Privacy policy
PocketQuest is an app for families: in the parent panel a parent sets up a daily plan and a catalogue of rewards for their child, and in their own app the child ticks off tasks, collects points and asks for rewards. Below we explain what data this involves, why, who we entrust it to and how to delete it.
Who is responsible for your data
The data controller is Rychlicki Holding sp. z o.o., ul. Leśna 8/8, 80-322 Gdańsk, Poland, KRS 0000880190, NIP (tax ID) 9571130261. For anything about personal data, write to [email protected].
The parent's data
- E-mail address and, optionally, a first name. Used to sign in (we send a one-time link and code; there are no passwords) and for e-mails about the account: instructions for connecting the child's phone and a reminder about it.
- Sign-in session: a session identifier, IP address and browser name. A session expires after 30 days without signing in. The IP address also protects against abuse (limits on sign-in and connection attempts). In the app from the store, the session is kept in the phone's secure storage, not in a cookie.
- Family settings: time zone, currency and points rate, the panel's language, weekend days, holiday mode, rewards and their prices, notes on reward decisions and points adjustments.
- Consents given in the setup wizard (legal guardian, beta terms) with date and version, and the dates of the last sign-in and activity in the panel.
- Access request (closed beta): e-mail, first name and the message from the form.
- The parent's phone with the app: if the parent allows notifications, we store that phone's notification token (an identifier issued by Apple) to tell them about the child's reward requests. The token is removed when the parent signs out in the app, switches the phone to the child's side, or deletes the account.
The child's data
A parent or legal guardian enters the child's data and creates the account. The child has no account, e-mail address or password of their own. We collect only what the app needs to work:
- First name or nickname (up to 20 characters) and the chosen character picture. We do not collect photos, date of birth, phone number or location.
- The daily plan and how it went: routines, tasks, times ticked off, points, day streaks, reward requests.
- The child's phone: when connected, the phone receives a random token. We store only its hash, the connection date and the last activity. In the app from the store the token is kept in the phone's secure storage (Keychain on iOS, Keystore on Android); in a browser, in a cookie.
PocketQuest, on the website and in the app from the store, has no ads and no purchases. The child's side has no third-party analytics at all; the only statistics are about parents signing in (Better Auth, below). Routine reminders on the child's phone are scheduled by the phone itself (local notifications), without sending data to notification services.
Why, and on what legal basis
- Running the app (account, plan, points, rewards, account e-mails): the contract with the parent, i.e. use of the service (Art. 6(1)(b) GDPR).
- Security and abuse prevention (IP addresses, attempt limits, an operations log without content): our legitimate interest (Art. 6(1)(f) GDPR).
- Sign-in statistics in the Better Auth service (below): our legitimate interest in developing the service and spotting sign-in problems.
We do not sell data, do not profile and do not use it for advertising.
Who we entrust data to
- Vercel Inc.: hosting of the app and server, Dublin region (Ireland).
- Turso (ChiselStrike Inc.): database, AWS eu-west-1 region (Ireland).
- Resend Inc.: sending e-mails to the parent (e-mail address and the e-mail's content, e.g. the child's name in the phone connection instructions).
- Better Auth, Inc. (USA, dash.better-auth.com): parents' sign-in statistics, i.e. e-mail, IP address, approximate location (city, country) and browser at sign-in.
- Apple Inc. (Apple Push Notification service): delivers notifications to the parent's phone with the app from the store. Apple receives the phone's token and the notification's content: the child's name, the reward's name and its price in points.
- Functional Software, Inc. (Sentry, data stored in the EU region in Frankfurt): error reports from the server, the website and the parent panel, i.e. the error description, the page address without parameters and the browser type. No IP address, location, e-mail or child data; the child's pages send no reports.
Some of these companies are based in the USA. Where data leaves the European Economic Area, this happens on the basis of standard contractual clauses approved by the European Commission or a Commission adequacy decision (EU-US Data Privacy Framework).
Cookies and device storage
- pq_device: connects a browser to a child, valid for a year.
- Better Auth session: the parent's sign-in, 30 days. pq_login: ties the sign-in link to the browser that asked for it, 15 minutes.
- pq_skin: the chosen look of the parent panel, a year. pq_lang: the chosen language of the parent panel, a year.
- Browser storage keeps convenience settings, e.g. sound on, the last chosen child and the last e-mail typed to sign in.
We use no advertising or analytics cookies.
How long
- We keep the family's data for as long as the account exists.
- Deleting the account in the parent panel (More → Account) immediately erases the family's data, the children, phones, points history, operations log and the parent's account.
- Sign-in links and codes expire after 15 minutes, a phone connection code after 10 minutes, a connection link after 7 days.
- Once a day we delete expired sign-in sessions (with their IP address and browser) and codes, attempt counters older than 2 days, access requests older than 90 days and operations log entries older than a year.
- The database provider keeps backups that can restore the state from up to the last 10 days. After that, deleted data is gone from backups too.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict processing, to data portability and to object to processing based on legitimate interest. You can export the family's data and delete the account yourself in the parent panel; for anything else write to [email protected]. You may also lodge a complaint with the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa), or with the authority in your country.
Changes
We will e-mail parents about significant changes to this policy. The date of the version in force is at the top of the page.