1. Introduction
SkillQuest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application SkillQuest (the "App").
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the application.
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain the App: Enable core functionality including timer tracking, skill management, and progress statistics
- Personalize your experience: Save your preferences, themes, and customization settings
- Sync across devices: Store your data securely in the cloud for access from multiple devices
- Improve the App: Analyze usage patterns to enhance features and user experience
- Communicate with you: Send important updates, security alerts, and respond to support requests
- Ensure security: Detect and prevent fraud, abuse, and security threats
4. Data Storage and Security
4.1 Cloud Storage
Your data is stored securely using Supabase, a cloud database provider:
- Location: Data is stored in secure servers located in the United States (US-East-2 region)
- Encryption: All data is encrypted in transit using HTTPS/TLS and at rest using AES-256 encryption
- Access Control: Your data is protected by industry-standard security measures and access controls
4.2 Local Storage
Some data is stored locally on your device:
- Guest Mode Data: If you use the app without signing in, your data is stored only on your device
- Cache Data: Temporary data cached locally for improved performance
- Preferences: App settings and theme preferences
4.3 Data Retention
- Active Accounts: We retain your data for as long as your account is active
- Deleted Accounts: When you delete your account, we permanently delete your personal data within 30 days
- Legal Requirements: Some data may be retained longer if required by law
5. Third-Party Services
We use the following third-party services that may collect information about you:
Google Sign-In (Authentication)
Purpose: Secure authentication and account management
Data Shared: Email address, name, profile picture
Privacy Policy: policies.google.com/privacy
Supabase (Database & Backend)
Purpose: Cloud data storage and synchronization
Data Shared: All app data (skills, sessions, statistics, preferences)
Privacy Policy: supabase.com/privacy
RevenueCat (Subscription Management)
Purpose: In-app purchase and subscription management
Data Shared: Purchase history, subscription status
Privacy Policy: revenuecat.com/privacy
Sentry (Error Monitoring - Optional)
Purpose: Crash reporting and error monitoring
Data Shared: Anonymous error logs, device information
Privacy Policy: sentry.io/privacy
Note: Error monitoring can be disabled in app settings
6. Your Data Rights
You have the following rights regarding your personal data:
6.1 Access and Portability
- View Your Data: Access all your personal data through the app's profile and settings
- Export Your Data: Request a copy of your data in a portable format by contacting support@zenithreborn.com
6.2 Modification and Deletion
- Update Information: Modify your profile, preferences, and settings at any time within the App
- Delete Account: Permanently delete your account and all associated data from Settings → Account → Delete Account
6.3 Control and Consent
- Opt-Out of Analytics: Disable performance monitoring and error reporting in app settings
- Manage Permissions: Control app permissions through your device settings
7. Children's Privacy
SkillQuest is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@zenithreborn.com, and we will delete such information from our systems.
8. Family Sharing
If you participate in our Family Plan feature:
- Family Owner: The account that creates the family can manage member roles and permissions
- Family Members: Members can view shared data as permitted by their role (Parent, Child, Normal)
- Data Visibility: Parents can view child progress statistics; members cannot access each other's personal account data
- Consent: Role changes to "Child" status require explicit consent from the target user
9. International Data Transfers
Your information may be transferred to and maintained on computers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. By using SkillQuest, you consent to such transfers.
Our servers are located in the United States. If you are accessing the App from outside the United States, your information will be transferred to, stored, and processed in the United States.
10. Push Notifications
We may send you push notifications about:
- Timer reminders when you've set a reminder for a skill session
- Streak freeze warnings when your daily streak is about to expire
- Social activities including friend requests, challenge invitations, and social post interactions
Your Control
You can disable notifications at any time through:
- iOS Settings: Settings → SkillQuest → Notifications
- In-App Settings: Profile → Settings → Notifications
We do not collect or store push notification tokens after you disable notifications. When you re-enable notifications, a new token is generated.
Data Collection
Push notifications may include:
- Notification delivery tokens (to send notifications to your device)
- Delivery status (to track notification success rates)
- Interaction data (whether you opened or dismissed notifications)
This data is stored securely and is not shared with third parties except as required to deliver the notifications (via Apple Push Notification Service).
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this Privacy Policy
- Sending an in-app notification for significant changes
You are advised to review this Privacy Policy periodically for any changes.
13. Data Breach Notification
We take the security of your personal data seriously and have implemented appropriate technical and organizational measures to protect it.
In Case of a Breach
In the unlikely event of a security breach that affects your personal data, we will:
- Notify you via email at the email address associated with your account within 72 hours of becoming aware of the breach
- Inform relevant authorities in accordance with GDPR Article 33 requirements
- Provide details about:
- The nature of the breach
- The types of data affected
- The likely consequences
- Measures we have taken or will take to address the breach
- Recommendations for steps you can take to protect yourself
Our Response
We maintain an incident response plan that includes:
- Immediate containment of the breach
- Investigation to determine the scope and impact
- Remediation to prevent future occurrences
- Transparent communication with affected users
If you have any concerns about the security of your data, please contact us immediately at support@zenithreborn.com.
14. Legal Compliance
14.1 GDPR Compliance (EU Users)
If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):
Right to Access
Request access to your personal data
Right to Rectification
Request correction of inaccurate data
Right to Erasure
Request deletion of your personal data ("right to be forgotten")
Right to Restrict Processing
Request limitation of how we use your data
Right to Data Portability
Receive your data in a structured, machine-readable format
Right to Object
Object to our processing of your personal data
Right to Withdraw Consent
Withdraw consent for data processing at any time
To exercise these rights, contact us at support@zenithreborn.com.
14.2 California Privacy Rights (CCPA)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to Know: Know what personal information we collect, use, and disclose
- Right to Delete: Request deletion of your personal information
- Right to Opt-Out: Opt-out of the sale of personal information (Note: We do not sell personal information)
- Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights
To exercise these rights, contact us at support@zenithreborn.com.
14.3 Data Processing Legal Basis
We process your personal data based on:
- Consent: You have given explicit consent for processing (e.g., creating an account)
- Contract: Processing is necessary to provide the App services
- Legitimate Interest: Processing is necessary for our legitimate business interests (e.g., improving the App)
- Legal Obligation: Processing is required by law