Privacy & Children’s Privacy Notice
QuestNest is a family organization app. A parent or legal guardian creates the household account and manages every profile inside it. This notice explains what we collect, why, and the choices you have.
Who can create an account
Only adults (18+) who are the parent or legal guardian of the children they add may create a household. Children use profiles inside their parent’s account and never create accounts themselves.
What we collect
- Account holders: name, username, email address and a securely hashed password.
- Family profiles: the display name, profile type (child, teen, parent, grandparent), chosen character and optional goal that a parent enters. Children’s profiles require no email, photo, birthday, school or location.
- Activity: quests, routines, homework titles, calendar events, rewards, points, achievements and family-wall messages entered by your household.
- Technical: a secure session cookie to keep you signed in, and basic server logs needed to protect the service from abuse.
What we don’t do
- No advertising, ad tracking or third-party analytics.
- We never sell or rent personal information.
- No artificial-intelligence services receive your data — the Family Coach runs entirely on this server using predefined rules.
- Children cannot contact anyone outside their own household.
How information is used
Only to provide QuestNest to your family: showing progress, saving your household across devices, sending password-reset emails, invitations and the optional notifications you turn on in Settings.
Parental control
- Parents decide who can join the household and what each grandparent login can see.
- Kids’ profiles can be protected with a PIN, and a parent PIN keeps children out of parent controls.
- Parents can review, edit or delete any child’s profile and activity at any time.
- Parents can download all household data (Settings → Data & privacy) or permanently delete the household, which removes every profile and record.
Security
Passwords and PINs are stored only as one-way hashes. Sessions are stored server-side, protected against cross-site request forgery and rate-limited against guessing. Every household’s information is separated so no family can see another family’s data. Use HTTPS on your QuestNest website.
Retention
Household data is kept while the account is active. When a household is deleted, its records are removed from the live database immediately and from backups as they rotate.
Contact
Questions or requests about your family’s information can be sent to the site operator at hello@aurexstudios.com.