Your quests are personal. We treat them that way.

Information we collect

Account and profile

We collect the email address used to create your account, a user identifier, display name, selected genre and character presentation, confirmed age, and preferences such as sound and reminder settings.

Quests and game activity

We store the quests, goals, and notes you choose to enter, including difficulty, completion status, and timestamps. We also store game progress such as XP, level, streaks, achievements, tutorial status, avatar progress, and share-card export counts so your experience can sync across sessions and we can understand whether the sharing feature works.

Voice input and planning

If you use voice entry, Questify uses Apple's speech-recognition technology to turn microphone audio into text. Depending on your device and Apple settings, Apple may process that audio under Apple's terms. Questify uses the resulting transcript as Plan Your Day text and does not save the raw audio recording in Questify storage.

When you request task suggestions, planning help, or themed text, Questify first uses Apple's on-device Foundation Models when supported. Otherwise, the text you entered (including a voice transcript if you used one) and the related instructions are relayed through a Questify Supabase function to OpenRouter for AI processing. Questify does not send raw microphone audio to OpenRouter. Generated responses may be cached on your device for speed; cache entries are treated as expired after about one hour.

Purchases

If you buy a premium subscription, Apple processes the payment. Questify receives product, transaction, entitlement, and expiration information needed to unlock and restore the purchase. We do not receive your full payment-card number.

Optional selfie and personalized avatar

Personalized avatars are optional. Immediately before upload, Questify asks you to confirm that the photo is of you and to consent to it being sent to OpenAI solely to create your personalized hero. The selfie is uploaded to private Questify storage, safety-screened, and used to forge the first identity-bearing base character. Questify does not use it to identify you, advertise to you, track you across apps, or train models.

After the base character is created, or if the generation attempt ends, Questify automatically attempts to delete the source selfie, clear its storage reference, and remove the temporary integrity fingerprint used to confirm the image did not change between screening and generation. Later stages and poses are built from the generated base character, not from the selfie. Generated character artwork and generation status remain with your account until you delete your account.

OpenAI states that API inputs are not used to train its models by default. OpenAI may retain API abuse-monitoring data, which can include image inputs, for up to 30 days unless shorter approved retention controls apply, and may retain flagged content where required for safety review or law.

Device and service information

Our hosting and security providers may process basic network and request information, such as IP address, device or browser type, timestamps, and error logs, to operate, secure, and troubleshoot the service. Questify does not include an advertising SDK or collect a remote push-notification token. If you opt in to the daily reminder, it is scheduled locally on your device.

How we use information

• Authenticate your account and provide, save, and sync Questify.
• Calculate progress, streaks, rewards, and personalized game states.
• Transcribe voice input and provide task suggestions or daily planning when you request them.
• Generate an optional personalized avatar at your direction.
• Verify, restore, and administer App Store subscription access.
• Prevent abuse, maintain security, diagnose failures, and answer support requests.
• Meet legal obligations and enforce the Terms of Use.

When information is shared

We do not sell personal information, share it for cross-context behavioral advertising, or use it for third-party advertising. We disclose only what is needed to service providers acting for Questify:

• Supabase provides authentication, database, file storage, server functions, and the relay for fallback planning requests.
• Apple provides speech recognition, supported on-device model processing, App Store payments, and purchase-validation information.
• OpenRouter processes task or planning prompts when Apple's on-device model is unavailable.
• OpenAI processes a temporary selfie only when an eligible user requests personalized avatar generation.

We may also disclose information when required by law, to protect users or the service, or as part of a business transfer subject to appropriate safeguards.

Retention and deletion

Account, quest, progress, generated-character, and entitlement data is retained while your account is active or as needed to provide Questify. Source selfies and their temporary integrity fingerprints follow the shorter deletion process described above; OpenAI's separate API safety-log retention may last up to 30 days. Generated responses may be cached locally for speed and are treated as expired after about one hour; text you choose to turn into a saved quest then follows normal quest retention. Questify does not store raw microphone recordings. Limited records may be retained where required for fraud prevention, transaction integrity, security, or law.

You can permanently delete your Questify account from Settings → Account Actions → Delete Account. Account deletion does not cancel an Apple subscription; subscriptions must be managed separately in your Apple ID settings. Apple may retain its own transaction records under Apple's policies.

Your choices

You can edit profile and app preferences in Settings, turn the local daily reminder off at any time, decline the personalized-avatar feature, restore an eligible purchase, or delete your account in the app. You may also contact us to ask about access, correction, deletion, or another privacy right that applies where you live.

Children

Questify is for people age 13 and older and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. Personalized-avatar upload requires the user's explicit confirmation that the photo is of them and consent to the processing described above.

Security and international processing

We use access controls, private storage for selfies, authenticated requests, and other reasonable safeguards. No method of storage or transmission is completely secure. Service providers may process information in countries other than your own, subject to their contractual and legal safeguards.

Changes and contact

We may update this policy as Questify changes. We will update the effective date here and provide any additional notice required by law.

Privacy questions can be sent to taylor@reillytalent.com.