Privacy Policy
We're committed to protecting your family's data with the same care we'd protect our own
Last Updated: January 13, 2026
Our Commitment
At Questopia, we understand that you're trusting us with your children's learning journey. We take this responsibility seriously and are committed to transparency about how we collect, use, and protect your family's information.
Information We Collect
Account Information
When you create an account, we collect your name, email address, and password (encrypted). For your children's profiles, we collect names, ages, and avatar preferences.
Learning Activity Data
We store activity descriptions, photos (if you upload them), skill mappings, and XP calculations to track your child's progress. This data is used solely to generate insights and reports for your family.
Usage Information
We collect basic analytics about how you use our app (pages visited, features used) to improve our service. We never sell this data to third parties.
How We Use Your Information
- Provide and improve our learning tracking and gamification features
- Generate AI-powered insights and educational standard mappings
- Create official transcripts and progress reports for homeschool compliance
- Send you important updates about your account and our service
- Improve our algorithms and user experience based on aggregated, anonymized data
Data Security
We use industry-standard encryption (AES-256) to protect your data both in transit and at rest. All passwords are hashed using bcrypt, and we never store them in plain text.
Our servers are hosted on secure, SOC 2 compliant infrastructure. We regularly conduct security audits and vulnerability assessments to ensure your data remains protected.
Your Rights
- Access: You can download all your family's data at any time from your account settings
- Correction: You can edit or delete any activity, child profile, or account information
- Deletion: You can permanently delete your account and all associated data at any time
- Portability: Export your data in standard formats (CSV, PDF) for use elsewhere
Children's Privacy (COPPA Compliance)
Questopia is designed for parents to track their children's learning. We never collect personal information directly from children under 13. All account management and data entry is done by parents.
Child profiles are controlled by parent accounts. We do not use children's data for marketing purposes, and we never share it with third parties for advertising.
Third-Party Services
We use trusted third-party services to operate Questopia:
- Supabase: Authentication and database hosting (GDPR & SOC 2 compliant)
- Google Gemini: AI-powered skill mapping and insights (data not used for training)
- Vercel: Secure application hosting and content delivery