Privacy Policy for KeyQuest

Last Updated: June 21, 2025

Thank you for choosing KeyQuest ("we," "us," or "our").  This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit https://keyquestapp.com (the "Site") and use our associated products and services (collectively, the "Service").  By accessing or using the Service, you agree to the practices described in this Policy.

1.  Information We Collect
1.1  Information You Provide
•  Account Data — name, email address, and password.
•  Billing Data — payment card information (processed by Stripe; we do not store full card numbers).
•  Content — quests, reflections, or other information you input into the Service.

1.2  Information We Automatically Collect
•  Log Data — IP address, browser type, referring pages, date/time stamps.
•  Cookies & Similar Technologies — we use first-party cookies for authentication and to remember preferences, and third-party analytics cookies (e.g., Plausible) to understand aggregate usage.

2.  How We Use Your Information
We use your information to:
•  Provide and maintain the Service;
•  Process payments and manage subscriptions;
•  Send transactional emails (e.g., receipts, service updates, account notifications);
•  Respond to support requests;
•  Monitor, analyze, and improve the Service;
•  Comply with legal obligations.

3.  Legal Bases for Processing (EEA & UK)
We process personal data when:
•  Necessary to perform our contract with you (Article 6 (1)(b) GDPR);
•  Necessary to comply with a legal obligation (Article 6 (1)(c));
•  You give us consent (Article 6 (1)(a));
•  We have a legitimate interest that is not overridden by your rights (Article 6 (1)(f)).

4.  Sharing of Information
We never sell your data.  We share it only with:
•  Service providers who perform functions for us (e.g., Stripe for payments, Supabase for authentication & database, Resend for email).  These providers process data solely on our instructions.
•  Authorities or other parties when required by law or to protect rights and safety.

5.  International Transfers
KeyQuest is headquartered in the United States, and your information may be transferred to, stored, or processed in the U.S. or other jurisdictions where we or our service providers operate.  Where required, we rely on standard contractual clauses or other safeguards to protect personal data transferred from the EEA/UK.

6.  Security
We implement technical and organizational measures such as encryption in transit (HTTPS/TLS), least-privilege access controls, and regular security reviews.  However, no internet transmission is completely secure; use the Service at your own risk.

7.  Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of your personal data, and to object or port your data.  To exercise these rights, email privacy@keyquestapp.com.

8.  Data Retention
We retain your data for as long as your account is active and as necessary to comply with our legal obligations or resolve disputes.  You can delete your account at any time from Settings, which removes personal data within 30 days (unless retention is required by law).

9.  Children's Privacy
KeyQuest is not directed to children under 13, and we do not knowingly collect personal data from them.  If you believe a child has provided us personal data, contact us so we can delete it.

10.  Changes to This Policy
We may update this Policy periodically.  We will notify you of significant changes via email or through the Service at least 7 days before they become effective.

11.  Contact
For questions about this Policy or our privacy practices, email privacy@keyquestapp.com or write to: KeyQuest — 21 Rue de Startup, 75000 Paris, France.

12.  Governing Law
This Policy and any dispute related to privacy or data protection are governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict-of-laws principles.