Privacy

Who we are

Quest Alien is made by Grape Digital Pty Ltd (ABN 24 643 279 663), in Australia. When this page says “we”, it means us. We are responsible for the information described here, under the Australian Privacy Principles.

What we never do

Some things are easier to say first:

• No ads, in the app or anywhere else, and nothing about your family is ever sold or shared for advertising.
• No analytics or tracking tools in the app or on this site — no cookies here, no advertising ID, no tracking across other apps.
• No location, contacts, microphone or photo library. The app asks the phone for two things only: the camera, and notifications if you allow them.
• No email address, password or date of birth for a child, ever.
• No money moves through Quest Alien. Coins are points inside your family.

What we keep about grown-ups

The grown-up who sets up a family gives a name and signs in with Apple, Google or an email address and password. We keep the name, the email address, which way you sign in, your notification settings and the drawn face you pick as an avatar. Passwords are held by our sign-in provider and never seen by the app.

A grown-up who is invited joins with a name only, and can add an email and password later if they want to. Each grown-up’s PIN is stored only as a one-way hash, which no device can read back.

What we keep about kids

A grown-up adds each child with a first name (or a nickname — it is up to you) and an optional drawn face. A child’s device joins the family with a one-off code a grown-up shows them, which works once and expires after ten minutes. Kids have no account of their own: no email, no password, no sign-in provider.

Then the app keeps what the game needs: the quests a child claims, the coins they earn, spend and save, their streak, rank and medals, and the device they use. Children in the same family see each other’s first name, rank and how they are going in the family race and challenges — never anyone outside the family.

Quest photos

A grown-up can ask for a photo as proof a quest was done. The photo is taken with the camera there and then — never picked from the photo library — and the phone redraws it before sending, which strips hidden details such as where it was taken.

Only your family’s grown-ups can see it. It is deleted as soon as a grown-up answers the quest, and in any case within 30 days. This is the same on every plan: we do not sell photo history.

Notifications

If you allow notifications, we keep a token from Apple or Google that lets us reach the device; it is used for nothing else. Grown-ups choose what they hear about in Settings.

A child’s device hears only about their own quests — on unless a grown-up turns it off — and reminders, which are off unless a grown-up turns them on. Nothing reaches a child between 9 pm and 7 am, and a notification never carries an ad or news about the app.

Paying for a plan

Plans are bought through the App Store or Google Play, and Apple or Google handle the payment. We never see card details. RevenueCat tells us which plan your family is on, using an identifier for your family rather than your name or email.

Who helps us run it, and where

We use a few services to run Quest Alien. Each uses your family’s information only to do its job for us:

• Supabase — our database, sign-in and photo storage, in Sydney, Australia.
• Apple and Google — sign-in if you choose them, notifications, and the app stores’ payments.
• RevenueCat (United States) — keeps track of which plan a family is on.
• Resend — sends the emails the app needs, such as confirming an address or resetting a password, from its servers in Tokyo, Japan.

Information that leaves Australia

Your family’s data lives in Australia. Some of it is handled overseas by the services above to do their part: a grown-up’s email address by Resend in Japan, a plan identifier by RevenueCat in the United States, and notification tokens by Apple and Google. We choose services that protect it to a standard comparable to the Australian Privacy Principles.

How long we keep it

Quest photos go once they are answered, or after 30 days. Notifications in the app’s inbox go after 30 days. The rest stays while your family uses Quest Alien, because it is your family’s history — the coins, the streaks and the medals.

When you delete your account in Settings, the app tells you what will happen before anything goes. If you are the only grown-up, the whole family is deleted after 30 days, and until then everything keeps working, so you can change your mind; after that every child, quest, coin and photo goes with it, and so does the sign-in of every device in the family.

Your choices

You can see and correct almost everything in the app itself, and delete your account from Settings. You can also ask us for a copy of what we hold about you or your children, or ask us to correct or delete it, by writing to the address below.

If you are not happy with how we handle a privacy question, tell us first. You can also complain to the Office of the Australian Information Commissioner (oaic.gov.au).

Keeping it safe

Everything travels encrypted. Each family can only ever read its own information, which the database itself enforces rather than the app. Sign-in tokens are kept in the phone’s secure keychain, and PINs only as hashes.

If this page changes

We will update the date at the top. If a change affects how we handle your family’s information, we will let you know before it takes effect.