Privacy Policy

Your data,
your terms.

Plain-language privacy — no legalese maze. Last updated June 2026.

Overview

CitiQuest is a real-world quest app — you pick up sidequests in your city, submit proof, earn XP, and show up on leaderboards. To make that work we need some data from you. This page explains what we collect, what we do with it, and how to get rid of it.

We don't sell your personal information. We don't run ads against your profile. If that ever changed, we'd tell you first.

What we collect

AccountEmail, username, and an optional profile photo. That's how you log in and how other players see you on leaderboards.

SubmissionsPhotos, audio, text, and location stamps you attach when completing a quest. We store these for moderation, peer voting, and your passport.

LocationWe don't track your phone in the background. Location only comes in when you choose to submit a geo-stamp with proof — usually city-level, not a live GPS feed.

UsageThings like quests you open, streaks, XP, and pages you visit. Some of this stays in our own database to run the product; on the public site we also use Google Analytics (see Cookies & tracking).

DeviceBrowser, OS, and occasional crash info when something breaks. Mostly for fixing bugs, not for building a dossier on you.

How we use it

Run the appQuests, submissions, XP, leaderboards, squads — the boring infrastructure stuff.

Keep it safeModeration, abuse reports, and making sure peer votes aren't gamed.

Improve CitiQuestSeeing which quests people finish, where people drop off, and what to fix next.

Notify youEmails and push notifications you actually opted into — streak nudges, results, new quests in your city.

Your choices

See your dataEmail privacy@citiquest.app and ask for a copy of what we hold.

Fix your profileUsername, photo, and most account details — edit them in Settings.

Delete your accountSettings → Account → Delete account. Profile and email go away immediately. Submissions tied to an active peer vote may hang around up to 30 days, then they're anonymised.

ExportDownload quest history, XP, and passport data as JSON from Settings.

NotificationsTurn off email types one by one in Settings → Notifications. No dark patterns.

How long we keep things

While your account is active, we keep what we need to run it.

If you delete your account:

• Profile, username, and email — removed right away.

• Quest submissions — anonymised, not wiped. Leaderboards and neighborhood scores would look wrong if we deleted every proof retroactively.

• Aggregated usage stats — may stick around up to 12 months, already stripped of anything that identifies you.

Cookies & tracking

Session cookies — Required to keep you logged in. Without them you'd have to sign in on every page.

Google Analytics — On citiquest.app (production) we load Google Analytics 4. It uses cookies and similar tech to measure visits, pages, and rough traffic sources. Google processes that data under their own policy: https://policies.google.com/privacy

We don't load GA on staging or local dev. We don't use ad cookies or cross-site tracking pixels.

First-party analytics — We also log product events in our own database (quest started, proof shared, that kind of thing). That's for understanding how the app works, separate from Google's site analytics.

Security

Traffic is encrypted in transit (TLS). Data at rest is encrypted on Supabase's side. Production database access is limited to the people actually running CitiQuest, with audited credentials.

We're not perfect — no one is — but we patch quickly when issues come up.

Found a vulnerability? security@citiquest.app. We read every report and try to respond within 48 hours.

Kids

CitiQuest isn't built for anyone under 16. If you think a minor signed up, email privacy@citiquest.app and we'll delete the account.

When this policy changes

If we make a meaningful change, we'll post it here, bump the date below, and give you at least 14 days' notice by email or in-app before it applies.

Questions

Privacy requests, confusion, or something that doesn't look right:

privacy@citiquest.app

We usually reply within five business days.

TL;DRWe collect what the app needs to work. We don't sell it. You can delete your account anytime. Questions? privacy@citiquest.app.

Overview

We don't sell your personal information. We don't run ads against your profile. If that ever changed, we'd tell you first.

What we collect

AccountEmail, username, and an optional profile photo. That's how you log in and how other players see you on leaderboards.

SubmissionsPhotos, audio, text, and location stamps you attach when completing a quest. We store these for moderation, peer voting, and your passport.

LocationWe don't track your phone in the background. Location only comes in when you choose to submit a geo-stamp with proof — usually city-level, not a live GPS feed.

DeviceBrowser, OS, and occasional crash info when something breaks. Mostly for fixing bugs, not for building a dossier on you.

How we use it

Run the appQuests, submissions, XP, leaderboards, squads — the boring infrastructure stuff.

Keep it safeModeration, abuse reports, and making sure peer votes aren't gamed.

Improve CitiQuestSeeing which quests people finish, where people drop off, and what to fix next.

Notify youEmails and push notifications you actually opted into — streak nudges, results, new quests in your city.

Your choices

See your dataEmail privacy@citiquest.app and ask for a copy of what we hold.

Fix your profileUsername, photo, and most account details — edit them in Settings.

Delete your accountSettings → Account → Delete account. Profile and email go away immediately. Submissions tied to an active peer vote may hang around up to 30 days, then they're anonymised.

ExportDownload quest history, XP, and passport data as JSON from Settings.

NotificationsTurn off email types one by one in Settings → Notifications. No dark patterns.

How long we keep things

While your account is active, we keep what we need to run it.

If you delete your account:

• Profile, username, and email — removed right away.

• Quest submissions — anonymised, not wiped. Leaderboards and neighborhood scores would look wrong if we deleted every proof retroactively.

• Aggregated usage stats — may stick around up to 12 months, already stripped of anything that identifies you.

Cookies & tracking

Session cookies — Required to keep you logged in. Without them you'd have to sign in on every page.

We don't load GA on staging or local dev. We don't use ad cookies or cross-site tracking pixels.

Security

Traffic is encrypted in transit (TLS). Data at rest is encrypted on Supabase's side. Production database access is limited to the people actually running CitiQuest, with audited credentials.

We're not perfect — no one is — but we patch quickly when issues come up.

Found a vulnerability? security@citiquest.app. We read every report and try to respond within 48 hours.

Your data,your terms.

Overview

What we collect

How we use it

Who else sees your data

Your choices

How long we keep things

Cookies & tracking

Security

Kids

When this policy changes

Questions

Your data,your terms.

Overview

What we collect

How we use it

Who else sees your data

Your choices

How long we keep things

Cookies & tracking

Security

Kids

When this policy changes

Questions

Your data,
your terms.

Your data,
your terms.