Privacy notice

Who we are

Moss Island is made by Hue & Heal. We decide how your information is used and we’re responsible for looking after it (in data protection words, we’re the “controller”).

Who

Hue & Heal Ltd, a company registered in England and Wales, number 16383150

Registered office

42 Constabulary Close, West Drayton, UB7 7GE, United Kingdom

ICO registration

Hue & Heal is registered with the Information Commissioner’s Office, number ZB982530

Contact

mossisland@hueandheal.com

Email is the best way to reach us about anything on this page.

Children, and the Children’s Code

Moss Island is for children aged 5 to 15. It follows the ICO’s Age Appropriate Design Code, known as the Children’s Code. In practice:

• A grown-up is in charge. A parent or carer sets up the family and agrees on behalf of children under 13. They approve every quest and can see what their children do in the game. We tell children that too, in words they understand.
• High privacy by default. Nothing leaves your family. Email news is off unless you switch it on. We never use a device’s location.
• The least we need. A child’s first name or a nickname, and their age. Never a surname, email address, school, date of birth or photo of their face.
• No profiling. We don’t build profiles of children or use their data for marketing. Quests are chosen from their age, the time of day and what your family has switched on.
• No nudges. We don’t design Moss Island to push children to share more, play for longer or ask you to buy things.
• No advertising to children. There are no adverts anywhere in Moss Island, and we never email children.
• No sharing. We never sell data or share it with advertisers. There’s no chat, no friends list and no public profile, so families can’t contact each other.
• Children have rights too. See Your rights.

If you apply to be a Founding Family

When you apply at mossislandgame.com/apply, we collect:

• your first name and email address
• how many children would play, and their age bands (for example 7 to 8)
• the UK region you live in
• if you choose to tell us: whether you share family life online, your handle or link, and how you heard about Moss Island
• that you’ve read this notice, and whether you’d like Moss Island news by email

We never ask for your children’s names. Please don’t include any in your answers. If you do, we’ll delete them.

What happens to it.

• Your form goes to Netlify, which hosts our website. Netlify also records the IP address and browser details sent with the form, and checks it for spam.
• We save your application in our database (Supabase, London), and a copy comes to our team inbox, so we can read it.
• We add you to our contact list in Resend, our email service, marked as not wanting news unless you ticked the box.
• We read every application ourselves. Nothing is decided automatically.
• If you’re chosen, we email you a personal access code. We only keep a fingerprint of it (a hash), so nobody, us included, can read it back. When you enter it in the app, your free year of the Family plan is linked to your family in the app by a reference number, not your name.
• For the launch gift box, we’ll ask for a UK postal address separately. It’s only used to post the box, then deleted.
• One-to-one sessions and the survey are optional. We ask before recording anything, every time. The Founding Family agreement explains how we use feedback.

If you contact us about a partnership or event

Schools, charities, community groups and press can contact us at mossislandgame.com/contact. We collect the organisation’s name and kind, your name and work email, what you’d like to do, rough timing, and that you’ve read this notice. The form asks for nothing about children, and we ask you not to include any. If you do, we’ll delete it.

Your enquiry goes to Netlify, which hosts our website and checks it for spam, and a copy comes to our team inbox. We use it only to reply and to plan the event or partnership with you, and we never add you to a mailing list from it.

The partner toolkit’s sign-up sheet belongs to the organiser who prints it, not to us: we never see it.

In the Moss Island game

Moss Island works on your device first. By default your family is saved in your browser’s own storage on that phone, tablet or computer. If your family switches on sync, so more than one device can share it, the family record is also stored on our servers.

To work, the app keeps:

• About you: your family name and your first name. With sync, your email address, for sign-in codes. Your town or area if you add it, plus your region and time zone, so quests fit school days and the seasons.
• About each child: their first name or a nickname, their age, and the island and Moss they chose. If you make one, their Moss pass: a made-up username and three funny words, which we only keep scrambled (hashed).
• The game itself: quests done, stars and skills, the rewards you set, notes you leave them, and their weather check-ins (how they said they felt, from sunny to stormy) and roughly when.
• Your settings, and your grown-up PIN, saved only as a scrambled (hashed) version, never the PIN itself.
• Festivals your family celebrates, only if you choose any in Settings. This can say something about your family’s beliefs, so it’s optional, used only to word festival quests, and never shared, analysed or sent with usage data or feedback. Clear it any time.

Grown-ups sign in with a code we email. There’s no password. A child’s device joins with a family code a grown-up makes, or with the child’s Moss pass.

You choose whether grown-ups see a child’s weather check-ins as a weekly pattern, day by day, or not at all. From 13, children choose for themselves unless you change it.

Photos

Some quests ask for a photo of the thing a child did: the den they built, the picture they drew, their shoes after a run. Never their face, and the camera says so.

• A photo is only there so a grown-up in your family can see the quest was done. Nobody outside your family sees it, and we never look at photos or use them for anything else.
• Before it leaves the device, the photo is made smaller and redrawn, which strips out its location and camera details.
• As soon as a grown-up approves the quest, or sends it back, the photo is deleted: from the device and, with sync on, from our servers. From that moment nobody can open it, and the file itself is wiped in our nightly clean-up. We keep no copies, and photos aren’t in our backups.
• If nobody decides, the photo is deleted after 14 days anyway.

Emails

We send emails through Resend. There are three kinds:

• Service emails about your account: sign-in codes, PIN resets and the round-up if you switch it on. You can’t unsubscribe from these while you have an account, because they’re how it works, but we only send them when something needs you.
• Founding Families emails, if you applied or joined: your code, the weekly task, session invites, the survey and your gift box. To stop them, leave the programme: just reply and tell us.
• News and offers, only if you said yes. Every one has an unsubscribe link, and you can also just tell us. We keep a note of when and where you said yes, as proof.

Our emails never name a child or a quest in the subject line, and we never email children.

How we learn what works

With sync on, the app sends us small usage events, for example that a quest was approved, that a check-in happened and which weather was picked, or that a Showdown started. Each carries a scrambled family reference and an age band, such as 7 to 8. Never a name, a photo, a note or anything typed. Because they could be linked back to a family, we treat them as personal data. We only use them to see which parts of Moss Island help families.

There are no adverts, no advertising or tracking cookies and no third-party trackers, on the website or in the app. The app saves your family and a few settings on the device itself, which it needs to work.

Why we use it, and our lawful basis

Where we rely on legitimate interests, we’ve weighed them against your rights and your children’s, and we only use the minimum we need. You can object at any time (see Your rights).

Where it’s kept, and who helps us

• Supabase holds our database, sign-in codes and private photo storage, including applications and Founding Family records. Stored in its London region, in the UK. Supabase is a US company, so its team may sometimes reach the data from the United States, for example to fix a problem.
• Netlify hosts the website and the app, receives the application and enquiry forms, checks them for spam and runs our server code. A US company, so data may be processed in the United States.
• Resend sends our emails and keeps our contact list, with whether you’re subscribed to news. A US company, which mainly processes data in the United States.
• Microsoft hosts our team inbox (Microsoft 365, with Outlook), which receives a copy of each application and your emails to us. A US company, so some data may be processed in the United States.
• For Founding Families only: session booking, video calls and the survey. We’ll tell you which tool we use before any session or survey, and it will be one that meets UK data protection law.

These companies are our processors: they only use your data on our instructions, under contracts that require them to keep it safe.

When data goes to the United States, UK law says it must stay protected to UK standards. Here’s how:

• Netlify, Resend and Microsoft are signed up to the UK-US “data bridge” (officially, the UK Extension to the EU-US Data Privacy Framework). The UK government has decided that data sent to companies on it is properly protected.
• Supabase isn’t signed up to the data bridge, so its contract with us uses the UK’s approved contract terms instead (the International Data Transfer Addendum to the EU Standard Contractual Clauses), which bind it to UK standards. Resend’s and Microsoft’s contracts include these terms too, as a back-up.

There are no payments yet. When paid plans start, Stripe will handle them, and we’ll update this notice first.

How long we keep it

• Photos: until a grown-up decides, and never more than 14 days.
• Your family’s game: while your account is open. Delete it any time (see Deleting everything).
• Usage events: 13 months.
• Applications: if your family isn’t chosen, deleted 12 months after Moss Island launches (November 2026). If you join, kept while you’re a Founding Family, then deleted 12 months after the programme ends.
• Your Founding Family plan: the record of your code (a fingerprint, never the code) and your plan’s dates, until 12 months after the plan ends. Wrong-code attempts are kept as scrambled references for one day.
• Gift box address: deleted within 30 days of posting your box.
• Session recordings: deleted within 3 months of the session. Notes and survey answers: until 12 months after the programme ends.
• News by email: until you unsubscribe. After that we keep your email address on a “do not email” list, so we never email you again by mistake, and the record of your yes for 2 years, as proof.
• A record of which emails we sent you (never what they said): 12 months.
• Your emails to us and feedback: 2 years.
• Partnership and event enquiries: 2 years after our last contact, or longer only while we’re working on something together.

Your rights

You can ask us to:

• give you a copy of the data we hold about you or your children
• correct anything that’s wrong
• delete your data, or withdraw your application
• stop or limit how we use it, or object to our legitimate interests
• stop sending news (or use the unsubscribe link in any email)
• send your data to you or someone else in a common format

Children have the same rights. A child can ask us directly, and we’ll answer in a way that suits their age, usually together with their grown-up.

Email mossisland@hueandheal.com and tell us what you’d like. It’s free, and we’ll reply within one month.

Deleting everything

• In the app: in the grown-up area, go to Settings, then Privacy and data, then Delete everything. It removes your family from that device and, with sync on, from our database, with any photos still waiting. It can’t be undone, so use Download our data first if you’d like a copy. If other devices were in your family, sign out on each one to clear it there too.
• The rest: your sign-in record, your email choices and anything you’ve sent us sit outside the family record. Email mossisland@hueandheal.com and we’ll delete those too, within one month.
• One child: remove them in Settings, Children. Their history goes with them.
• Applicants and our email list: email us and we’ll delete your details. For news only, use the unsubscribe link.

Complaints

If you’re unhappy with how we’ve handled your data, please tell us first at mossisland@hueandheal.com and we’ll put it right where we can. You can also complain to the Information Commissioner’s Office (ICO), the UK’s data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this notice

If we change how we use your data, we’ll update this notice and the date at the top. If a change matters to you, we’ll email you about it first.