Your Trust Matters
Privacy Policy
How we handle information for our website, app, games, live rooms, and contact forms.
Effective date: August 6, 2026 · Last updated: September 5, 2026
Who we are and how to reach us
Kingdom Legacy Ventures LLC ("Kingdom Legacy Ventures") makes Christian and family-friendly games, devotional content and The Promised Land board game. This policy explains what we collect, why, how long we keep it, and what you can ask us to do.
Privacy questions, access and deletion requests, and reports: privacy@kingdomlegacyworks.com
Kingdom Legacy Ventures LLC
This policy covers kingdomlegacyworks.com and our mobile app. It does not cover another company's site or service that you reach from ours.
What we never do
- We do not sell your personal information.
- We do not share it for cross-context behavioural advertising.
- We do not use advertising or analytics cookies.
- We do not build advertising profiles.
- We use no third-party advertising, attribution or cross-site behavioural tracking technology. There is no advertising network, no analytics or tracking SDK and no tracking pixel in our website or in our app.
Running the Service does mean our providers receive the technical information they need to deliver it — for example, our host receives the ordinary request information any web server receives. Each provider handles that under its own terms. They are listed under Service providers below.
Playing without an account
You can play almost everything without telling us anything.
Puzzle progress, streaks, saved settings, your devotional reading history and your reminder preference are stored on your device, in your browser's or the app's local storage. We cannot see them. Clearing browser data or deleting the app deletes them, and we cannot recover them.
The anonymous session behind online features
Some optional features need the server to tell one player from another: the for-fun leaderboards, and online rooms.
When you finish a daily Word Scramble or The Word Revealed puzzle, or create or join an online room, we create an anonymous session for you. It is a randomly generated identifier with no name, no email address and no password, and your device stores a token for it. We do not ask you first, because it is required for the feature to work at all — but you should know it happens.
We delete an anonymous session automatically after 180 days with no activity, together with anything still attached to it. If you come back after that, a new anonymous session is created and your earlier leaderboard history is gone.
The for-fun leaderboards are public
If you press Submit on a for-fun daily or friend-challenge leaderboard, we store the display name you type, whether you won, how many attempts or guesses you used, your time, and when you submitted.
That display name is visible to anyone who opens that board. It is free text and it is not reviewed, so please do not use your real full name, or a child's name.
We delete a submitted for-fun leaderboard result 90 days after you submit it. This applies to both boards — Word Scramble and The Word Revealed.
These for-fun boards are separate from the Competitive leaderboards described below. A for-fun entry is not attached to any account, so deleting an account does not remove it — it is removed on the 90-day schedule above.
Online rooms
In an online room we store the room code, who is in it, the display names people choose, the game state, answers and answer drafts, chat messages and reactions, and an activity log of what happened in the room. Everyone in the room can see these.
Online rooms are temporary. God's Timeless Word rooms expire 24 hours after they are created, and Four-in-a-Row rooms expire after 4 hours. Playing in a room does not extend that — the clock starts when the room is created and runs whether or not anyone is using it. Once a room has expired it can no longer be opened or joined.
We delete expired room data within a few days.
When a room is deleted, everything attached to it goes with it — the participants, the chat messages and reactions, the activity log, the submitted answers and the answer drafts.
AI-assisted grading in God's Timeless Word
In God's Timeless Word online rooms, a host can ask for a suggested grade. When they do, the question, the official answer, a short list of accepted answers and the team's answer are sent to OpenAI to produce a suggestion. The host decides the grade; the suggestion is only a suggestion.
We do not send your display name, your email address or any account identifier with it. We do not control how long OpenAI keeps a request; see OpenAI's own terms.
Accounts
An account is optional. It lets your Journey follow you between devices and lets you take part in Competitive play.
What we collect
| Data | Why | Kept |
|---|---|---|
| Email address | Sign-in, confirmation, password reset, security codes | While the account exists |
| Password | Sign-in. We cannot retrieve or tell you your current password. If you forget it, you can request a reset email | While the account exists |
| Birth month and year | Solely to confirm you meet the minimum age | Used once. The raw value is never stored — only the derived result |
| Session tokens | Keeping you signed in | Until sign-out or expiry |
| Emailed security codes | Confirming a sensitive action | Minutes |
| A user identifier | Attaching your progress to you | While the account exists |
| Terms acceptance record | Recording which version of our Terms you accepted, and when | While the account exists |
For a sensitive action — deleting your account, changing your display name, changing a privacy setting — we may email you a code or ask for your password again. That confirmation is short-lived.
When you sign in on our website, your browser may store the session information needed to keep you signed in. Signing out, session expiry, clearing that browser storage, or browser privacy settings may end the session. Sensitive actions still require the additional confirmation described above.
Emails we send are delivered by Resend on our behalf.
Bringing guest progress in. When you first sign in we may offer to adopt progress from that device. It is offered, never automatic, you can decline, and it never creates Competitive XP, levels or leaderboard placement for play from before you had an account.
Your Journey, saved to our servers
With an account, your Journey — the devotional and puzzle history the Service records for you — can be saved to our servers so it follows you between supported devices and browsers.
- It is private. It is not shown to other users and never appears on a leaderboard.
- Your supported devices and browsers can update our servers as your Journey changes.
- It is kept while your account exists and is destroyed when you delete your account.
Synchronisation is a convenience, not a backup service, and we do not offer restore to an earlier point in time.
Daily Verse: reading history, XP, streaks and quizzes
With an account we record which daily verses you have read and when, the XP your reading earns, your devotional streak, the verses and encouragement messages you save, and your milestone-quiz attempts and results.
All of it is private to you. None of it appears on a leaderboard or is shown to another user. It is kept while your account exists and destroyed when you delete it. Without an account, this stays on your device only.
Saved items keep a copy of what you saved. When you save a verse or an encouragement message, we keep a copy of the content needed to show it to you again — as it was at the moment you saved it — so it still reads correctly later, even if we update or retire the original. We store nothing you type: there are no notes, folders or tags.
Competitive play, display names and public leaderboards
Competitive play is a separate system from the for-fun boards above.
What we store. For each daily Competitive result: which puzzle, whether you won, attempts or guesses, time taken, when you submitted, the XP awarded (0 or a fixed amount), and technical values we use to prevent duplicate awards and abuse.
Your result rows are not public. Your display name is the only genuinely public part.
Competitive display names are reviewed before they can appear publicly. A name may be pending, approved, rejected or replaced. Your progress and XP count either way — review affects only whether the name is shown. This applies to Competitive only: the names people type on the for-fun boards and in online rooms are not reviewed and cannot be reported.
Appearing on a leaderboard is off by default. You appear only if you have both opted in and had your name approved.
Changing your name takes you off the board until the new name is approved and you opt in again. The Service tells you before you confirm.
Reports. Anyone can report a Competitive display name. We may remove a name or a placement. A report is kept while it is being handled and for a reasonable period afterwards.
Levels, titles and badges are cosmetic and derived from your XP. They carry no monetary value.
When you delete your account, everything in this section is destroyed — with one narrow exception. The minimised moderation and report records described under "Deleting your account" below may remain: a report another person made, and a minimised record that a Competitive display name was rejected, replaced or withdrawn. These are kept so a safety report is not erased by the person it concerns, and so a removed name cannot simply be re-registered. They are the only part of this section that can outlive your account, and nothing else here survives.
Notifications, reminders and widgets
You can turn on optional notifications and add a Home Screen or Lock Screen widget.
- There are two kinds — Inspiration messages, which you can set to arrive between one and six times a day, and a separate reading streak reminder. Both are off until you turn them on, and each is controlled independently.
- We ask your device for notification permission only at the moment you turn one of them on, and only if it has not already been granted. Decline and that notification simply stays off.
- Your notification preferences are stored on your device and are not sent to us. We do not know whether you use notifications, how often you asked for them, or when you chose to receive them.
- The widget shows public devotional content. It does not use your private account progress, so it cannot show that on your Lock Screen.
Contact and update forms
If you use a contact or updates form we receive what you type — typically your name, email address and message — through Netlify Forms, so we can reply or send what you asked for. We do not add you to unrelated marketing.
Technical and hosting information
Our site and app are hosted by Netlify, and our database and authentication by Supabase. Like every web host, they record ordinary server request information: IP address, user agent, the page or file requested, the referring page, timestamps and response status. This is used to serve the site, diagnose faults and protect against abuse, and is kept for the providers' own limited periods.
Website traffic measurement
We use Netlify Web Analytics to understand how the website is used. It works from the ordinary server request information our host already records — which includes IP address information — rather than from a cookie or a script running in your browser.
We receive aggregated reports only, such as how many visits a page received and which country they came from. We cannot use it to identify you, and no cookie or tracking script is placed in your browser for it.
Because those aggregates are derived in part from IP addresses, we do not describe this as anonymous analytics.
Merchandise QR codes
Printed merchandise may carry a QR code that forwards you to our website with fixed campaign information so we can measure, in aggregate, that visits came from that item. The landing page does not set a cookie or store information on your device.
Deleting your account
You can delete your account from your Account settings in the app or on our website. It is permanent, and signing up again with the same email address does not bring anything back.
For step-by-step instructions, including how to ask us to delete an account you cannot access, see Account Deletion.
Destroyed: your email address and credentials, your Journey and reading history, your XP, level, titles and badges, your display name and profile, your leaderboard placement, your saved items and reading streak, and your synchronised progress.
What can survive, and why
| Survives | Why | For how long |
|---|---|---|
| A minimal technical record that a deletion happened. It does not contain the deleted account's content | So we can confirm the operation and prevent it from being replayed | May remain; we do not promise a fixed retention duration |
| Aggregate or de-identified statistics | No longer personal information | Indefinitely, but not linkable to you |
| Content another person reported, minimised | So a safety report is not erased by the person reported | While needed |
| A minimised moderation record — that a Competitive display name was rejected, replaced or withdrawn | So a safety decision is not undone by deleting the account, and a removed name cannot simply be re-registered | While needed |
| Server and provider logs | Their normal short retention; not individually controllable | Providers' periods |
| Anything we must keep by law | Legal obligation | As required |
A for-fun leaderboard entry you submitted as a guest is not attached to your account, so deleting your account does not remove it. Those are removed 90 days after submission.
How long we keep things — summary
| Data | Retention |
|---|---|
| On-device progress, settings, reminder preference | Until you clear it. We never receive it |
| Anonymous session | 180 days after last activity |
| For-fun leaderboard result (Word Scramble and The Word Revealed) | 90 days after submission |
| Online room, and the participants, chat, activity log, answers and drafts attached to it | Rooms expire 24 hours after creation (God's Timeless Word) or 4 hours after creation (Four-in-a-Row); activity does not extend that. Expired room data is deleted within a few days |
| Account and everything attached to it | While the account exists; destroyed on deletion, except the table above |
| Contact form submission | While needed to handle your message |
| Server logs, analytics aggregates | Providers' own periods |
Children and younger players
The games, puzzles and printable resources are for everyone, and we show a recommended age beside each game. Playing on your own device needs no account and sends us nothing, so a younger player can use them without us collecting anything at all.
We ask for a birth month and year before an online feature is used for the first time, and we use it once to work out what is available. We do not keep the month and year, and they are never sent to us. The only thing kept is the answer, and it stays on your device.
Shared devices. The answer describes the person playing, not the device forever. If someone else picks up the same phone or tablet, there is a Change player option beside these features so the new player can answer for themselves. When a device has been set up for a player under 13, changing player takes an extra confirmation, and the younger player's setting comes back the next time the app is opened.
An account is for people aged 13 and over, and so are the public for-fun leaderboards, because those put a name you type where any stranger can read it.
Private rooms are available to younger players. A private room can only be opened with a code you share, it is not listed anywhere, and it creates no public profile. For a player under 13 we make two changes:
- We choose a made-up name for them — something like "Teal Otter 4" — instead of asking them to type one. We make it up, it says nothing about the child, it is not a way for anyone to contact them, it cannot be searched for, and it is not kept after the room.
- In God's Timeless Word they can send the ready-made reactions, but not typed messages.
The limited identifier a private room needs. To run a room our server has to be able to tell one player from another, so it creates a plain identifier for the session. We use it only to connect the player, to keep the session secure, to run the room and the game they asked for, and to delete things properly afterwards. We do not use it for advertising, tracking, profiling, marketing, nudging, unrelated analytics, or to contact a child, and it is not a public identity. It is not shared with anyone for those purposes either.
How long it lasts. The room and everything in it is deleted within a few days, as described under "Online rooms". The identifier itself is deleted on the schedule described under "The anonymous session behind online features".
We do not offer child accounts, we do not operate a parental-consent or family-linking feature, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us personal information, write to privacy@kingdomlegacyworks.com and we will delete it.
Because the for-fun leaderboards and online rooms let anyone type a display name, please supervise a young person using them, and make sure they do not enter their real name.
Your choices and rights
You can:
- access a copy of what we hold about your account;
- correct it;
- delete your account from your Account settings in the app or on our website, or ask us to delete it;
- turn off leaderboard visibility at any time;
- turn off reminders, in the app or in your device settings;
- withdraw from Competitive play by deleting your account;
- ask us a question about any of this.
Write to privacy@kingdomlegacyworks.com. We will respond within a reasonable period and may need to verify that you control the account. Depending on where you live you may have further rights, including to object, to restrict processing, to data portability, or to complain to a supervisory authority. We do not discriminate against anyone for exercising a privacy right.
One honest limit. For-fun leaderboard entries are anonymous, so if you ask us to remove one we cannot tell which entry is yours without your help. Tell us the display name and the date and we will remove it manually. Otherwise it is removed on the 90-day schedule.
Device permissions
The app asks only for notifications, and only at the moment you turn on Inspiration messages or the reading streak reminder. It does not request your location, camera, microphone, contacts, photos, health data or calendar.
How we protect information
We use reasonable administrative and technical safeguards designed to protect your information.
No service can promise perfect security. If a breach affects your personal information we will notify you and any regulator as the law requires.
Where information is processed
We are based in the United States and our providers process information there and potentially elsewhere. If you use the Service from outside the United States, you understand your information is transferred to and processed in the United States.
Service providers
| Provider | What it does |
|---|---|
| Netlify | Website and app hosting, serverless functions, form submissions |
| Netlify Web Analytics | Aggregate traffic reporting from server logs |
| Supabase | Database, authentication, anonymous sessions |
| OpenAI | Suggested grading in God's Timeless Word rooms |
| Resend | Account confirmation, password reset and security-code emails |
| Apple | iOS app distribution through the App Store. Information Apple handles through the App Store is governed by Apple's own terms and privacy policy. |
| Google / Google Play | Android app distribution through Google Play. Information Google handles through Google Play is governed by Google's own terms and privacy policy. |
Each provider processes information under its own applicable terms and under our service arrangements with it. Where a provider acts on our behalf, it uses the information to provide and secure the relevant service for us.
Apple and Google are different in one respect. Information Apple handles through the App Store, and information Google handles through Google Play, is handled under Apple's own terms and privacy policy and Google's own terms and privacy policy respectively, which we do not control. If we ever provide a pre-release or testing version of the app through a platform's testing program, that platform may also collect tester feedback, screenshots, crash reports and testing metadata through its own systems, under its own privacy policy.
Changes to this policy
We may update this policy. The effective and last-updated dates at the top of this page identify the version you are reading. For a material change we will give notice in the Service or by email before it takes effect.
Contact us
Kingdom Legacy Ventures LLC · privacy@kingdomlegacyworks.com