Information we collect
Valor Legion collects account details you provide, authentication session data, and technical request information needed to operate and secure the service.
Google sign-in data
If you choose to sign in with Google, Valor Legion requests the non-sensitive openid, userinfo.email, and userinfo.profile scopes. These provide your Google account identifier, name, email address, email-verification status, and profile image. We use this information only to create or link your Valor Legion account, authenticate you, display your account profile, and protect account access. We do not request access to Gmail, Google Drive, contacts, calendars, or other Google services.
Apple sign-in data
If you choose Sign in with Apple, Valor Legion receives Apple's account identifier and the name, email address, and verification information Apple shares. Apple may provide a private relay email address. We use this information only to create or link your Valor Legion account, authenticate you, display your account profile, and protect account access.
How information is used
Account information is used to provide and personalize account access, maintain security, communicate transactional notices, and improve the service. Valor Legion does not sell Google user data or use it for advertising.
Storage and service providers
Account and authentication records are stored with service providers that support Valor Legion's database, infrastructure, authentication, email, private media storage, and payment operations. Stripe processes web billing. Apple and Google process native billing, while RevenueCat supplies verified store-subscription lifecycle data. Valor does not receive complete card numbers. Provider access is limited to the work needed to operate and secure the service.
Billing and entitlement records
Valor stores purchase-source customer and subscription identifiers, product mapping, normalized access status, billing cadence and period dates, cancellation intent, management destination, refund, dispute, or voluntary-forfeiture access blocks, and a minimal webhook-processing audit. We do not store raw Stripe or RevenueCat webhook payloads. RevenueCat uses the non-sensitive Valor user ID rather than your email as its app user ID. Minimum billing audit evidence is retained for seven years for tax, accounting, fraud, dispute, support, and legal obligations.
Listening and media security
Valor records listening checkpoints, completion, saves, and limited evidence needed to calculate progress and prevent invalid playback claims. Session audio is stored privately and delivered through expiring signed URLs to authenticated accounts with the required access.
Retention and your choices
We retain account information while your account is active and as reasonably necessary for security, legal, and operational purposes. You can unlink Apple or Google from account settings when another sign-in method is connected. You can permanently delete your account after every paid subscription ends; administrative access grants do not block deletion. To request access, correction, export, or deletion help, contact [email protected].