Questify Privacy Policy

Last updated: July 28, 2026

1. Introduction

Questify ("the App") is a family application that helps parents support their children's growth through task management and a reward system. The developer, Daiki, treats the privacy of you and your children as a top priority and works to keep personal information secure. This Privacy Policy explains what information the App collects, and how that information is used and protected.

2. Information we collect

2.1 Information you provide directly

• Parent account information: email address, password, and name
• Child information: child's name, age, gender (optional), and profile image
• Task and reward information: the tasks you create, along with their points, deadlines, categories, and similar details
• Progress records: tasks your child has completed, points earned, and reward redemption history
• Profile images: the avatar image you set for your child

2.2 Information collected automatically

• Authentication information: the user ID provided by Google or Apple when you sign in with a Google account or Apple ID
• Device information: device type, OS version, and app version
• Purchase information: items purchased, subscription status, and identifiers relating to purchases and renewals
• Technical information: app operation data needed to provide the service and investigate problems

3. Storage and processing

3.1 Data storage

• Firestore Database: structured data such as tasks, rewards, and progress records is stored encrypted in Google Cloud Firestore.
• Firebase Authentication: email addresses, password hashes, and authentication tokens are managed through Firebase Authentication.
• RevenueCat: information needed to verify and manage subscription status and purchase history is processed.
• Local storage: session information and some cached data may be stored in the device's AsyncStorage.

3.2 Where data is stored and processed

• Cloud Firestore (tasks, rewards, progress records, and similar): stored in Google Cloud's asia-northeast1 (Tokyo) region. This region is fixed and does not change based on where you live.
• Firebase Authentication (credentials): processed only in Google's data centres in the United States. The region cannot be selected.
• RevenueCat and Apple: subscription status is processed by RevenueCat, and purchase and payment information by Apple, each on their own infrastructure. Where that processing and storage takes place is determined by those companies; please refer to their privacy policies for details.

Depending on where these services process data and where you are located, a cross-border data transfer may occur.

3.3 Data retention

• Tasks, rewards, and progress records are retained for as long as your account is active.
• When you complete account deletion within the App, the account data held by Questify and RevenueCat is deleted.
• Purchase records that Apple retains for legal, accounting, fraud prevention, or similar purposes are governed by Apple's own retention policy.

4. How we use information

Information collected from you is used only for the following purposes:

• Providing, improving, and customising the App
• Managing and authenticating user accounts
• Providing task and reward management features
• Diagnosing and fixing technical problems
• Security and fraud prevention
• Verifying compliance with the Terms of Use
• Meeting legal obligations

5. Sharing with third parties

5.1 What we do not share

The App does not share or sell your personal information, or your child's, to third parties such as advertisers, data brokers, or marketers, other than in the cases below:

5.2 When we do share

• Service providers: Google Cloud / Firebase (authentication and data hosting), RevenueCat (subscription management), and Apple (payments and Apple ID authentication)
• Legal requirements: where we determine it is necessary in response to a law, a court order, or a request from a government authority.
• Security purposes: to prevent or investigate fraud, security breaches, or other unlawful activity.

6. Children's privacy

• Parent-managed accounts: a child's account is created and managed by their parent.
• Limited data: only the information necessary to provide the App's features is collected about children.
• No targeted advertising: children's information is never used for marketing or ad targeting.
• Right to deletion: parents can start deletion of the account and its associated data from the App's settings screen.
• Secure transmission: all data transmission is protected with HTTPS/TLS encryption.

7. Data security

• All communication is protected by TLS/SSL encryption.
• Firebase Authentication follows industry-standard security practices.
• Credentials are managed by Firebase Authentication; the App does not store plaintext passwords.
• Stored data, including profile images, is protected by the security features of the cloud services we use.

8. Your rights

As a user of the App, you have the following rights:

8.1 Right of access

You may request access to the personal information processed about you or your child.

8.2 Right to rectification

You may request correction of inaccurate or incomplete information.

8.3 Right to erasure (right to be forgotten)

You may request deletion of personal information in the following circumstances:

• The information is no longer needed for its original purpose
• You withdraw your consent
• You delete your account

8.4 Right to portability

You may request an export of your information in a structured, commonly used format.

8.5 Withdrawal of consent

Where processing is based on consent, you may withdraw that consent at any time.

To exercise these rights, please contact us by email at the address below. After appropriate identity verification, we will respond within 30 days.

9. Third-party services

9.1 Google services

• Google Sign-In: Google account authentication
• Firebase Authentication: user authentication management
• Firebase Firestore: database hosting

For details, see the Google Privacy Policy.

9.2 Apple services

• Sign in with Apple: Apple ID authentication
• App Store: in-app purchases, and subscription billing and management

For details, see the Apple Privacy Policy.

9.3 RevenueCat

• RevenueCat: management of subscription status and purchase entitlements

For details, see the RevenueCat Privacy Policy.

10. Changes to this Privacy Policy

This Privacy Policy may be updated as needed. If a significant change is made, we will notify you within the App or by email. Continued use of the App constitutes agreement to the revised policy.

11. GDPR and international data protection laws

We respect the European Union's General Data Protection Regulation (GDPR), Japan's Act on the Protection of Personal Information (APPI), and privacy laws in other regions, and we handle personal information within the scope described in this policy.

Our data is located in different places depending on the service (Cloud Firestore in Japan, Firebase Authentication in the United States). Depending on where these services process data and where you are located, a cross-border data transfer may occur. See "3.2 Where data is stored and processed" for details. If you wish to exercise your rights under the GDPR, please contact us using the details below.

12. Contact

For questions or concerns about this Privacy Policy, or to exercise your privacy rights, please contact us at:

13. Region-specific notices

13.1 For users in Japan

The App handles personal information in line with the Act on the Protection of Personal Information (APPI). If you have questions or requests, please contact us at the address above.

13.2 For users in the EU / EEA

To exercise your rights under the GDPR (access, rectification, erasure, portability, and others), please contact us at the address above.

13.3 For users in California

Under the CCPA, you have the right to request disclosure and deletion of personal information, and to opt out of its sale.

© 2026 Questify. All rights reserved.