Last updated: April 4, 2026
PointQuest is a family activity challenge app. Families create point-based fitness and activity challenges, log activities, and track progress together. The app is designed for families to use privately.
We collect only what's needed to make the app work:
We do not collect location data, contacts, photos, health data, browsing history, or device identifiers beyond what Firebase provides for authentication.
PointQuest complies with the Children's Online Privacy Protection Act (COPPA). Children under 13 cannot create their own accounts. Only a parent or legal guardian may create managed profiles for children under 13. These profiles:
We do not knowingly collect personal information directly from children under 13. All child data is entered and managed by the parent. Parents must provide consent before adding any child profile, and a consent record is created each time a child is added.
Parents can review and delete their child's profile and all associated activity data at any time from the app.
We do not sell your data, show you ads, or share your information with third parties for marketing purposes.
Your data is stored in Google Firebase (Cloud Firestore), hosted in the United States. Firebase provides encryption at rest and in transit.
Access to your data is restricted by Firestore security rules:
You can delete your account at any time from the More tab in the app. Account deletion permanently removes:
We retain your data for as long as your account is active. When you delete your account, all your personal data is removed immediately as described above.
You have the right to:
If you are located in Canada, your personal information is protected under the Personal Information Protection and Electronic Documents Act (PIPEDA). You have the right to access, correct, and request deletion of your personal information. We collect and use your personal information only with your knowledge and consent, and only for the purposes described in this policy.
Your data is stored in the United States via Google Firebase. By using the app, you consent to the transfer and processing of your data in the United States. Google Firebase complies with EU Standard Contractual Clauses (SCCs) for transfers of personal data from the European Economic Area and United Kingdom to the United States.
If you are located in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) or UK GDPR applies to your personal data. This section supplements the rest of this Privacy Policy.
Lawful basis for processing: We process your personal data on the following legal bases:
Your rights under GDPR: In addition to the rights described in Section 9, you have the right to:
To exercise any of these rights, contact us at crstudiosdev@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
Data transfers: Your data is transferred to and stored in the United States. Google Firebase uses Standard Contractual Clauses approved by the European Commission to ensure an adequate level of data protection for these transfers.
Retention: We retain your personal data for as long as your account is active. COPPA consent records are retained for the duration required by applicable law even after account deletion.
We may disclose your personal data if required to do so by law, court order, subpoena, or other legal process, or if we reasonably believe that disclosure is necessary to:
Where permitted by law, we will attempt to notify affected users before disclosing their data in response to a legal request.
If we make changes, we'll update the date at the top. For significant changes, we'll notify you in the app.
Questions about this policy? Email crstudiosdev@gmail.com.