Privacy
Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create an account, update your profile, create quests, complete objectives, post activities, or contact us for support.

Account Information: When you register, we collect your name, email address, and profile information. We use Auth0 for secure authentication — we never store your password directly.

Exploration Data: When you use Questivo, we collect information about your quest completions, achievements, activities, and interactions with the platform. This data powers your personal exploration history and social features.

Location Data: With your permission, we collect your device's location to show nearby quest objectives, enable proximity-based completions, and provide map-centered experiences. You can disable location services at any time in your device settings.

User Content: Photos, comments, GPX tracks, and other content you upload are stored securely in Azure Blob Storage. Each piece of content has its own privacy setting that you control.

Usage Data: We collect standard usage analytics such as pages visited, features used, and performance metrics to improve the platform.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve Questivo, including:

• Powering your exploration experience — map display, quest progress, achievement tracking, and social feed.

• Personalizing your experience — the AI Assistant uses your location and history to provide relevant recommendations.

• Enabling social features — showing your activity to friends based on your privacy settings.

• Sending notifications — quest updates, achievement milestones, friend activity, and system announcements (configurable in settings).

• Improving the platform — analyzing usage patterns to fix bugs, optimize performance, and develop new features.

• Communicating with you — responding to support requests, sending service updates, and (with your consent) marketing communications.

3. Your Privacy Controls

Questivo gives you granular control over your privacy:

Six Privacy Levels: Every quest, completion, and activity can be set to Private, Collaborators Only, Friends Only, Followers Only, Unlisted Link, or Public. You choose who sees what.

Feed Control: The "My Blend" feature lets you control your social feed with sliders — adjust per-friend visibility and per-content-type weighting. No opaque algorithms decide what you see.

Location Sharing: Location services are optional. You can use Questivo without sharing your location — you'll just need to navigate the map manually.

Account Deletion: You can request deletion of your account and all associated data at any time by contacting us.

4. How We Share Your Information

We do not sell your personal information. We do not share your data with third parties for their marketing purposes.

We may share information in the following limited circumstances:

• With Your Consent: When you choose to make content public or share it with friends, that content is visible according to your privacy settings.

• Service Providers: We use trusted service providers (Azure for hosting and storage, Auth0 for authentication, OneSignal for push notifications) who process data on our behalf under strict contractual obligations.

• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request.

• Safety: We may share information when we believe it's necessary to protect the safety of our users, the public, or Questivo.

5. Data Security

We take the security of your data seriously:

• Authentication is handled by Auth0, an industry-leading identity platform with enterprise-grade security.

• All data is transmitted over HTTPS/TLS encryption.

• User content is stored in Azure Blob Storage with secure SAS URL access — private content is never publicly accessible.

• Database access is restricted through stored procedures with parameterized queries to prevent SQL injection.

• We follow the principle of least privilege for all system access.

While we implement strong security measures, no system is 100% secure. We encourage you to use a strong, unique password and enable two-factor authentication when available.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal or legitimate business purposes.

Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics and platform improvement.

7. Children's Privacy

Questivo is not directed to children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will take steps to delete that information promptly.

If you believe a child under 13 has provided us with personal information, please contact us at the email address below.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

For significant changes, we may also provide additional notice through in-app notifications or email.

9. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

• Email: privacy@questivo.com

• Contact Form: questivo.com/support/contact

We will respond to your inquiry within 30 days.