This privacy policy explains how we, Quests Inc., of 8 The Green, Suite #10341, Dover, DE 19901, USA (“Quests Inc.”, “we”, “us”, “our”) process your personal information (“you”, “your”) when you use our website, app or other services.
PLEASE READ THIS PRIVACY POLICY CAREFULLY. By clicking the button “Continue” in our mobile application Quests Inc. (“App”) or by using our Website located at www.quests.inc (“Website”), you acknowledge and (if applicable) agree to the information set out in the following Privacy Policy.
Please do not use our services unless you are 16 years old or over.
Please note:
- Individuals in the European Economic Area (EEA) and the UK should also read our section about “Your EEA & UK Data Privacy Rights”.
- Individuals in California should also read our section about “Your California Data Privacy Rights”.
- Individuals in Nevada should also read our section about “Your Nevada Data Privacy Rights”.
1. WHO DOES THIS PRIVACY POLICY APPLY TO?
This policy applies to:
- our Website and App users;
- our creators who post quests in our service and participants; and
- persons who interact with us, when you call us, chat with us, or email us.
This policy applies to you whether you act in your personal capacity or as an employee or agent of an organization.
2. WHAT TYPES OF INFORMATION DO WE COLLECT?
This policy applies to:
- our Website and App users;
- our creators who post quests in our service and participants; and
- persons who interact with us, when you call us, chat with us, or email us.
This policy applies to you whether you act in your personal capacity or as an employee or agent of an organization.
Generally, “personal information”, “personal data” or similar terms refer to any information that identifies you or relates to you. However, the exact meaning of personal information may be determined by the law of the country of your residence.
We will process the following information which may be considered personal information:
Your Profile details when you create one, such as your name, surname, date of birth, age, gender, interests, bio, your city or place, your occupation, your image, and contact details such as your telephone number or email.
When accessing our services, your device and browser will automatically provide unique information such as account ID, mobile device ID, internet protocol (IP) address, cookie ID or online identifiers, operating system, browser type, time zone setting, location and date and time of access.
Our systems may record usage data about how you navigate and engage with our services, use our features, download materials, security logs will be kept, online activity data such as clickstream data with URLs visited previously, page interaction information (such as scrolling, clicks, and mouse-overs), your preferences (including country and language), and methods used to browse away from our services.
Some of our features rely on real-time information about the location of your device where you enabled the functionality on your device.
Information that you provide about your interests and occupation or that we otherwise collect about your preferences and interests known, observed or inferred.
When you contact or visit us, we may process the details of your request, communications, complaints, or other interaction.
Your phone contact list so that you can choose to invite your phone contacts to join the App or see which phone contacts are already on the App.
If you are the phone contact of an App user we may use your phone number to invite you to use the App but only if the existing registered App user requests that we do this.
Your Instagram ID and your Instagram photo-stream, if you choose to link your Quests account to your Instagram account.
Sensitive personal information, if you choose to provide it, for example in your bio. This could be information such as, for example, about your political opinions, religious or philosophical beliefs, health or sexual orientation. If you choose to use our App and to share sensitive personal information on it (e.g., as part of your biography, in a message, or quest invite), this will constitute your explicit consent to our processing that information. You will be free to edit or remove such information at any time if you no longer wish to share such information.
Our community is based on transparency and each quester must share some basic information about themselves and their image before joining.
3. DATA ACCURACY
We will rely on the information provided by you as accurate, complete, and up to date, and we would be grateful if you could inform us of any changes.
4. WHAT INFORMATION DO WE COLLECT AND WHY?
Generally, we will use your personal information to (i) provide our services and enable you to use our service features, (ii) respond to your queries, (iii) develop and promote our organization and services; (iv) ensure the security and technical availability of our services; and (v) comply with the law.
* If you are an individual in the EEA or the UK, we have to inform you about the “legal ground” for us to use your “personal data”. This will typically be the performance of our contract with you (based on our Terms of Use) or our legitimate interest to use your personal data to ensure that our services are provided properly, efficiently and securely, as is further explained in the table below.
Where we rely on legitimate interests as the legal basis for processing personal data, we have considered whether those interests are overridden by the interests or fundamental rights or freedoms of the individuals whose data are being processed and concluded that the processing is, on balance, fair.
| Purpose | Personal information | Legal ground for processing* (for individuals in the EEA and UK only) |
|---|---|---|
| To assist and contact you in relation to your enquiry or to send you information which you have requested about our services. |
|
Necessary for our legitimate interest in responding to queries, maintaining business relationships and administering our business or to take necessary steps at your request prior to entering into a contract with you. |
| To register you as a service user when you sign up for our services and to enable you to use our services and service functionalities. |
|
Necessary for the performance of our contract with you and for our legitimate interest in running our social media community. |
| To enable you to operate your account as a host and attendee and to provide offers and interact with our social media community. |
|
Necessary for the performance of our contract with you and for our legitimate interest in providing meaningful features to our hosts. |
| To fulfil your requests and send you service communications and notifications about matters relevant to your use of our services and your engagement with us, such as, details of events, changes in our terms, etc. |
|
Service communications are necessary for the performance of our contract with you. Other notifications are necessary for our legitimate interest in satisfying your requests, facilitating our services and organising related business activities. Push notifications are generally subject to your consent given on your device data |
To improve and develop our services, including to:
|
|
Necessary for our legitimate interest in delivering our services properly, efficiently and understanding our users’ needs. |
To ensure proper administration of our business, including to:
|
|
Necessary for our legitimate interest in the proper administration of our business, dispute resolution, ensuring technical operation of our services and necessary for compliance with a legal obligation to which we are subject. |
| To engage our third party service providers who may process your information on our behalf to facilitate the provision of our services and the fulfilment of essential service functions, such as web hosting, cloud storage, analytics, payments, plugins, communications, accounting, security and others. | all information necessary to enable the relevant service | Some activities are necessary for the performance of our contract with you, others are necessary for our legitimate interest in ensuring the proper operation of our services |
| Some activities are necessary for the performance of our contract with you, others are necessary for our legitimate interest in ensuring the proper operation of our services |
|
Necessary for our legitimate interest to ensure the security of our organisation, people and services and necessary for compliance with a legal obligation to which we are subject. |
| Necessary for our legitimate interest to ensure the security of our organisation, people and services and necessary for compliance with a legal obligation to which we are subject. |
|
Necessary for our legitimate interest in detecting and preventing fraud and illegal conduct and necessary for compliance with a legal obligation to which we are subject. |
| To process information as is required for our compliance with the law or to establish, exercise or defend legal claims. To process and share information with other third parties where required by law, such as regulators, law enforcement agencies or where mandatory under a court order. |
Any information subject to mandatory processing or disclosure, where this is proportionate and lawful | Where processing or sharing your data is necessary for compliance with a legal obligation to which we are subject, to establish, exercise or defend legal claims, to fulfil our duty of care owed to third parties or, where necessary and proportionate, in order to satisfy our legitimate interest in complying with best practice or applicable laws. |
5. SHARING YOUR INFORMATION
We will generally not share your information except with (i) our third party service providers and advisors who may process personal information on our behalf, (ii) our advertising, marketing and analytics partners, as explained above, (iii) persons or authorities where we are compelled by law, (iv) to the relevant entity in case of a merger, acquisition or collaboration, and (v) other third parties where you have provided your consent. Your stories may be shared between Quests Inc and Instagram if authorized by you.
From time to time Quests Inc may offer the functionality for you to choose to synchronize your events with third party platforms such as Apple Calendar or Google Calendar.
We share analytical data with Amplitude, Appsflyer, Firebase.
6. THIRD PARTIES MAY PROCESS YOUR INFORMATION
Our services may contain links to other websites, third party services, such as Telegram, Instagram, TikTok and other or plugins. You should check the privacy statements of these third party providers before you use them as we are not responsible for how they may process your personal information.
7. HOW LONG IS YOUR INFORMATION KEPT?
Unless stated otherwise in this Privacy Policy, the personal data that you provide us will only be stored for as long as it is necessary for us to fulfill our obligations in respect of the provision of the Services.
After the retention period, your personal information will either be securely deleted or anonymized and it may be used for analytical purposes.
8. HOW DO WE SECURE YOUR INFORMATION?
We maintain appropriate organizational and technological safeguards to help protect against unauthorized use, access to or accidental loss, alteration or destruction of the personal information we hold. We also seek to ensure our third-party service providers do the same.
We will endeavor to use the least amount of personal information as is required for each purpose. We will employ pseudonymization and anonymization techniques, where appropriate.
Our staff will access your personal information on a “need to know” basis.
We don’t have access to and do not receive information from chats in which users exchange messages. Chats use end-to-end encryption. This means that all data in encryption is a key known only to the sender and recipient of messages. There is no way for Us or any third party to know the content of messages without accidental access to your device.
9. WHERE IS YOUR INFORMATION PROCESSED?
We may transfer your personal information to our group companies, suppliers and other third parties in countries different to your country of residence.
In addition, data may be transferred to our subsidiaries or processors in third countries or subcontractors of our processors in third countries.
Some of our group companies and the third parties described in this Privacy Policy that provide services to us under contract, are based in other countries that may not have privacy and data protection laws equivalent to those of the country in which you reside. If you are using Quests Inc in the UK or EEA, in the event your personal information is transferred, stored or processed outside of the UK or EEA, we will ensure – if and as required by applicable laws - that any such transfer meets the requirements of the GDPR or UK GDPR (as applicable), or that the transfer is otherwise subject to prescribed safeguards such as approved ‘Standard Contractual Clauses’. We will take all steps reasonably necessary to ensure that your personal information is treated securely and, as applicable, in accordance with this Privacy Policy, GDPR, UK GDPR and Data Protection Act 2018. You can obtain more details of the protection given to your personal data when it is transferred outside the EEA or the UK by contacting us using the details below.
10. UPDATES
If we make any changes to our Policy you will be able to see them on this page. You should regularly check for updates, as indicated by the “Last updated” date at the top.
If you do not agree with the changes, please do not continue to use our Website or App. Of course, if any such changes significantly affect you, we will ask for your prior consent where we are required to do so by law.
You may delete your data and account any time by going to Profile -> Settings -> Delete Account within the App or by contacting us at [email protected].
11. YOUR CALIFORNIA DATA PRIVACY RIGHTS
If you are a California resident, California law may provide you with additional rights regarding our use of your personal information. To learn more about your California privacy rights, visit LINK TO CCPA
California’s “Shine the Light” law (Civil Code Section § 1798.83) permits users of our SERVICE that are California residents to request certain information regarding our disclosure of personal information to third parties for their direct marketing purposes. To make such a request, please contact our Privacy Officer.
12. YOUR NEVADA DATA PRIVACY RIGHTS
Nevada residents who wish to exercise their sale opt-out rights under Nevada Revised Statutes Chapter 603A may submit a request to our Privacy Officer. However, please know we do not currently sell data triggering that statute’s opt-out requirements.
13. YOUR EEA & UK DATA PRIVACY RIGHTS
This section provides further disclosures and describes the rights in relation to your personal data that you may have under The General Data Protection Regulation (“GDPR”) if you are an individual in the EEA or the the Data Protection Act 2018 (“DPA 2018”) and UK General Data Protection Regulation (“UK GDPR” if you are an individual in the UK).
A. Personal data
“Personal data” means any information relating to an identified or identifiable natural person; such person is known as a ‘data subject’. In practice, almost all information relating to you will be your personal data.
B. How do we process your information and why?
We will process your personal data as “controller” for the purposes and on the legal grounds for processing set out above.
We will update you about any new purposes of processing of your personal data from time to time, and we will obtain your prior consent for such new purposes where we are required to do so at law.
C. Data subject rights
Subject to certain exemptions, limitations and appropriate proof of identity, as a data subject, you will generally have numerous rights in relation to your personal data that you may exercise with the controller, including the following:
- Right to information about matters set out in this policy. You may also contact us for further details about our retention policy and international data transfers.
- Right to make an access request to receive copies of personal data.
- Right to rectification of any inaccurate or incomplete personal data.
- Right to withdraw consent previously provided, without affecting the lawfulness of our processing based on consent before its withdrawal.
- Right to object to our processing of personal data for direct marketing purposes, or that is based on our legitimate interests, and any automated decision-making and profiling.
- Right to erasure of personal data, in certain circumstances.
- Restriction on the processing of personal data in certain circumstances.
- Right to data portability from one service provider to another, where applicable.
- Right to lodge a complaint with your country’s supervisory authority, such as the Information Commissioner’s Office in the UK.
All requests will be processed in a timely manner, generally within one month. If we cannot process your request within this period we shall explain why and process it as soon as possible thereafter. You can exercise these rights directly with us by submitting a request at [email protected]. Please note that these rights are not absolute and we may be entitled (or required) to refuse requests where exceptions apply.
D. Data retention
Generally, we will keep your personal information for 6 years from collection but often earlier deletion will be mandated by our retention policy. We delete most of your information after you delete your account, unless we are required to keep it for longer for legal purposes. Your communication history with others (including photographs posted in the chat and comments functions) may be retained but on an anonymous basis if reasonably possible. Some data may be retained in analytics systems for data analytics purposes. Please get in touch for more information.
14. INFORMATION RELATING TO CHILDREN
We do not intentionally collect or maintain information from persons under the age of 16, however, according to each country and its laws, the processing of the Personal Data of a child will be lawful where the child is at another age.
If we determine upon collection that a user is under this age, we will not use or maintain his/her Personal Information without the parent/guardian’s consent. If we become aware that we have unknowingly collected personally identifiable information from a child under the age of 16, we will make reasonable efforts to delete such information from our records. If you believe that we might have any information from or about a child under 16 years of age please contact us at [email protected].
We also recommend that parents monitor their children’s Internet activities and learn and employ software or other tools that can help their children enjoy their online experience without compromising their personal safety or allowing them to use the Internet in a manner inconsistent with their parent/guardian’s preferences.
15. CONTACT US
Please email us if you have any queries or concerns about how we use your personal information. We will try to resolve your query without undue delay.
E-mail: [email protected]
