (PostHog analytics); and (iii) diagnose crashes and bugs (Sentry).
Third-party services
We rely on a small number of service providers. Each has their own privacy policy linked below.
- PostHog (product analytics) — posthog.com/privacy
- Sentry (crash and error reporting) — sentry.io/privacy
- Mapbox (map tile rendering) — mapbox.com/legal/privacy
- Apple (Sign in with Apple, App Store, push notifications, App Store payments) — apple.com/legal/privacy
- Expo / Railway (build pipeline and backend hosting) — expo.dev/privacy and railway.app/legal/privacy
Data retention
We retain your account and hero data for as long as your account exists. Crash and analytics data are retained per the policies of the providers above (typically 30–90 days for raw events).
Your rights and choices
Delete your account. You can permanently delete your account and all associated data from inside the App: open Settings → ACCOUNT → Delete account and confirm. Deletion is immediate and cascades through all heroes, progress, purchases, and Chronicle entries on our servers. Alternatively you can email us (below) and we will delete on request.
California (CCPA / CPRA), EU/UK (GDPR), and similar regimes. You have the right to access, correct, port, or delete your personal information; to object to or limit certain processing; and to lodge a complaint with your local data protection authority. Contact us at the email below to exercise any of these rights. We do not sell or share personal information for cross-context behavioral advertising.
Push notifications. You can disable push notifications at any time in iOS Settings or inside the App (Settings → NOTIFICATIONS).
Location. You can deny location access in iOS Settings; the App will function without it but the Map will show a fallback area.
Children’s privacy
Heroes Veritas is intended for users 13 and older. We do not knowingly collect information from children under 13. If you believe a child has provided information to us, contact us and we will delete it.
Changes to this policy
If we make material changes, we will update the Effective Date above and surface a notice in the App. Material changes only take effect for ongoing users after notice is given.
Contact
Questions, requests, or complaints: support@heroesveritas.com