Privacy Policy

Last updated: November 12, 2025

1. Introduction

Welcome to QuestXP ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you visit our website or use our services.

By using QuestXP, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide:

  • Waitlist Registration: Name (optional) and email address
  • Account Information: When you create an account (username, email, password)
  • Profile Data: Optional information like goals, preferences, and settings
  • Communications: Messages you send to our support team

2.2 Automatically Collected Information

When you use QuestXP, we automatically collect:

  • Usage Data: Quest completion, XP earned, streaks, level progress
  • Device Information: Device type, operating system, browser type
  • Analytics: Pages visited, time spent, features used (anonymized)
  • Cookies: For authentication and preferences

3. How We Use Your Information

We use your information to:

  • Provide and maintain the QuestXP service
  • Send you important updates and waitlist notifications
  • Personalize your experience with AI-powered quest recommendations
  • Track your progress, XP, and achievements
  • Improve our service through analytics and user feedback
  • Respond to your support requests and communications
  • Detect and prevent fraud or abuse
  • Send marketing communications (with your consent)

4. How We Share Your Information

We do not sell your personal data. We may share your information with:

  • Service Providers: Third parties that help us operate (hosting, email, analytics)
  • Legal Requirements: When required by law or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets
  • With Your Consent: When you explicitly authorize sharing

5. Data Security

We implement industry-standard security measures to protect your data:

  • Encryption in transit (HTTPS/TLS) and at rest
  • Secure password hashing (bcrypt)
  • Regular security audits and updates
  • Access controls and authentication
  • Secure cloud infrastructure (Vercel, Supabase)

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal data only as long as necessary for the purposes outlined in this policy. When you delete your account, we will delete or anonymize your data within 30 days, except where we're required to retain it for legal reasons.

7. Your Rights

You have the right to:

  • Access: Request a copy of your personal data
  • Correction: Update or correct inaccurate information
  • Deletion: Request deletion of your account and data
  • Export: Download your data in a portable format
  • Opt-Out: Unsubscribe from marketing emails
  • Object: Object to certain data processing

To exercise these rights, contact us at privacy@questxp.app

8. Children's Privacy

QuestXP is not intended for children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Cookies and Tracking

We use cookies and similar technologies for:

  • Authentication and session management
  • Remembering your preferences
  • Analytics and performance monitoring
  • Security and fraud prevention

You can control cookies through your browser settings, but some features may not work properly if cookies are disabled.

10. Third-Party Services

We use the following third-party services:

  • Vercel: Hosting and deployment
  • Supabase: Database and authentication
  • Resend: Transactional emails
  • Analytics: Usage tracking (anonymized)

These services have their own privacy policies, and we recommend reviewing them.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with this privacy policy.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. Continued use of QuestXP after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this privacy policy or our data practices, contact us: