THE HELM

Privacy

Privacy Policy

What THE HELM collects, why, who processes it, and the choices you have. This describes the product as it works today.

Working draft — pending legal review. This policy accurately describes the current product’s data handling, but the operating entity, the privacy contact, retention periods and governing law are not yet finalised. Items marked [ TODO: LEGAL REVIEW ] will be completed before launch. It is not yet a finalised legal document.

1. Who operates THE HELM

THE HELM (“the app”) is a mobile application for iOS and Android. It is operated by [ TODO: OPERATOR LEGAL NAME ] ([ TODO: ENTITY TYPE / REGISTRATION ]), of [ TODO: POSTAL ADDRESS ] (“we”, “us”). The public website for the app is ayeaye.com.au.

There is no browser version of THE HELM and no web sign-in. This website is informational only; it does not have user accounts and does not require you to log in.

2. Summary

  • We collect what THE HELM needs to run your account, your Watch, your Crew and your Career — and little else.
  • We do not use analytics SDKs, crash-reporting SDKs, advertising SDKs or third-party behavioural tracking. None were found in the app or its dependencies.
  • We do not access your microphone or camera. Adding a profile photo uses your device’s photo picker only.
  • The app uses local device notifications only. There is no remote push infrastructure.
  • XP, Doubloons and Bond are in-app progression values. They have no cash value and are not a payment instrument.

3. Information we collect

Account and identity

  • Email address and an authentication user ID, used to sign you in and to establish that the account is yours. Session information is stored on your device to keep you signed in.
  • Display name and an avatar emoji, shown in the app and to your current Crew.
  • Profile photo (optional). Stored in a private file bucket under a path owned by your account. Your current Crew can view it; it is not public. You can replace or remove it in the app.

Your Watch and progress

  • Habits / Today’s Orders — their names, targets, units and measurable amounts.
  • Logs and completions — the progress you record, including screen-discipline entries you choose to enter.
  • This information is personal by default. When your Today’s Watch is locked in at noon, eligible Order names and progress are projected to your current Crew. Your underlying configuration and history stay personal.

Crew and social

  • Crew membership, Ship name and role, Today’s Watch snapshots, reactions, messages and challenge participation.
  • This content is shared with your current Crew according to the app’s access rules. Other Crews cannot read it.

Career, economy and Voyages

  • XP, Career Rank, Doubloon balance and ledger, and rewards. These are server-authoritative. Selected Crew projections may show activity but not your balance.
  • Voyage configuration and progress, Standing Orders and Logbook history. Personal; not shown to your Crew.

Cabin and companions

  • Your companion choice, relationship history, Bond, Companion Quest state, and Cabin inventory, layout and interaction events. Personal; not projected to your Crew.

Notifications

  • If you allow notifications, the app may schedule a local companion feeding reminder on your device. There is no remote push token and no server-side reminder scheduler. Reminders are cancelled when you feed, change companion, or sign out.

Technical service data

  • Our infrastructure providers process data needed to run authentication, the database, file storage and app builds according to their own terms. See “Processors” below.

4. What we do not collect

Based on an audit of the app and its dependencies, THE HELM contains no analytics SDK, no crash-reporting SDK, no advertising SDK, no payment processor, no microphone or camera capture flow, and no collection of your contacts or location. Adding a profile photo requests only the photo-library permission your device requires for that action.

5. How we use your information

  • To operate your account and keep you signed in.
  • To run your Watch, record progress, and calculate XP, Career Rank, Doubloons, Voyages and Bond.
  • To provide Crew features — Today’s Watch, encouragement, banter, Clean Sweep and Crew Challenges — to your current Crew.
  • To schedule local reminders you have opted into.
  • To keep the service secure and working correctly.

We do not sell your information and we do not use it for advertising.

6. Crew and social visibility

Crew features are visible to the members of your current Crew, not to the public and not to former Crews. Your locked Today’s Watch shows your Order names and progress to current Crewmates. Messages, reactions and challenge activity are readable by your current Crew. Leaving a Crew ends this visibility going forward.

7. Processors and infrastructure

We rely on the following providers:

  • Supabase — Authentication, application database (Postgres) and file Storage (profile photos).
  • Expo / EAS — Mobile app build and release tooling; over-the-air update delivery where used.
  • Apple App Store / TestFlight — iOS app distribution and Beta testing.
  • Google Play — Android app distribution and testing.

Where these providers process data outside your country, that transfer and the providers’ retention practices are subject to [ TODO: LEGAL REVIEW ]. We do not place third-party tracking or advertising code in the app.

8. Security

Access to your data is enforced at the server: each request is checked against the authenticated account, and one account cannot read or change another account’s data or another Crew’s data. Profile photos are kept in a private bucket with owner and Crew access rules and type/size limits. The app ships only public client configuration; no administrative keys are present in the app or on this website.

9. Retention

Retention periods for account data, gameplay history, economy records and provider logs and backups are [ TODO: LEGAL REVIEW ]. We have not established any statutory retention obligation for gameplay or Doubloon records. This section will state concrete periods before launch.

10. Deleting your account

Today the app provides a guarded sign-out that clears local caches on your device. Server-side account deletion — permanently removing your personal data, profile photo and authentication identity — is being built and is not yet available.

The Delete your account page explains the current position and the process that is being implemented. This section will be updated to describe the live deletion flow, including its scope, timing and any minimal operational records that remain, once it ships and is verified.

11. Access and correction

You can view and change much of your information directly in the app — your display name, avatar, profile photo, habits and Cabin. For other requests about your information, contact us (below). Formal access/correction rights and timeframes are subject to [ TODO: LEGAL REVIEW ].

12. Children

THE HELM is designed for adults. It does not provide Junior Crew, guardian controls or accounts for minors. Current Crew roles carry no parental or monitoring authority. A separate privacy and safety design would be required before any under-18 experience — none is offered today.

13. Changes to this policy

We will update this policy as the product changes and as the items marked [ TODO: LEGAL REVIEW ] are finalised. The effective date will be shown here: [ TODO: EFFECTIVE DATE ].

14. Contact

Privacy enquiries: privacy@ayeaye.com.au. The applicable privacy regulator and complaints process are [ TODO: LEGAL REVIEW ].

General help is on the Support page.