Effective date: August 12, 2026. Brandon Rossi approved this policy for the public Maelorei website and support service.
Who provides Maelorei
Maelorei is published by Brandon Rossi. The public website and support service will be available at maelorei.app.
Scope
Maelorei is a daily Journey for families using a shared iPhone or iPad. The website explains the product and provides an adult-facing support form. Neither the app nor website requires a Maelorei account.
Information stored on the device
Local app information can include child names and avatars, Quests, Journeys, Side Quests, rewards, completion history, parent-passcode hash and salt, preferences, and optional Journey Collection installation state. Maelorei does not automatically upload this information.
The website keeps draft messages and screenshots only in the active browser page. After a successful submission, it can store the report category, date, reference number, and deletion credential in that browser's local storage. Clearing browser data removes those local receipts.
Adult-submitted support reports
An adult can explicitly submit a report category, a message of up to 4,000 characters, up to three selected screenshots, and optional limited technical details. The form asks for no name, email address, account, or reply address.
Free text and screenshots can contain identifying details. We therefore treat submitted content as linked to the submitting family even though the service does not request an identity. Reports are used for support, service operation, investigating problems, and evaluating product improvements. They are not sold or used for tracking, advertising, marketing, or data brokerage.
Screenshots and technical details
Website screenshots are decoded in the browser, reduced to at most 2,048 pixels on the longest edge, re-encoded as JPEG, and can be covered with solid redactions before upload. Re-encoding removes source filename, GPS, EXIF, and other embedded metadata. Visible screenshot content remains visible unless the adult removes or covers it.
If technical details are enabled, a website report can include browser-reported operating-system family, browser family, viewport size, orientation, and submission time. An app report can include the disclosed app version/build, operating-system version, nonunique device family/class, viewport, orientation, and time. Reports exclude stable identifiers, Apple Account information, passcode material, family records, application logs, and raw crash diagnostics.
Processing and notifications
The first-party service uses Amazon Web Services in the US East (N. Virginia) Region for encrypted private storage, API processing, content delivery, security controls, and outbound email through Amazon SES. Google processes an opaque support notification sent to a private Gmail inbox. That notification contains a reference number and secure review link—not the report message or screenshots.
The service uses encrypted HTTPS connections. Application logs exclude email addresses, report bodies, screenshots, credentials, authorization headers, attachment URLs, request bodies, raw source IP addresses, and full user-agent strings. Edge security may process network addresses transiently for rate limiting and abuse protection.
Retention and deletion
Unfinished upload slots expire after 24 hours. Finalized report text and attachments are automatically removed after 12 months. The planned storage has no application-managed version history or separate report backup. An adult can request earlier deletion using the deletion credential retained in Sent Reports. Deleting the app or clearing browser storage removes local credentials but does not itself identify a server report for deletion.
Notification email may retain the opaque reference number and expired review link after report content is deleted. Operational billing and aggregate security records may be retained when required, but they do not contain report bodies or screenshots.
Other app features
Avatar, custom Quest, and reward images remain local unless a parent separately selects an image for a support report. Optional Journey Collections are delivered through Apple's Managed Background Assets service without child names, family photos, Quest text, progress, or passcode material. The first release has no ads, purchases, chat, public profiles, tracking, live location, or user-to-user sharing.
Children and adult responsibility
In-app feedback is available only in the parent-gated Parent Area. The public support form requires an adult confirmation. These controls do not replace parental consent where law requires it. Product and privacy review for COPPA, children's provisions of GDPR, and applicable regional rules remains a release gate.
Questions and changes
Use the Maelorei Support page for privacy questions. This policy will be updated before materially changing support-report collection, use, processors, or retention.