Privacy Policy

Questify (“we”, “us”) is a quest-driven productivity platform operated by 12529572 Canada Inc. This policy explains what personal data we collect when you use Questify at questify-ax1315h84-12529572-canada-inc.vercel.app, how we use it, and the choices you have. If anything here is unclear, contact us at privacy@questify.co.

Account information. When you sign up with an email and password, we store your email address. When you sign in with Google or Facebook, the provider shares your name, email address, and profile picture with us; we never receive your password for those services.

Quest content. Quests, tasks, year themes, party memberships, challenge attempts, and any other content you create in the app are stored so we can provide the service. Quests are private by default; content is only visible to others if you explicitly share a quest publicly or invite party members.

Location data (optional). If you opt in to location check-ins for a task, we store the task’s anchor location and your check-in events. We do not track your location continuously, and the feature is off unless you enable it.

Feedback and technical data. If you submit feedback, we store the message you send. Like most web services, our hosting provider processes standard request logs (IP address, browser type) to operate and secure the service.

We use your data to operate Questify: authenticating you, storing and displaying your quests, powering party collaboration, computing progress and achievements, and responding to your feedback and support requests.

AI features. When you ask Questify to break down a goal or investigate a task, the relevant quest and task text is sent to our AI providers (such as Anthropic, OpenAI, or DeepSeek) to generate the response. We send only the content needed for the feature, and we do not allow these providers to use your data to train their models under our agreements with them.

We do not sell your personal data, and we do not use it for third-party advertising.

We rely on a small number of service providers to run Questify:

• Supabase — authentication and database hosting. All quest content and account data are stored in Supabase-managed Postgres.
• Google — optional sign-in with your Google account (name, email, profile picture).
• Facebook (Meta) — optional sign-in with your Facebook account (name, email, profile picture).
• Vercel — web hosting and request logs.
• AI providers (Anthropic, OpenAI, DeepSeek) — process quest and task text to power AI coaching and task investigation features.

Each provider processes data only as needed to provide its service to us. Their own privacy policies govern their handling of data on their systems.

We keep your account data and quest content for as long as your account is active. If you delete content in the app, it is removed from the live database. If you want your account and associated data deleted entirely, email privacy@questify.co and we will delete it within 30 days, except where we are legally required to retain certain records.

Database backups are retained for a limited period by our hosting providers and roll off automatically.

All traffic to Questify is encrypted in transit (HTTPS). Access to your data is enforced at the database level with row-level security policies, so private quests and tasks are only readable by you and the party members you invite. No system is perfectly secure, but we design access controls to fail closed.

Questify is not directed at children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.

We may update this policy as Questify evolves. We will post changes on this page and update the “last updated” date above. Material changes will be highlighted in the app or by email.

Questions, concerns, or data requests: privacy@questify.co. You can also reach us through the feedback button in the app.