Privacy Policy — Sagas

Effective date: 9 November 2026
Published at: https://sagas-app.com/en/privacy (EN) · https://sagas-app.com/confidentialite (FR)
Contact: gabriel@quiet.app

Sagas is a role-playing game that turns your walking into progress. To do that, it needs to read a small part of your health data. This document says exactly which part, what happens to it, and what never leaves your phone.

It is short because we collect little. That is deliberate.

What we read from the Health app

Two things, and nothing else: your number of steps and your walking and running distance.

We read them read-only. Sagas never writes anything to the Health app, never modifies anything, and has not even asked for permission to do so.

What we keep from these two measures is a total per day — for example "7,340 steps and 5,210 metres on 25 August". We keep no detailed sample: not the time of your steps, not your pace, not your routes, not the source (watch, phone, other app). These details stay on your phone and are never sent to us.

We read no other health data: no heart rate, no sleep, no weight, no workouts, no activity duration, nothing else.

If Sagas shows "Step data unavailable"

This screen is not a bug. Apple never tells us whether you granted or refused read access to your health data — it is a privacy protection, and it works both ways. As a result, we cannot tell the difference between refused access, a new phone, a day you did not carry your phone, and a day you simply did not walk.

We do not try to guess, and we do not record anywhere whether you refused. The app shows a neutral message and keeps working.

What you give us when you create an account

Sign-in is only through Sign in with Apple. There is no password, and we manage none.

On your first sign-in only, Apple may send us your name and your email address. If you choose "Hide My Email", we receive a relay address provided by Apple, never your real address. Apple sends us this information only once: on later sign-ins we receive nothing of the kind.

You then choose a nickname and a lineage in the app, and a time zone is recorded when you sign up. A player identifier (a "battle tag") is assigned to you; it also serves as your referral code.

If you create your character from another player's invitation link, or by typing their battle tag, we record who invited you and when.

What the game records

Your progression: level, experience, stats and upgrades bought, mana balance and the history of your mana transactions, the materials won in combat and their history, your equipment, your expeditions and descents, and the record of your fights against the game's monsters.

When you earn an Endurance title, we also record its date and your cumulative step total at that moment, so we can show it to you later. That total is computed from the daily totals described above: it is not an additional piece of health data.

If a player creates their character from your invitation link, we record that you invited them. The referral Morions — yours when that player has finished the tutorial, theirs when their character is created — appear in your Morion history.

This is game data. It has no existence outside Sagas.

Your purchases

Morions (packs) and appearances are bought through the App Store. Payment is processed by Apple: we see neither your payment method, nor your Apple ID, nor your billing address.

To credit a purchase to your account, Apple sends us a signed proof of the transaction, which we verify and keep: its identifier, the product bought, its date, any refund, the environment (test or App Store), and the link with your Sagas account, set by the app at the time of purchase. We also keep your Morion history (earned, bought, spent) and the cosmetics you own.

This data serves a single purpose: giving you what you paid for, nothing more. It goes into no usage measurement.

Push notifications

If you allow them, Sagas sends you a push notification when another player attacks you in the Arena and you are defending, so you know a fight concerns you.

For this, the app sends our servers a device token provided by Apple. This token is a technical identifier attached to your account: it contains neither your name, nor your email address, nor any health data. We use it only to deliver these notifications, through Apple's push notification service (APNs).

The content of a notification never includes health data: no steps, no distance.

You stay in control: permission is asked in the app, and you can withdraw it at any time in iOS Settings → Notifications → Sagas. Once withdrawn, we have no way left to send anything to your device. The token is deleted with your account.

What we measure about how the app is used

We use Firebase Analytics (Google) to understand whether the game works: for example how many people open the app, finish the tutorial, or turn on the daily reminder.

No health value reaches Firebase. Not a step, not a metre, not an amount of mana, not an Endurance rank — and nothing from which they could be reconstructed. This is an architectural rule of the project, not an intention: the events we send carry no numeric value of that kind.

We have also turned off the automatic collection of screens viewed and of the advertising identifier.

Measuring our ads (Meta) — only if you allow it

We may advertise Sagas on Facebook and Instagram. To know whether those ads bring players, the version of Sagas distributed on the App Store includes Meta's SDK. This is not advertising inside the game: there is none. It is measurement of the ads that bring people to the game.

You decide first, in Apple's prompt. Right after you create your character, iOS asks you once its question "Allow Sagas to track your activity…?", with our explanation: knowing whether a Meta ad brought you to Sagas. Only "Allow" starts the measurement; with "Ask App Not to Track", Meta's SDK never starts and nothing is sent to Meta. A refusal is never asked again. You can change your mind in your iPhone settings (Privacy & Security › Tracking); in the app, the Ad measurement switch in Settings also stops all sending from that moment.

Only in the App Store version. Test versions of Sagas (those that use the pre-production environment) never start this SDK.

No advertising identifier, even if you allow tracking. We do not collect Apple's advertising identifier (IDFA). If you installed Sagas after seeing a Meta ad, iOS itself may tell Meta, anonymously and in aggregate (SKAdNetwork), that the ad led to an install, with nothing coming from the app and regardless of your choice (this is an Apple mechanism). The SDK's automatic event logging is turned off: only the five signals below are sent, explicitly, by the app.

What is sent to Meta, if you allowed it:

1. opening the app, only when you open it yourself, on screen (never in the background);
2. having finished the game's introduction, at the moment the welcome bonus is granted to you, with no other information;
3. having finished the tutorial, without saying whether you won or lost;
4. an opening of the app on the seventh day after installation, with no other information;
5. a purchase in euros confirmed by our servers (Morion pack or appearance), with the amount paid and its currency, nothing else. Not sent: purchases made with Morions (an appearance paid for in Morions is not a purchase in euros) and refunds.

Like any SDK, Meta's attaches to these signals standard technical information about the device (for example the model, iOS version, app version, language and IP address) and an identifier specific to the app, which the SDK generates itself. We send Meta neither your name, nor your email address, nor your Sagas account identifier. According to the privacy declaration Meta ships with its SDK, it may also send Meta diagnostic data, such as a crash report, not tied to your account.

What never goes to Meta: everything that is forbidden in Firebase above — no steps, no distance, no duration, no mana, no Endurance rank — and no signal whose timing depends on your walking, even with no value: harvesting mana, syncing your steps, an active day, unlocking the Arena, a level reached, an upgrade bought, a piece forged, an amount of mana, experience or Morions earned, a ranking. Apple forbids using health data for advertising; we go further than the rule, because an event dated by your walking would be one, even without a figure.

Meta processes these signals under its own policy (https://www.facebook.com/privacy/policy). The legal basis for this measurement is your consent, which you can withdraw at any time as described above.

What never leaves your phone

A few display preferences are stored locally, on your device only: the fact that a day's harvest has already been celebrated (with the amount of mana shown that day), the fact that you have already seen a given explanation, and the fact that you have already seen the Forge's or the Arena's opening screen. They are sent to no one.

The daily reminder, if you turn it on, is a local notification scheduled by your iPhone. No server is involved, and we do not know when it is displayed. It is distinct from the push notifications described above.

The home-screen widget, if you add it, displays what the app has already read: your steps today, the estimated mana for tomorrow, your week and your rank on the steps leaderboard. To do this, the app stores a small file on your iPhone (these figures, your nickname, your level and a reduced image of your character), in a space that only the app and its widget can read. The widget does not read Health and sends nothing. This file never leaves your phone and is erased when you sign out or delete your account. Note: what appears on the home screen is visible to anyone looking at your iPhone.

No ads in the game, no data brokers

Sagas contains no advertising. The app does not use Apple's advertising identifier (IDFA). The only "Allow tracking" prompt you will see is the one for the Meta measurement described above, and it is the only ad-related tool: it starts only after "Allow". We share your data with no data broker.

We do not sell your data to anyone. We do not trade it either.

Who else sees your data

Four providers for the app, and no other.

The sagas-app.com website has its own host, described below.

The sagas-app.com website

The website sets no cookie, contains no audience-measurement tool and no third-party script. Its host, Vercel, processes the technical connection logs needed for it to work (IP address, page requested, date). If you arrive on the site from a link on one of our accounts or in a message, the address may carry parameters (utm_…) saying where the link came from; the site neither reads nor records them.

What other players can see about you

Your nickname and your lineage. Never your mana balance, nor your exact stats, nor your health data, nor your email address. Your battle tag is shown to no one but you, as long as you do not share it.

Your invitation link, only if you share it

Your invitation link carries your battle tag. Anyone holding that link — a Sagas player or not, with or without an account — can see your nickname, your lineage, your level and your portrait (worn appearance included). Nothing else: not your steps, not your mana, not your Morions, not your stats. Those you send it to also know your battle tag, since it is written in the link. A battle tag is built from the nickname: someone who knows your nickname can therefore, by trying many combinations, find the same four pieces of information without having received your link. The player you invited sees only these four pieces of information about you, plus a technical identifier of your account that gives access to nothing (and you, theirs); you receive no notification when they join you.

In the Arena, the players you meet also see your level and your portrait, the danger you represent to them (one to four moons, never a percentage), the record of the duels between you, and your points of the week on the Arena leaderboard. Still not your exact stats nor your mana.

The steps leaderboard, only if you turn it on

By default, no one sees your steps. The steps leaderboard is offered only once the Arena is open to you. If you turn it on (from the Arena, or in Settings → Steps leaderboard), the other players who have also turned it on — and only them — see on your line your nickname, your lineage, your level, your portrait and your step total for the week: the sum of the already-validated daily totals, reset every Monday. Nothing else: no distance, no per-day detail, no Endurance rank.

This total updates every day. By comparing it from one day to the next, another participant can deduce your steps for a day — this is inherent to a total published daily, and the sentence you accept in the app says so.

You can withdraw at any time, in Settings → Steps leaderboard: your nickname disappears from the leaderboard immediately. We record your choice, the version of the sentence you accepted and the date of your consent; if that sentence changes, your consent is asked again. This total is never sent to Firebase or to any analytics tool: we only measure the fact of joining or withdrawing, with no value.

How long we keep your data

As long as your account exists. There is no automatic deletion after a given period — we prefer to tell you rather than announce a duration that no mechanism would uphold. The only deletion is the one you trigger, and it is immediate.

Deleting your account

In the app: Settings → Delete my account.

This erases your account, your progression, your activity days, your mana history, your materials, your equipment, your Endurance titles and your fights.

One exception: if an Arena duel pitted you against another player, that duel's row is kept so that player can still read their own report — and your name there is replaced by a generic mention; your lineage, level and portrait are no longer shown. You also disappear from the steps leaderboard, and your notification token is deleted.

If you turned on the daily reminder, it is cancelled at the same time.

If you invited a player, or a player invited you, the link between your two accounts is erased, and the Morions already paid to the other player stay theirs. Their Morion history keeps a technical identifier of your deleted account, which leads nowhere.

Deleting your account erases your Morions and cosmetics; the trace of your App Store transactions (Apple identifiers, product, dates) is kept with no link to you.

The signals already sent to Meta, if you had allowed tracking, carry neither your name, nor your email address, nor your account identifier: we therefore cannot find or delete them on our side. Meta processes them under its own policy.

Children

Sagas is not aimed at children and we do not knowingly collect data about them.

Your rights

You can ask for access to your data, its correction or its deletion by writing to gabriel@quiet.app. Deletion is available immediately in the app, without having to write to us, and withdrawing your consent to Meta measurement is done in your iPhone settings (Tracking) or in the app's Settings. You can also lodge a complaint with the CNIL (www.cnil.fr), the French data protection authority.

Test versions

Versions of Sagas distributed through TestFlight use a pre-production environment, which may be reset during the test period: your progress may disappear without notice. The App Store version is not affected.

Changes

If this document changes, the effective date at the top of the page is updated. For a change that would widen what we collect, you will be informed in the app before it takes effect.

Contact us

gabriel@quiet.app