Privacy Policy

KidQuest • Effective Date: January 30, 2026

This Privacy Policy explains how KidQuest ("we," "our," or "us") collects, uses, and shares information when you visit kidquest.app or use the KidQuest application (the “Service”).

1. Information We Collect

We collect information in three main categories: (A) information you provide, (B) information collected automatically, and (C) information from third-party sign-in providers.

A. Information You Provide

  • Account Information (Parent/Guardian): When you sign up, we collect your email address and password (processed via Supabase Auth) to create your Admin account.
  • Family Profile Data: As the account administrator, you voluntarily provide the names or nicknames of family members ("Heroes") to populate your dashboard. You control this data and can use pseudonyms if you prefer.
  • User Content: We collect data you generate while using the app, such as quest titles, rewards, chore completion history, and currency balances.

B. Information Collected Automatically

  • Usage Logs: We process timestamps and interaction events (e.g., when a quest is completed) to maintain streaks and progress tracking.
  • Device Information: We may log basic device information (browser type, IP address) for security monitoring and fraud prevention.

C. Third-Party Sign-In (Optional)

If you sign in via Google, we receive your email, name, and profile picture from Google via Supabase to authenticate you. We do not have access to your Google password.

2. How We Use Your Information

We use your information solely to operate KidQuest, including:

  • Creating and managing your "Family Dashboard".
  • Authenticating your identity and securing your account.
  • Tracking chore progress, streaks, and rewards.
  • Sending webhooks to your personal Home Assistant (only if strictly enabled by you).
  • Sending transactional emails (password resets, verification).

We do not sell, rent, or trade your personal information. We do not use your data for targeted advertising, nor do we display third-party ads.

3. How We Share Information

We share information only with the infrastructure providers required to run the app:

  • Supabase: For secure database hosting and authentication.
  • Vercel: For hosting the web application.
  • Google (OAuth): Only if you choose to sign in with Google.
  • Legal Requirements: If required by law to protect the safety and security of our service or users.

4. Home Assistant & Webhooks

KidQuest offers an optional feature to send data to your personal Home Assistant instance via Webhooks. This feature is disabled by default. If you enable it and provide a URL, we will send event data (User Name, Quest Title) to that URL. You are responsible for securing your own Home Assistant endpoint.

5. Data Security

We use industry-standard security measures, including Row Level Security (RLS) policies, to ensure that your family's data is isolated and accessible only by your authenticated account. While we strive to protect your data, no internet transmission is 100% secure.

6. Children’s Privacy (COPPA)

KidQuest is directed to Parents/Guardians.

We do not knowingly collect personal information directly from children under 13 without parental consent. Accounts must be created by an adult (18+). Any information regarding children (such as names or nicknames for profiles) is provided solely by the Parent/Guardian user.

Parental Consent: By creating a profile for a child and allowing them to interact with the Service (e.g., checking off chores), you explicitly consent to our collection and use of the data generated by that interaction in accordance with this policy.

If you believe we have inadvertently collected data from a child without parental involvement, please contact us immediately at support@kidquest.app so we can delete it.

7. Data Retention & Deletion

We retain your data only as long as your account is active. You may delete your account and all associated family data at any time via the Settings menu or by contacting support.

8. Additional State Privacy Rights

California Online Privacy Protection Act (CalOPPA)

We do not support "Do Not Track" browser settings. We track your activity within the app solely to provide the service.

California "Shine the Light" Law

We do not share your personal information with third parties for direct marketing purposes.

Access & Deletion Rights

Depending on your location (CCPA/GDPR), you may have rights to access, correct, or delete your personal data. KidQuest provides tools within the app (Settings) to edit or delete your data directly.

9. Changes to This Policy

We may update this policy periodically. The "Effective Date" at the top of this page indicates when the latest changes were made. Continued use of the app implies acceptance of the updated policy.

10. Contact Us

If you have questions about this Privacy Policy, contact us at support@kidquest.app.