Privacy Policy

In short

• No advertising, no analytics, no tracking. The app bundles no third-party SDK at all.
• Nothing is sold, and nothing is shared for marketing.
• Deleting your account deletes your data, photos included.

What is stored

• Account: the identifier Apple or Google gives us, your email address if the provider shares one, your name, your @handle, your avatar, your country (from your device's region setting) and your app language.
• Quests you create: title, description, the place you picked, its radius and its times.
• Completions: the coordinate your device reported when you finished a quest, how far that was from the quest, whether it was accepted, and when.
• Photos and videos you upload as proof, and quest cover images.
• Social: friendships, your invite code, blocks, likes, reports you send, weekly missions you finish, and your notification history.
• Device: a push notification token, if you allow notifications.
• Sign-in: refresh tokens are stored only as a SHA-256 hash, so a dump of that table cannot be replayed as a session.

Who sees what

This is the part worth reading, because the rules are narrower than the app's screens might suggest.

• A quest's location is visible to everybody who can see the quest. That is the point — it is the place to go.
• The coordinate recorded when you complete a quest is not shown to other participants. It is stored so arrival can be verified, and only the person who created the quest can request it.
• A proof photo is visible only to people who completed the same quest. Not to the quest's creator, and on no feed.
• Leaderboards carry a handle and a number. Never a location.
• Somebody you block cannot see you, and you cannot see them.

Location

The app asks for location for two reasons and no others: to show quests near you, and to check that you arrived. It does not collect location in the background, and it keeps no location history beyond the completions above.

Who else handles it

Duequest runs on services that necessarily see the data in order to store or deliver it. None of them receives it for their own purposes.

• Apple and Google — verifying who you are when you sign in
• Google Cloud Run (United States) — the server
• Neon on AWS (United States) — the database
• Cloudflare R2 — photos and videos
• Apple Push Notification service — notifications
• Maps are drawn by Apple's MapKit, on your device

How long it stays, and deleting it

A quest lasts at most 24 hours and then stops being visible, but the row and its completions remain, so your history and XP stay correct.

Settings → Delete account removes your account, everything attached to it, and your files in storage. It cannot be undone.

A photo taken down by reports is deleted. The completion stays, because arriving somewhere and photographing it are two different things.

Children

Duequest is not for children under 13.

Your rights, and reaching us

You can see and change your name, handle, avatar, country and language in the app, and delete everything from Settings. For anything else — access, correction, objection — write to us.

Changes

If this page changes in a way that matters, the date at the top changes with it.