Privacy Policy
Side Quest
This Privacy Policy explains what information Side Quest (operated by Erebos Lab) collects, how it is used, who it is shared with, and the choices you have. By using Side Quest you agree to the practices described here.
Data-safety summary
At a glance, here is the data the app collects, whether it is linked to your identity, and whether it is used to track you across other companies’ apps and websites.
| Data category | Linked to you | Used for tracking | Purpose |
|---|---|---|---|
| Contact Info | Yes | No | Create and secure your account and sign you in. Sign-in also supports Google and Apple. |
| User Content | Yes | No | Operate the quest, feed, and social features. Photos and camera are used only when you complete or share a quest. |
| Messages | Yes | No | Provide real-time chat with your friends and groups. |
| Location | Yes | No | Find nearby quests and verify location-based quest completions. Used only while you have granted location permission. |
| Calendar | Yes | No | Add your quests to your device calendar with reminders, only if you enable it. |
| Identifiers & Diagnostics | No | No | Deliver notifications and keep the app working. |
| Usage Data | Yes | No | First-party analytics (stored in our own database) to understand and improve the app. |
What we collect
Contact Info
- Email address
- Username, display name, and avatar
Create and secure your account and sign you in. Sign-in also supports Google and Apple.
User Content
- Quest completions and the photos you upload
- Comments, likes, and posts
- Camera captures used for quest completion and AR features
Operate the quest, feed, and social features. Photos and camera are used only when you complete or share a quest.
Messages
- Direct and group chat messages
- Optional voice messages
Provide real-time chat with your friends and groups.
Location
- Approximate and precise location (when you grant it)
Find nearby quests and verify location-based quest completions. Used only while you have granted location permission.
Calendar
- Calendar events you create for quests
Add your quests to your device calendar with reminders, only if you enable it.
Identifiers & Diagnostics
- Device model, OS version, and app version
- Push notification token
Deliver notifications and keep the app working.
Usage Data
- In-app actions and feature usage
First-party analytics (stored in our own database) to understand and improve the app.
What we do NOT do
- We do not sell your personal information.
- We do not use third-party advertising or advertising trackers.
- Health permissions may be requested for optional fitness quests, but Side Quest does not currently collect Apple Health / Health Connect data.
- Paid subscriptions are not yet processed; no payment or purchase data is collected at this time.
Third parties who process your data
We share data only with the processors below, each bound to use it only to provide their service to us. Items marked "unverified" are placeholders we must confirm and name before this policy is treated as final.
- Supabase — Application database, authentication, storage, and real-time messaging
- Google — Optional “Sign in with Google”
- Apple — Optional “Sign in with Apple”
- Expo — Push notification delivery (via Apple/Google)
- Apple Maps / Google Maps — Map tiles for nearby and location-based quests
How we use your information
- Operate and personalize the app and its core features.
- Maintain your account, authenticate sessions, and provide support.
- Process payments and manage subscriptions/entitlements.
- Keep the service secure and prevent fraud and abuse.
- Comply with legal obligations and enforce our Terms of Service.
- Improve the product through aggregated, de-identified analytics.
Data retention
We keep personal information only as long as needed to provide the service. Account data is retained while your account is active and for a short recovery window after deletion, then deleted or anonymized. Billing records are retained as required by tax and accounting law. Backups are purged on a rolling basis.
Your rights and choices
Depending on your jurisdiction you may access, correct, export, or delete your personal data, object to or restrict certain processing, and withdraw consent. You can delete your account and its server-side data from within the app, or by emailing us. We respond within 30 days.
Children’s privacy
The app is not directed to children under 13 (under 16 in the EEA/UK) and we do not knowingly collect their data. If you believe a child has provided us data, contact us and we will delete it.
Security
We use industry-standard safeguards including TLS in transit, encryption at rest for sensitive fields, hashed passwords, least-privilege access, and audit logging. No system is 100% secure; please use a strong, unique password.
Changes to this policy
We may update this policy. Material changes will be reflected by a new "Last updated" date and, where required, announced in the app.
Contact
Privacy questions? Email caelum0x42@gmail.com.