Privacy Policy

Coral Companion · Last updated July 14, 2026

Coral Companion is an unofficial fan-made companion app for the game Coral Island. It is developed and operated by Shane Gragg ("I", "me", "my"). This policy explains what information I collect, how I use it, and your choices.

By using Coral Companion you agree to this policy. If you don't agree, please don't use the app.

1. Information I Collect

Account information

If you choose to sign in, you sign in through Apple or Google. I receive your email address and, if provided by Apple, your name. I do not create or store passwords — authentication is handled entirely by Apple and Google.

Display name

After signing in, you're asked to choose a display name. This is the only name stored in association with your account.

Game progress and things you write

If you're signed in, the following is synced to the cloud so you can access it across your devices:

Please keep in mind that to-dos and notes are stored as you write them, so avoid putting anything sensitive or personal in them.

If you use the app as a guest, all of this is stored only on your device and is never sent to me.

Purchase information

The app is free. You may optionally leave a tip to support development. Tips are processed by the Apple App Store or Google Play, and grant you no features — they are voluntary contributions only.

To validate purchases, I use RevenueCat, which receives a user identifier and your store purchase receipt. I never receive or store your payment card details. If a future version offers an optional paid unlock (Coral Plus), RevenueCat would also manage that entitlement across your devices.

Feedback

If you submit feedback through the app, I collect your message, your app version, and your device platform (iOS or Android). If you're signed in, your user ID is attached so I can follow up if needed. Feedback from guests is stored anonymously.

Usage analytics

I use PostHog to understand how the app is used and where to focus improvements. PostHog receives:

PostHog does not receive your name, email address, payment details, or the contents of your notes and to-dos. Because a signed-in user's events are associated with their account, this analytics data is considered linked to you. It is used only to operate and improve the app. It is never used for advertising, never sold, and never combined with data from other companies' apps or websites to track you.

What I do not collect

I do not collect your location, your contacts, your microphone input, or your photo library. The app can save a progress image to your Photos, but it has no ability to read photos from it. I do not use advertising networks, I do not use the advertising identifier (IDFA), and I do not track you across other apps or websites.

2. How I Use Your Information

I do not sell your data. I do not use your data for advertising. I do not share your data with any third parties except as described in Section 3.

3. Third Parties

Supabase. I use Supabase (supabase.com) to store account information and synced game progress. Supabase acts as a data processor on my behalf and is subject to its own privacy policy at supabase.com/privacy.

RevenueCat. I use RevenueCat (revenuecat.com) to validate in-app purchases, including tips, and to manage any optional unlock offered in future across your devices. RevenueCat receives a user identifier and your store purchase receipt. Its privacy policy is at revenuecat.com/privacy.

PostHog. I use PostHog (posthog.com) for product analytics. PostHog receives product interaction events (screens viewed, features used), an app-generated device identifier, and — if you are signed in — your user ID. It does not receive your name, email address, or payment details. PostHog's privacy policy is at posthog.com/privacy.

Apple App Store and Google Play. Depending on where you downloaded the app, Apple or Google processes any purchase you make and provides me with anonymized sales reporting. They never share your payment card details with me.

Sign in with Apple. Apple handles authentication when you choose to sign in with Apple. Apple's privacy policy is at apple.com/legal/privacy.

Sign in with Google. Google handles authentication when you choose to sign in with Google. Google's privacy policy is at policies.google.com/privacy.

No other third parties receive your data.

4. Data Retention

Your account data is retained for as long as your account is active. If you delete your account, all associated data — your profile, your farms, your tracked progress, your townsfolk relationships, and your notes and to-dos — is permanently deleted. Feedback you submitted is anonymized (your user ID is removed) but the message content is retained so I can track recurring issues.

Guest data exists only on your device and is removed when you clear the app's local data or uninstall the app.

5. Your Rights and Choices

Guest mode. You can use the app without creating an account. No data is sent to me in guest mode.

Delete your account. You can permanently delete your account and all associated data at any time through Settings → Danger Zone → Delete Account. You'll be asked to confirm by typing "DELETE". Deletion is immediate and irreversible.

Clear local data. You can clear all locally cached data through Settings → Danger Zone → Clear Local Data.

Data requests. To request a copy of your data or ask questions about what I store, email me at support@coralcompanion.app.

6. If You Are in the European Economic Area or the United Kingdom

If you are in the EEA or the UK, data protection law gives you rights over your personal data. You have the right to access the data I hold about you, to have it corrected, to have it deleted, to receive a copy of it, and to object to or restrict how it is used. You may exercise most of these directly in the app: you can delete your account and all its data at any time from Settings, and you can use the app entirely as a guest, in which case no data reaches me at all.

The legal bases I rely on are: performance of a contract, for the account and sync features you ask me to provide; legitimate interests, for basic product analytics used to operate and improve the app; and consent, where you choose to send me feedback. I do not use your data for advertising, I do not sell it, and I do not use it to track you across other companies' apps or websites.

Data is stored on servers operated by my providers (see Section 3), which may be located outside the EEA or the UK, including in the United States. To exercise any of these rights, or to complain about how your data is handled, email support@coralcompanion.app. You also have the right to lodge a complaint with your local data protection authority.

7. Children

Coral Companion is not directed at children under 13. I do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided information to me, please contact me at support@coralcompanion.app and I will delete it promptly.

8. Security

Authentication is handled by Apple and Google — I never see or store passwords. Your synced data is stored in Supabase with row-level security, meaning your data is only accessible by you. No security system is perfect, but I take reasonable steps to protect your information.

9. Changes to This Policy

If I make material changes to this policy, I'll update the date at the top of this page. Continued use of the app after changes constitutes acceptance of the updated policy.

10. Contact

Coral Companion is developed and operated by Shane Gragg, who is the data controller for the purposes of this policy. Questions about this policy, or requests to exercise your rights, can be sent to:

Shane Gragg
Coral Companion
PO Box 24765
Raleigh, NC 27611
United States
support@coralcompanion.app

Email is the fastest way to reach me and is the best route for any data request.


Coral Companion is an unofficial fan-made app and is not affiliated with, endorsed by, or connected to Coral Island or Stairway Games.