Your data, handled carefully.

The short version

• We collect only what we need to run the product: your email, your completions, basic device info.
• We don't sell your data, and we don't share personal data with third parties for marketing.
• We use a small number of processors (email, analytics, payments) — all named below.
• You can export or delete your account at any time from Settings → Privacy.

What we collect

Account information

When you sign up we collect your email address and, if you set one, your display name and handle. If you sign in with Google or Apple, the identity provider returns your email and a unique ID; we never see your provider password.

Activity information

We store the quests you complete, the collections you join, and any ratings or photos you attach to a completion. This is used to personalise your daily suggestion and to surface community quality signals (e.g. 4-star averages).

Device information

We collect basic browser and device information (operating system, browser version, approximate region) to keep the app working and to diagnose errors. We do not collect precise location.

How we use it

• Deliver the daily quest feed, groups, and collections you subscribed to.
• Pay creator royalties based on completions.
• Respond to support requests you email us.
• Detect abuse, spam, and fraud.

Who we share with

We use a small list of trusted processors, each covered by a data-processing agreement:

• Postmark or AWS SES — transactional email delivery.
• Paystack or Stripe — creator payouts, depending on region.
• Cloudflare and Vercel — hosting, CDN, DDoS mitigation.
• Sentry — error monitoring (scrubs personally identifiable strings on ingest).

We share information with these processors only to the extent necessary. We will name any new processor here before onboarding them.

Your rights

You can access, correct, or delete your data at any time from Settings → Privacy, or by emailing [email protected]. Depending on where you live, local law may grant additional rights (e.g. GDPR subject access, CCPA opt-out). We honour these rights for every user, regardless of location.

Retention

We keep account data for as long as your account is active. If you delete your account, we remove personal data within 30 days. Anonymised aggregates (e.g. "how many people completed this quest") may be retained indefinitely.

Contact

Questions, concerns, or requests — email [email protected].