Privacy
Effective 17 September 2026.
What Questy is
Questy is a chore app for families: a child ticks a chore, a parent approves it and the stars land in a wallet the child can spend on rewards the parent set up. This page covers what we collect to run that, and nothing else. Questy carries no advertising and no analytics or tracking of any kind, on the web or in the iPhone app.
What we collect
One parent account per family, holding:
- An email address and a password, for signing in.
- The family’s name.
A parent adds a profile for each child: a first name, a chosen picture and colour. A child profile is not an account. It has no email, no password and no way to sign in on its own. A parent switches into it with a tap, and a PIN, or Face ID on the phone, is what protects the way back.
A child’s own tablet is paired with a short code a parent reads out. The tablet then holds a key that opens that child’s screens and nothing else, and a parent can switch it off from Settings at any time.
Using the app writes the chores, challenges, rewards, badges and star totals a family creates for itself. That data belongs to the family and exists only to run the app in front of you.
What we don’t do
- No advertising, and nothing here is built to be sold.
- No analytics or tracking SDKs of any kind.
- We never sell, rent or share a family’s data with anyone for their own purposes.
Children’s privacy
A child never creates an account, gives an email address or signs in directly. A parent creates and controls every child profile from inside their own account, and can rename, remove or delete it at any time. Nothing is collected from a child that their parent did not put there.
Who else sees it
Questy runs on infrastructure from Vercel (hosting) and Neon (the database), both under contract to us, and neither may use a family’s data for anything but running the app on our behalf.
How it’s protected
A password is never stored as typed. It is hashed with scrypt, a deliberately slow function built to resist guessing, before it ever reaches the database. Signing in issues a session key; on the web a cookie carries it, marked so a script on the page can never read it, and on the phone it sits in the device’s own keychain.
On your phone
Face ID and the passcode are the phone’s to check. The app asks iOS whether it is you, and iOS answers yes or no. No face, fingerprint or passcode ever reaches Questy.
A tick made without a connection waits on the device until one returns, then sends. Nothing else is kept on the phone beyond the session key above, and deleting the account clears both.
Deleting your family’s data
Delete an account any time from inside the app, from the Home screen on the web and the phone alike. Nothing to email, nobody to wait for. Every session ends the moment you confirm, and everything else is erased permanently within 7 days.
Changes to this page
If what Questy collects changes, this page changes with it and the date at the top moves.
Contact
Questions about your family’s data, or a request about it: privacy@questy.family.