Last updated: June 17, 2026
1. Who We Are
Questic is a social quest and dare app operated by The Bair Company, trading publicly as The Bair Co., based in Glabbeek, Belgium. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use the Questic app or questic.app.
The Bair Company is the data controller for the personal data described here. Contact us at hello@questic.app for privacy questions or data rights requests.
2. Quick Summary
- Questic is for users aged 13 and older.
- We collect the data needed to run accounts, groups, quests, voting, rewards, shop items, security, and support.
- Your proof photos and videos are stored privately and are shown only to the relevant group members who need to vote or review them.
- We do not sell personal data, run third-party ads, build ad profiles, or use your proof media to train AI models.
- You can delete your account in the app settings, and you can contact us for access, correction, deletion, or other privacy rights.
3. Data We Collect
Account data
- Email address, used for sign-in, security emails, password reset, account recovery, and important service messages.
- Username, display name, handle, avatar, theme, frame, tag, and profile customization.
- Date of birth or age-related information, used to confirm eligibility and apply age-appropriate protections.
- Password authentication data. We do not store your password in plain text.
Group, quest, and gameplay data
- Groups you create or join, group membership, admin status, invites, and group settings.
- Quest proposals, active quests, quest packs, proof submissions, votes, reactions, reports, and moderation actions.
- XP, levels, streaks, achievements, coins, gems, boosters, shop items, premium status, and other game progress.
Photos, videos, and device permissions
- Proof photos and videos you choose to upload. Questic accesses your camera or photo library only when you use features that require it and your device permission allows it.
- We do not collect your contacts or precise location unless a future feature clearly asks for that permission first.
Technical and security data
- Device type, operating system, app version, session timestamps, IP address, auth logs, error information, and security events.
- Email delivery events for transactional emails, such as confirmation, password reset, reauthentication, and waitlist messages.
- Purchase and subscription status from Apple. We do not receive full card numbers or Apple payment details.
Website and waitlist data
- Email addresses submitted through the questic.app waitlist or update forms.
- Basic website hosting logs and technical request data needed to serve and secure the website.
4. How We Use Data
We use personal data to:
- Create, secure, and manage accounts.
- Run Questic features, including groups, quests, proof voting, streaks, rewards, shop items, and Quester Pro.
- Show your username, avatar, progress, votes, proof, and other activity to the people who are meant to see it inside your groups.
- Send transactional emails, security codes, password reset links, account notices, and policy updates.
- Send marketing or waitlist updates only where you asked for them or consented to them.
- Detect abuse, enforce our Terms, moderate reports, prevent fraud, and keep users safe.
- Debug, measure, maintain, and improve the app and website.
- Comply with legal obligations and respond to valid legal requests.
5. Legal Bases
For users in the European Economic Area, United Kingdom, or similar privacy-law regions, we rely on these legal bases:
- Contract: to provide the Questic service you signed up for, including account, group, quest, and purchase features.
- Legitimate interests: to secure the service, prevent abuse, handle reports, improve reliability, and understand basic usage, balanced against your rights.
- Consent: for optional marketing, waitlist updates, device permissions such as camera or photo library access, and any optional processing where consent is required.
- Legal obligation: where we must keep records, respond to lawful requests, or comply with tax, accounting, consumer, safety, or data protection rules.
- Vital interests or public interest: in rare urgent situations where disclosure is necessary to protect someone's safety.
6. What Other Users Can See
Questic is social, so some data is visible to other users:
- Group members may see your username, avatar, level, XP, streak, achievements, premium tag, group role, quest activity, proof submissions, votes, and reactions.
- Proof media is intended only for the relevant group and voting flow. It is not public on the open web.
- Quester Pro features may show extra profile styling or voter visibility where the app feature allows it.
7. Service Providers
We use trusted providers to run Questic. They process data for us or as separate controllers where their own terms apply:
- Supabase: authentication, database, storage, edge functions, and security tools.
- Resend: email delivery for transactional emails and waitlist/update emails.
- Vercel: hosting for questic.app and related technical logs.
- Apple: App Store distribution, TestFlight, in-app purchases, subscriptions, refunds, device permissions, and push notification infrastructure where enabled.
We may add or replace providers as Questic grows, but we will keep this policy updated for material changes.
8. Security
We use technical and organisational measures designed to protect your data, including TLS encryption in transit, Supabase Auth password hashing, private storage buckets, short-lived signed media URLs, Row Level Security policies, access controls, and leaked-password checks where available.
No system is perfectly secure. If you think your account or data has been compromised, contact us at hello@questic.app.
9. Children and Teens
Questic is not for children under 13. We do not knowingly collect personal data from children under 13. If we learn that we collected data from a child under 13, we will delete it as soon as reasonably possible.
If you are under the age required by law to consent to online services on your own, you must have permission from a parent or legal guardian. Parents or guardians can contact us at hello@questic.app to ask about their child's account or request deletion.
10. International Transfers
Questic is operated from Belgium. We aim to use EU-based infrastructure where possible, but some providers may process data outside the European Economic Area. When that happens, we rely on appropriate safeguards such as Standard Contractual Clauses or equivalent legal mechanisms.
11. Retention
We keep data only as long as needed for the purposes described in this policy:
- Account data: kept while your account exists, then deleted or anonymised from active systems after account deletion unless we must keep it longer.
- Proof media: kept while needed for quest history, voting, safety, moderation, or account features, then deleted when no longer needed or when your account deletion requires it.
- Gameplay data: kept while your account exists and as needed for leaderboards, achievements, purchases, dispute handling, and anti-abuse records.
- Reports and moderation records: kept as long as needed to investigate abuse, protect users, enforce Terms, and handle disputes.
- Purchase records: kept as long as required for accounting, tax, fraud prevention, and consumer law obligations.
- Technical logs: usually kept for a limited period for security, debugging, and reliability, unless longer retention is needed for abuse, security, or legal reasons.
- Backups: deleted on a rolling schedule. Deleted data may remain in backups for a limited time before being overwritten.
12. Your Rights
Depending on where you live, you may have rights to access, correct, delete, restrict, export, or object to the use of your personal data. Where processing is based on consent, you can withdraw consent at any time.
You can delete your account directly in the app settings. For other requests, email hello@questic.app. We may need to verify your identity before acting on a request. We aim to respond within 30 days, unless the law allows or requires more time.
If you are in the EEA, you can also complain to your local data protection authority. In Belgium, this is the Data Protection Authority.
13. Marketing and Waitlist Emails
If you join the waitlist or ask for updates, we may email you about Questic. You can unsubscribe using the link in those emails. We still may send non-marketing service emails, such as security codes, password reset links, purchase notices, and policy updates.
14. No Sale, No Tracking Ads
We do not sell personal data. We do not currently use third-party advertising networks or cross-app tracking for ads. If that changes, we will update this policy and ask for consent where required.
15. Changes to This Policy
We may update this Privacy Policy as Questic changes. If we make material changes, we will notify you in the app, by email, or on the Site. The date at the top shows the latest update.
16. Contact
For privacy requests, safety concerns, or questions: