1. Who uses QuestDen
Only adults (18+) may create and operate a QuestDen account. Children do not sign up, log in, enter an email address, or create credentials — the app is used by children only through a parent-managed family household.
2. Information we collect
Parent account: email address, display name, and a hashed password. Used to sign you in and send important account notifications.
Family household data: child first names, avatars, optional ages, tasks, rewards, and earned points. This data is visible only to the parent account that created it.
Billing information: if you subscribe on iPhone or iPad, Apple handles payment data through Apple In-App Purchase and we never see your card number. In all cases we keep a record of plan type, billing dates, and transaction status.
Device diagnostics: limited crash and error logs (no personal content) to help us fix bugs.
3. What we do NOT collect
- Child email addresses, phone numbers, or real names
- Location data (GPS or IP geolocation)
- Photos, videos, microphone, or camera access
- Contacts, calendar, or health data
- Advertising or tracking identifiers (IDFA, cookies, pixels)
- No third-party analytics SDKs or behavioural ad networks
- No social features, public profiles, or in-app chat
4. COPPA compliance
QuestDen complies with the U.S. Children’s Online Privacy Protection Act (COPPA) and comparable regulations such as GDPR-K (EU) and the UK Age-Appropriate Design Code.
- Children do not create accounts or provide personal information.
- Only a parent-chosen first name and avatar represent a child in the app.
- The parent is the sole controller of child profile data and can edit or delete it at any time from Settings.
- We do not knowingly collect personal information directly from children under 13.
5. How we use your information
- Operate core features (tasks, rewards, approvals, wallet)
- Authenticate you and protect your account
- Process subscriptions and send receipts
- Diagnose crashes and improve reliability
- Send essential service emails (password reset, billing)
- Comply with legal obligations
6. Who we share data with
We do not sell, rent, or trade personal information. We share only the minimum data necessary with trusted service providers:
- Apple In-App Purchase — to process subscriptions on iPhone and iPad
- Cloud hosting — to run our servers and database
- Email delivery — to send transactional emails
Each provider is contractually bound to protect your data and use it only for the services they provide to us.
7. Data retention and deletion
Your data is retained for as long as your account is active. You may:
- Delete any child profile instantly from Settings.
- Request full account deletion by emailing support@questden.app. We will permanently delete all household data within 30 days.
- Billing records may be kept for up to 7 years for tax and legal compliance.
8. Data security
All data is encrypted in transit (TLS 1.2+) and at rest. Passwords use bcrypt hashing. Access to production systems is restricted and audited. Despite our safeguards, no internet service is 100% secure — please use a strong, unique password.
9. Your rights
Depending on where you live (GDPR, CCPA, CPRA, and similar), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, email support@questden.app.
10. International transfers
Our servers may be located outside your country of residence. We rely on Standard Contractual Clauses and equivalent safeguards to protect your data during transfer.
11. Changes to this policy
We may update this Privacy Policy. Material changes will be notified inside the app or by email at least 7 days before they take effect. The “Last updated” date at the top always reflects the current version.
12. Contact us
QuestDen LLC
Privacy inquiries: support@questden.app