Privacy Policy
TribeHearth is a family game app. You and the people you invite see each other’s live faces around a shared campfire while you play. This policy explains what we collect, why, and what we never do.
- Your camera and microphone are for play, not for us. Live video is cut out on your device and streamed only to the people in your game session. We do not record, store, or view it.
- We collect the minimum to run an account: an email address and the display name you choose.
- We do not sell your data and we do not show behavioural advertising.
- Children under 13 do not get a live camera until a parent or guardian gives verifiable consent.
What we collect and why
Account. When you create an account we store your email address (used as your sign-in name and for password resets) and the display name you type. Passwords are handled by Amazon Cognito; we never see them. Sign-in tokens are kept in your device’s secure storage (iOS Keychain / Android Keystore).
Game play. To run a session we store the lobby code, who is in the lobby (by account ID and display name), the game state, answers, timing and scores. Game records are kept so you can see results and leaderboards.
Live video and audio. During a session your device’s camera and microphone are used to put your face and voice at the campfire. Background removal runs entirely on your device. The resulting video and audio are sent, encrypted, through a real-time media service (LiveKit) to the other players in your session only. Media is relayed live and is not recorded or retained by TribeHearth. Ending the session or denying camera access stops the stream; you can play with a name card instead of video.
Purchases. Premium subscriptions are processed by Stripe (or the App Store / Google Play where you buy through them). We receive confirmation that your account is entitled to premium and a customer reference; we never receive your card number.
Analytics. To understand which games are played and where things break, the app sends event records (for example “trivia round started”) tagged with a random session ID and a random per-install client ID. These records contain no name, email, message content, video or audio — the server drops any field outside a fixed allow-list before storing them.
Age information. On iOS the app may ask the operating system’s Declared Age Range service whether the account holder is a child, teen or adult. We receive only the age band and how it was declared, never a date of birth, and we use it solely to decide whether the live camera is available.
Crash and device data. The app may report crashes and basic device/OS information so we can fix bugs. This is not linked to your identity.
Children
TribeHearth is designed for families and may be used by children with a parent’s involvement.
- We do not knowingly collect personal information from a child under 13 beyond what is needed to let them join a family session (a display name and a lobby membership).
- Live camera and microphone are disabled for under-13s until a parent or guardian completes verifiable parental consent. Until then the child appears as a name card. Consent records are retained as required by the Children’s Online Privacy Protection Act (COPPA).
- We do not show behavioural advertising to anyone, and no third-party ad networks are integrated.
- Parents can review or delete their child’s information, or withdraw consent, by emailing hello@tribehearth.com from the parent account’s email address.
Who we share data with
We share data only with the services that run the app on our behalf: Amazon Web Services (accounts, game data, analytics storage, in the United States), LiveKit (live media relay), Stripe (payments), and Apple / Google (app distribution and, where used, in-app purchase). Each is bound by its own privacy terms and processes data only to provide its service. We do not sell personal information and do not share it with advertisers or data brokers. We will disclose information if required by law.
Retention and deletion
Account and game data are kept while your account is active. You can delete your account at any time by emailing hello@tribehearth.com from the account’s email address; we remove your account data within 30 days, except records we must keep by law (for example parental-consent and payment records). Analytics events are kept in aggregate form only after 13 months.
Your rights
Depending on where you live you may have the right to access, correct, delete, or export your personal information, or to object to certain processing (GDPR in the EEA/UK, CCPA/CPRA in California, and similar laws). Email hello@tribehearth.com and we will respond within the legally required time. We do not sell or “share” personal information as those terms are defined under California law, so there is nothing to opt out of.
Security
Data is encrypted in transit (TLS) and at rest. Media streams are encrypted between devices and the relay. Access to production systems is limited to TribeHearth, LLC personnel who need it.
International users
TribeHearth is operated from the United States and your data is processed there.
Changes
If this policy changes materially we will notify you in the app before the change takes effect.
Contact
TribeHearth, LLC · hello@tribehearth.com · Support