Updated 5 October 2026.
In short
Questburg shows no ads and sells no data. There are no ad trackers anywhere. The app only counts anonymous usage statistics for grown-ups; nothing is counted on the kid’s screen.
Who is responsible
ECOMGO LTD, a company registered in England and Wales, number 15280587, at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom. Contact: support@questburg.com.
What we store and why
The grown-up’s account. Email and password (the password only as a hash) — to sign in.
The family. Name, time zone, language; members’ names and, if given, gender — it only changes wording.
What the family does in the app. Quests, check-offs, points, gifts, perks, strikes, character looks, pictures uploaded for quests and rewards.
Sign-in with Google. If you sign in with Google, we receive your email, name and Google account identifier from it — to recognise you next time. Your Google password never reaches us.
Access keys for devices and agents. Stored as hashes.
The phone’s notification address. Only if you turned on notifications in the app: Apple uses it to deliver a message to your phone. Removed when you sign out.
At sign-up. The email and the IP address the request came from. We use them to limit the number of sign-ups and keep automated abuse out.
Children’s data is entered by a grown-up — a parent or guardian. Children do not create accounts or give an email; a child in Questburg has a name, a hero, quests and points.
What we don’t do
No ads. We don’t sell or share data for marketing. No profiling. We don’t record your screen or follow you across other apps and websites.
Usage statistics in the app
The iPhone, iPad and Mac app sends anonymous events to TelemetryDeck: the app was opened, a tab was shown, a sign-up step was passed, a quest was approved. Each event carries the app version, device type, system version and language. Names, emails, the family name, quest texts and points are never sent.
An installation is told apart by a random number that is sent only as a hash and is not linked to your account or device. When the phone is handed to a kid — on the kid’s screen — the app sends nothing at all. This shows us which screens are used and where people drop out of sign-up, without knowing who they are.
Who can technically access the data
The providers Questburg runs on:
Supabase — the database, EU region.
Vercel — hosting and storage of uploaded pictures.
Resend — service emails: the email confirmation code, the password reset link.
Telegram — only if the family connected the bot itself: messages about kids’ check-offs and the evening summary go to the chosen chat.
Apple — if you install the app from the App Store or TestFlight, Apple knows about the download and may share anonymised crash data with us. Notifications also travel through Apple: we pass the text — the kid’s name and the quest title.
TelemetryDeck — anonymous app usage statistics, servers in the EU.
The questburg.com website
On the website — not in the family app — we may count visits with Google Analytics, Yandex Metrica and PostHog (EU servers), only if you pressed “Allow” in the banner. Until then, their scripts aren’t loaded at all. You can change your mind at any time with the “Cookie settings” link at the bottom of the page. If you decline, the counters’ cookies are removed.
The counters see anonymised visit data: the page, where you came from, approximate location by IP, device and browser. Session recording is turned off in all three.
On the same pages, and with the same permission, the Meta pixel works: it tells Meta Platforms that you came from an ad on Facebook or Instagram and opened the site, and — if you then signed up — that the sign-up happened. We do not pass your email, names or family data to Meta.
Cookies
The app only sets necessary cookies: account sign-in, the chosen profile, the device’s link to the family, and the language. Your analytics choice is stored in the browser.
How long we keep it
While the account exists. Sign-up attempt records — up to 30 days.
Deleting data
In the app: More → Family settings → Delete account. The family’s owner deletes the whole family — members, history, points and pictures; an invited grown-up deletes only their own sign-in. Deletion is immediate and cannot be undone.
You can also write to support@questburg.com — we delete within 30 days.
Your rights
You can ask for a copy of your data, correct it, delete it or object to processing — write to support@questburg.com. UK and EU residents may contact their data protection authority.
Changes
If the policy changes in substance, we will tell you in the app or by email before the change takes effect.