Questlings Privacy Policy

Last updated 23 October 2026

Thank you for choosing to be part of Questlings (“Questlings”, “we”, “us”, or “our”). We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy or our practices, contact us at support@playquestlings.com.

This policy applies to everything collected through our website (playquestlings.com), our mobile application (the “App”), and any related services — together, the “Services”. Please read it carefully. If there are terms here you do not agree with, please stop using the Services.

Questlings is built for families with children. The parent is our user: you create the account, you consent, and you control everything in it. Children do not create accounts, do not log in, and cannot use Questlings without a parent setting it up first.

Table of contents

1. What information does Questlings collect?
2. Why do we collect your information?
3. Will your information be shared with anyone?
4. How long do we keep your information?
5. Children’s privacy
6. What are your privacy rights?
7. Cookies and website tracking
8. Controls for Do-Not-Track features
9. Do we make updates to this policy?
10. How can you contact us about this policy?

1. What information does Questlings collect?

In Short: the parent’s email and name, a first name or nickname for each child, and what the family does in the app. No photographs, no location, no advertising identifiers, and no third-party analytics.

1.1 Account information

When you create a Questlings account we collect your email address and a password, which is stored only as a cryptographic hash — we cannot read it. You may also give us your name, which is shown to your family in the app.

If you use Sign in with Apple and choose Hide My Email, the only address we ever see is the private relay address Apple generates for you.

1.2 Information about your children

Children cannot create an account, and are never asked for any information directly. A child exists only as a record inside your family, created by you. For each child we hold:

• a first name or a nickname — whatever you type, and a nickname is a perfectly good substitute;
• an avatar and a colour, both chosen from a fixed set we provide;
• optionally, a birth year — a year and nothing more, used so quest suggestions suit their age. Onboarding offers “Rather not say”, and our system is not capable of storing a full date of birth.

That is the complete list. We do not collect a child’s email address, postal address, phone number, location, contacts, or any persistent identifier.

1.3 What the app creates as you use it

Using Questlings produces a record of family activity, which we store so it is the same on every device you sign in to: the quests you create and their titles, the rewards you define, which quests were completed and approved and when, the Sparks and Tokens earned and spent, any note you add when giving coins by hand, and your child’s creature collection and its progress.

1.4 Subscription information

If you subscribe, we record whether your subscription is active and when the current period ends, confirmed directly with Apple. Apple is the merchant of record and takes the payment; we never see or store your card details.

1.5 Screen time

If you set up a screen-time reward, you choose which apps it covers using Apple’s own picker. Apple returns an opaque token, not a list — we never learn which apps your child uses, and we could not find out if we wanted to. That is a deliberate part of Apple’s design and we rely on it.

1.6 Notifications

Quest reminders are scheduled on the device itself. Nothing is sent from our servers to a child’s device, and we do not hold a push token for any device. You can turn reminders off in the app or in your device’s settings.

1.7 Support correspondence

If you email us, we keep the message and your address so we can reply and follow up.

1.8 What we never collect

In Short: the things most apps in this category do collect, we have designed out rather than promised not to misuse.

• No photographs or video. The App has no camera and no way to upload an image. There are no photos of children in our systems to secure, review, or lose.
• No location, precise or approximate.
• No advertising identifier (IDFA) and no device identifier of any kind.
• No third-party analytics or tracking SDK. Not in the child’s side of the app, not in the parent’s, not for crash reporting. There is no advertising, attribution, or analytics code in the App at all.
• No artificial intelligence features, and therefore no voice input, no chat, and nothing sent to an AI provider.
• No contacts, calendar, microphone, or health data.
• No browsing or search history.
• No messaging between users, and no content from one family is ever visible to another.

2. Why do we collect your information?

In Short: to make the app work, and for nothing else. We do not profile you, advertise to you, or sell anything on.

• To create and secure your account — so you can sign in, and so a password reset reaches you and nobody else. This is necessary to perform our contract with you.
• To run the app — to show your family the same quests, rewards and progress on each device, and to keep the reward ledger correct. Also contract performance.
• To manage your subscription — to know whether the paid features are on, and to handle renewals, cancellations and refunds correctly when Apple tells us about them.
• To answer you when you contact support, on the basis of our legitimate interest in helping our users.
• To keep the service safe and working — to prevent abuse and diagnose faults, on the basis of our legitimate interest in a service that functions.
• To meet legal obligations, where a law requires us to keep or produce something.

We do not use your information for advertising, for profiling, for training any model, or for marketing to your child. We do not send you marketing email unless you ask us to.

3. Will your information be shared with anyone?

In Short: only with the small number of providers needed to run the service, and where the law requires it. We never sell your data.

We do not sell your personal information, and we do not share it for anyone else’s advertising or marketing purposes. We have no reason to and no mechanism for doing so.

We rely on these service providers, each for one job:

• Apple — sells the subscription as merchant of record, handles payment and tax, and provides Sign in with Apple and the screen-time controls. Apple’s own privacy policy covers the payment.
• Our hosting and database providers — store your family’s data so it is available on your devices. The database is hosted in the European Union.
• Our transactional email provider — delivers password reset codes. We do not run a marketing list.

Each processes data on our instructions and for no purpose of its own. We may also disclose information where we are legally required to — a court order, a lawful request from a public authority — or where it is necessary to investigate a serious safety issue or a violation of our terms.

Business transfers. If Questlings is ever merged, acquired, or sold, your information may transfer as part of that. If it does, we will tell you, and this policy continues to apply until you are told otherwise.

4. How long do we keep your information?

In Short: for as long as you have an account. Delete the account and the deletion is real.

We keep your family’s information for as long as your account exists. When you delete your account, we delete your account record, your family, every child record, every quest, every reward, and the entire history — immediately and for real, not hidden behind a flag.

Encrypted backups may retain a copy for a short period before they rotate out. We do not use backups for anything other than restoring the service after a failure.

5. Children’s privacy (COPPA and GDPR-K)

In Short: a child is never our customer. A parent provides everything we hold about a child, and can see, change, export, or delete it at any time.

Questlings is intended for children to use, so the US Children’s Online Privacy Protection Act (COPPA) applies to us, and so does the equivalent protection for children under the UK and EU GDPR. Our position under both is the same, and it is built into how the app works rather than promised in this document:

• We never collect anything from a child directly. There is no sign-up, no login, no form, no camera, no microphone, and no free-text field a child can send us anything through.
• A parent provides the little we hold — a first name or nickname, an avatar, a colour, and optionally a birth year — and does so after creating their own account and seeing what we collect. That account creation is our verifiable parental consent, and nothing about a child reaches us before it.
• We collect no more than the service needs. COPPA requires that, and the list above is genuinely all of it.
• We never condition a child’s participation on disclosing more than is necessary. The birth year is optional and the app works without it.
• We never disclose a child’s information to third parties for their own purposes, and there is no advertising, profiling, or behavioural targeting anywhere in Questlings.
• A parent is in control at all times — you can review, correct, export, or permanently delete everything about your child from inside the app, and you can refuse any further collection by deleting the account.

Questlings is designed for children aged roughly 6–12 to use, but not to be our account holders. We rely on the parent or guardian who creates the account to consent on their child’s behalf, and we collect nothing from a child directly.

We designed the product so that the amount of children’s data in question stays very small: a name or nickname, an avatar, a colour, an optional birth year, and a record of quests completed. There are no photographs, because the App has no camera. There is no chat, no voice, and no AI. Nothing a child does is visible to anyone outside their own family.

Nothing about a child leaves the device until you have created an account. The first setup step asks for your child’s name before any account exists, and that stays on your phone until you choose to continue.

As the parent you can review, correct, export, or delete everything we hold about your child from inside the app, without asking us. If you would rather we did it, email support@playquestlings.com and we will.

6. What are your privacy rights?

In Short: you can see, correct, export, and delete your data. The first two and the last are buttons in the app.

• Access and portability. Settings → Export my data produces a complete, readable file of everything we hold about your family.
• Correction. Names, birth years, avatars, quests and rewards are all editable in the app.
• Deletion. Settings → Delete my account, as described in section 4.
• Objection and restriction. You can object to our processing on legitimate-interest grounds; contact us and we will stop unless there is an overriding reason not to.
• Withdrawing consent. Where we rely on your consent, you can withdraw it at any time, without affecting what came before.

If you are in the European Economic Area or the UK and believe we are handling your information unlawfully, you have the right to complain to your local data protection authority. EEA authorities are listed at edpb.europa.eu; in the UK it is the ICO.

We do not run a marketing email list, so there is nothing to unsubscribe from. The only emails we send are the ones your account needs — a password reset code, for example.

7. Cookies and website tracking

In Short: this website sets no cookies and contains no tracking pixel.

playquestlings.com is a set of static pages. It sets no cookies, runs no analytics, and contains no advertising or tracking pixel from us or from anyone else. Nothing you do on this site is recorded against you, and there is no cookie banner because there is nothing to consent to.

The App does not use cookies either. It stores some information on your own device so it works offline — your quests, your settings, and whether your subscription is active. That stays on your device.

8. Controls for Do-Not-Track features

Most browsers offer a Do-Not-Track (“DNT”) setting. There is still no agreed standard for how services should respond to it.

In our case the question does not arise: we do not track you across websites or apps at all, whether or not DNT is switched on. If an accepted standard is adopted and it applies to us, we will follow it and say so here.

9. Do we make updates to this policy?

In Short: yes, when the law or the app changes.

We may update this policy from time to time. The revised version takes effect as soon as it is posted here, and the date at the top will change. If a change materially affects what we collect or why, we will tell you in the app before it takes effect rather than relying on you to re-read this page.

10. How can you contact us about this policy?

Email support@playquestlings.com.

To review, update, or delete the information we hold about your family, the fastest route is Settings inside the app — Export my data and Delete my account are both there and both take effect immediately. If you would rather we did it for you, email the address above.