Privacy Policy

Information we collect

We collect the information needed to run SideQuest, keep your progress available, and protect invitations.

• Account information, such as your email address or Apple sign-in identifier when you choose to connect an account.
• If you choose Google sign-in, Supabase receives and stores your Google account identifier and basic profile information, including your email address and verification status and, when provided, your name, profile-picture URL, and Google Workspace domain, to authenticate and manage your SideQuest account.
• The email address you provide during a web checkout so Stripe and RevenueCat can process the purchase, send a receipt, and deliver an app unlock link.
• Quest activity, progress, journal notes, photos you choose to add, reactions, and Together participation.
• Purchase identifiers, entitlement status, Pack Key balance changes, and pack unlocks. Apple processes payment details for App Store purchases, Google processes payment details for Google Play purchases, and Stripe processes payment details for web purchases; SideQuest does not receive your full payment-card information.
• App, device, attribution, and usage information used for reliability, fraud prevention, and product analytics.

How we use information

We use this information to provide and secure the app, sync progress, deliver invited quests, respond to support requests, understand product performance, and comply with legal obligations.

Journal and Together sharing

Journal entries are private by default. When you intentionally share a result inside a Together quest, the people identified in the sharing control before you submit can see the shared result and may react to it. SideQuest does not publish your journal to a public feed.

Service providers

We use providers that process information for us under their own security and privacy commitments, including Supabase for authentication, database, file storage, and durable Pack Key records; RevenueCat for purchase validation, entitlement status, web-purchase redemption, and Pack Key events; Stripe for web checkout and payment processing; AppsFlyer for attribution; Google for optional Google sign-in; and Apple for sign-in, distribution, and App Store payment processing.

Google also provides Google Play distribution and payment processing. PostHog provides product analytics and diagnostics.

Advertising attribution and measurement

AppsFlyer may process a device identifier and app interactions to measure how people discover and use SideQuest. AppsFlyer also receives an IP address and maps it to an approximate region or city for attribution and fraud prevention. Apple classifies the device-identifier portion of this attribution activity as tracking across apps and websites owned by other companies. SideQuest does not sell your journal entries, photos, sign-in email, or purchase history.

Website measurement

Website measurement uses PostHog to count visits to public website pages and clicks to the App Store. This measurement records the page path, a broad referral category, and a randomly generated identifier that lasts only for the current page. It does not use cookies or persistent browser storage and does not record URL queries, form content, or session replay. The website respects Do Not Track and Global Privacy Control signals.

Retention and deletion

We keep information while your account is active and as needed to provide SideQuest, resolve disputes, prevent abuse, and meet legal obligations. You can request account deletion from your profile. Some minimized records may be retained when required for fraud prevention or legal compliance.

Your choices

You choose whether to add photos, connect an account, join a Together quest, and share a result with the people identified in the sharing control before you submit. Device settings control photo, camera, contact, and tracking permissions. You can delete your account from Profile, where SideQuest explains what will be erased before you confirm.

Children and changes

SideQuest is not directed to children under 13. If we learn that we collected personal information from a child in violation of applicable law, we will remove it. We may update this policy as the product or law changes and will post the effective date here.