Legal

Privacy Policy

Effective date:

This Privacy Policy explains how Outquest ("we," "us," or "our") collects, uses, stores, shares, and protects personal data when you use the Outquest website, web app, mobile app, and related services.

1. Contact Information

Privacy contact:

2. Information We Collect

We may collect the following categories of information:

• Account information, such as email address, authentication identifiers, and profile preferences.
• Content you create, including quests, arcs, rewards, lesson content, notes, logs, comments, and metadata.
• Photos you choose to upload to quest logs or related activity records.
• Location information you choose to attach to quests or use in map and discovery features.
• Usage and device information, such as browser type, timestamps, app actions, and diagnostic logs.
• Integration data from services you choose to connect, such as activity or progress information from third-party platforms.
• Communications you send to us, including support messages or legal/privacy requests.

3. Sensitive or Higher-Risk Data

Some data processed through Outquest may be considered sensitive under certain laws, depending on how you use the product. Examples include precise location data, photos, and activity patterns that could reveal health, routines, religion, or other sensitive inferences. We aim to minimize collection and not store more than the service requires.

4. How We Use Information

We use personal data to:

• Provide and operate the service, including account login, syncing, storage, and security.
• Save and display quests, arcs, logs, rewards, learning progress, and related history.
• Enable optional location-based and map-based features when you choose to use them.
• Enable optional uploads, such as photos attached to quest logs.
• Enable optional integrations and import data from third-party services you connect.
• Maintain the service, debug issues, prevent abuse, and improve reliability.
• Comply with legal obligations and respond to lawful requests.

5. Legal Bases for Processing (GDPR/UK GDPR)

Where GDPR or UK GDPR applies, we rely on one or more of the following legal bases:

• Performance of a contract: to provide the Outquest services you request.
• Consent: for optional features where consent is appropriate, such as certain integrations or precise location use.
• Legitimate interests: for security, fraud prevention, service integrity, and product improvement, where not overridden by your rights.
• Legal obligation: where we must keep or disclose certain records by law.

6. How We Share Information

We do not sell personal information in the ordinary meaning of that term. We may share information with:

• Service providers that host infrastructure, storage, authentication, media, analytics, or support systems.
• Integration providers you choose to connect, so data can be imported or synced at your request.
• Legal authorities or counterparties when required by law, court order, or valid legal process.
• A buyer, investor, or successor in connection with a merger, acquisition, financing, or asset sale.

7. International Transfers

Your data may be processed in countries outside your own. If GDPR or similar laws apply, we will use appropriate transfer safeguards where required, such as Standard Contractual Clauses or another lawful transfer mechanism.

8. Data Retention

We retain personal data for as long as reasonably necessary to provide the service, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements.

9. Your Privacy Rights

Depending on where you live, you may have rights such as:

• Access to the personal data we hold about you.
• Correction of inaccurate or incomplete information.
• Deletion of your personal data, subject to legal exceptions.
• Portability of certain personal data.
• Objection to or restriction of certain processing.
• Withdrawal of consent where processing is based on consent.
• Opt-out rights under U.S. state privacy laws, where applicable.
• Non-discrimination for exercising applicable privacy rights.

To exercise these rights, contact .

10. California Privacy Notice

If you are a California resident, you may have rights to know, delete, correct, and limit certain uses of sensitive personal information, as well as rights related to sharing or selling personal information under the CCPA/CPRA.

If precise geolocation is collected, we treat it as sensitive personal information and limit its use to providing the features you request.

11. Children’s Privacy

Outquest is not intended for children under , and we do not knowingly collect personal information from children under without legally valid consent.

12. Security

We use administrative, technical, and organizational safeguards designed to protect personal data. No system is perfectly secure, and we cannot guarantee absolute security.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version here and revise the effective date above. If legally required, we will provide additional notice or request consent.