QuestiO – Privacy Policy

Last updated September 25, 2026 · replaces the version of February 14, 2026

QuestiO is a habit app you use with friends. This policy explains what we collect, why, who can see it, how long we keep it, and how to get it back or delete it. We don't sell your data, we don't show ads, and we don't track you across other apps.

1. Who we are

QuestiO is made by Mind Games Lab LLC, a company based in Washington State, USA ("we", "us"). This policy covers the QuestiO app for iPhone and Android and the QuestiO page at mindgameslab.com/questio-landing.

2. What we collect

Your account

• Email address and a password. Your password is handled by Google Firebase Authentication; we never see it.
• If you sign in with Apple or Google, we get the name, email address and (for Google) profile photo link that they share with us. With Apple you can choose to hide your email; we then get a private relay address.

Your profile

• Your display name, your @handle, and your avatar (one of QuestiO's built-in characters, or the photo from your sign-in provider).

Your quests and check-ins

• What you create: quest title, description, schedule, duration, the "tiny version", and your optional plan (the time, the place and what it comes after).
• Your check-ins: the day, full or tiny, an optional short note, and whether it was logged later.
• Pauses you set (for one quest or everything) and your support pact (how you'd like friends to support you).

Your activity with friends

• Friend requests, friendships and blocks.
• Cheers, nudges and support messages you send and receive. These are preset messages, not free chat.
• "Do it with me" invitations and "doing it now" pings.
• "Seen by" records: when a friend views your check-in, we store that they saw it. We store no time and show it only to you.
• Reports you send us about content or people.
• Invites by email: if you invite a friend by typing their email address, we store that address so the invite reaches them. It is deleted if they, or you, delete an account.

Technical information

• A push notification token, your device type and device name, so notifications reach the right phone.
• Your timezone, so "today" means your day and reminders arrive at your local time.
• When you last opened the app, your notification settings, and the hour you usually check in. We learn that hour from your check-ins and use it only to time reminders.
• App version and update information, so we know which version you're on.

Usage analytics

We use Google Firebase Analytics to understand which features are used, for example "a check-in was made" or "the feed was opened". Before an event is sent we remove emails and anything you typed (notes, messages). We don't use an advertising identifier and we don't track you across other companies' apps or websites.

Crash reports

If the app crashes, it saves the technical error, the app version and your phone's platform, and sends them to us the next time you're signed in.

The QuestiO web page

• If you join our updates list, we store your email address, your phone platform (if you chose one) and which link brought you there.
• The page counts visits and button taps without cookies. To stop abuse, we briefly keep a scrambled (hashed) form of your IP address for the current day only.

3. What we don't collect

• Precise location (GPS). A "place" in your quest plan is only text you type.
• Your contacts, photo library, microphone or camera.
• Data from Apple Health or Google Fit.
• Payment information. QuestiO is free.

A note about health. Habits can say something about your health, like "morning walk" or "no alcohol". We don't ask for health information and don't use it for anything beyond running your quests. What you write is visible to the people in that quest, so write only what you're comfortable sharing with them.

4. How we use it

• To run QuestiO: your account, quests, check-ins, friends, the feed and your weekly progress.
• To send notifications you've allowed: reminders, the morning note, friend activity and support. You can turn each kind off in the app.
• To keep QuestiO safe: handling reports, blocking, preventing spam and abuse, and enforcing our Terms of Use.
• To fix and improve the app, using crash reports and usage analytics.
• To answer you when you write to us, and to send updates-list emails if you signed up for them.
• To comply with the law.

We don't sell your personal information, share it for advertising, or use it to train AI models.

5. Who can see what

6. Services that handle your data

We don't sell or rent your data. These companies process it on our behalf, only to run QuestiO:

We may also share information if the law requires it, to protect someone's safety, or as part of a sale or merger of our business. In that last case, this policy would keep applying to your data.

7. How long we keep it

8. Your choices and rights

• Get a copy of your data: Profile → "export my data". This builds a file on your phone with your profile, quests, check-ins and cheers.
• Correct it: edit your name, handle, avatar, quests and settings in the app.
• Control notifications: bell → notification settings, or your phone's settings.
• Pause: pause a quest or everything, and scheduled notifications stop.
• Delete your account: in the app (see section 9).
• Anything else, like objecting to analytics or asking what we hold: email us (section 14). We answer within 30 days.

9. Deleting your account

Profile → danger zone → delete account. We then delete your account and, within minutes:

• your profile, @handle, settings and push tokens;
• your check-ins (and cheers on them), your cheers, "seen by" records, invitations, notifications, reports and crash reports;
• your friendships and quest memberships;
• every quest you own, for everyone in it, including other people's check-ins in those quests. If friends are still using a quest you made, they lose it too.

Export your data first if you want to keep it. Deletion can't be undone.

No longer have the app? You can also request deletion by email.

10. Age requirement

You must be 13 or older to use QuestiO. If you're under 18, or under the age of adulthood where you live, a parent or guardian should agree to our Terms of Use with you. We don't knowingly collect data from children under 13. If we learn we have, we delete the account. Parents can contact us at the address below.

11. Security and where data is stored

Data is sent encrypted and stored on Google Cloud in the United States. Access is limited by security rules that we test automatically. No system is perfectly secure; if a breach affects you, we will tell you as the law requires.

We are based in the United States, so your data is processed there. For people in the EU, UK and Switzerland, transfers rely on our providers' Standard Contractual Clauses.

12. Region-specific rights

EU, UK and Switzerland

We process your data to provide the service you asked for (contract), to keep QuestiO safe and improve it (legitimate interests), and, for the updates list, with your consent. You can access, correct, delete, export, restrict or object to processing, and complain to your local data-protection authority.

US states

Residents of California, Colorado, Connecticut, Virginia, Washington and other states with privacy laws have similar rights to know, correct and delete. We don't sell or "share" personal information for advertising. To appeal a decision about your request, reply to our answer with the subject "Privacy appeal".

13. Changes to this policy

If we change this policy we'll update the date at the top. For important changes we'll tell you in the app before they take effect.

14. Contact us

Email admin@mindgameslab.com. Mind Games Lab LLC, Washington State, USA.