Privacy Policy
Last updated: August 24, 2026
This Privacy Policy describes how the Adventure Quest mobile application and its operators (“we”, “us”) collect, use, store and protect your personal information. By using the app, you agree to the practices described below.
1. Data We Collect
Account data. When you register we collect your email address and username. Passwords are stored only as cryptographic hashes — never in plain text. If you sign in with Google, we receive your Google account identifier and the email address associated with it.
Profile data. Information you add to your profile: avatar photo, short bio, motorcycle model and specifications, age, country and city.
User content. Quests and routes you create or complete, including GPX files you upload. GPX files may contain precise location data about your rides. We also process photos you submit to confirm quest completion, as well as your likes and saved plans.
Technical data. Push notification tokens used to deliver notifications to your device.
We do not collect your location in the background or track you when the app is not in use. Location data is present only in route files that you choose to upload.
2. How We Use Your Data
- To create and maintain your account and authenticate you securely;
- To display your profile and let other users discover your quests and routes;
- To calculate points, maintain leaderboards and track quest progress;
- To send push notifications related to quests you joined and app events;
- To send transactional emails such as verification codes and password resets;
- To manage subscriptions and purchases;
- To prevent abuse, ensure safety and comply with legal obligations.
We do not sell your personal data and we do not use it for third-party advertising.
3. Third-Party Services
We rely on the following processors to operate the service:
- Supabase — database and file storage (profile photos, GPX files, quest images);
- Google — sign-in authentication when you choose “Sign in with Google”;
- Apple Push Notification service / Firebase Cloud Messaging — delivery of push notifications;
- Resend — delivery of transactional email.
These providers process data on our behalf under their own privacy and security terms.
4. Data Storage and Security
Your data is stored on servers provided by our hosting and storage partners. Access to personal data is restricted to what is necessary to run the service. Passwords are stored as hashes and all API communication uses encrypted connections. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
5. Data Retention and Deletion
We keep your personal data while your account is active. You may delete your account from the app settings or by contacting us. When your account is deleted, your personal data and user content are removed from our systems within a reasonable period, except where retention is required by law.
6. Children’s Privacy
The app is not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal data, contact us and we will delete it.
7. Your Rights
You have the right to access, correct and delete your personal data, to object to or restrict certain processing, and to receive a copy of your data. To exercise these rights, contact us using the details below. We respond to requests within a reasonable timeframe.
8. Changes to This Policy
We may update this Privacy Policy from time to time. The current version is always available at this page, and material changes will be reflected in the “Last updated” date above.
9. Contact Us
If you have questions about this Privacy Policy or want to exercise your rights, contact us at adventure0ukraine@gmail.com.