LEGAL

Privacy Policy

Last updated: July 4, 2026

1. Introduction

Welcome to Questory ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").

Please read this policy carefully. If you disagree with its terms, please discontinue use of the Service.

2. Information We Collect

Information You Provide

  • Display name — chosen by you for your explorer profile
  • Photos — images you submit as quest completions
  • Payment information — processed securely by Stripe; we never store card details

Information Collected Automatically

  • Location data — GPS coordinates used to tailor quests to your area and verify landmark proximity. Location is only accessed while the app is in use and only when you grant permission.
  • Device information — device type, operating system, and app version for debugging
  • Usage data — quests completed, streaks, XP earned, and in-app interactions
  • Log data — IP address, browser type, pages visited, and timestamps

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service
  • Generate location-aware quests and area descriptions
  • Validate photo submissions for quest completion
  • Track streaks, XP, badges, and leaderboard rankings
  • Process Explorer Pass payments via Stripe
  • Send important service notifications
  • Improve and personalize your experience
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Location Data

Questory uses your device's GPS to provide core gameplay features including quest generation, landmark detection, and biome identification. Specifically:

  • Location is accessed only while the app is actively in use (foreground only)
  • We do not track your location in the background
  • Approximate coordinates are sent to our AI services to generate relevant quests
  • For landmark detection, your proximity is verified server-side (within 50km for free players)
  • You can revoke location permission at any time in your device settings; this will disable location-dependent features

5. Photos and User Content

Photos you submit for quest validation are processed by our AI validation service (OpenAI GPT-4o Vision) to verify quest completion. Photos may be stored temporarily for validation purposes and may appear on leaderboards or in-app galleries if you achieve top scores. You retain ownership of your photos.

By submitting a photo, you grant Questory a limited, non-exclusive license to display it within the Service for gameplay purposes.

6. Sharing Your Information

We do not sell your personal information. We may share data with:

  • Stripe — payment processing for Explorer Pass
  • OpenAI — photo validation and quest generation (location coordinates and images)
  • Service providers — hosting, analytics, and infrastructure partners bound by confidentiality agreements
  • Legal authorities — when required by law or to protect our rights

7. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. Quest photos are retained for up to 90 days. You may request deletion of your account and associated data at any time by contacting us.

8. Children's Privacy

Questory is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.

9. Your Rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate data
  • Request deletion of your data
  • Object to or restrict processing
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact us at [email protected].

10. Security

We implement industry-standard security measures including HTTPS encryption, secure database storage, and access controls. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last updated" date and, where appropriate, providing in-app notification. Continued use of the Service after changes constitutes acceptance.

12. Contact Us

If you have questions about this Privacy Policy, please contact us: