How BraveQuest Handles Family Data

Last updated: June 20, 2026

BraveQuest helps parents and children manage routines, quests, points, rewards, and family progress. This policy explains what information we collect, why we use it, how we protect it, and the choices families have.

Who Controls The Data

BraveQuest is the controller for account, service, analytics, and support data processed through the BraveQuest service. Parents and guardians decide what child profile, quest, reward, and household content they add to their own household.

Privacy requests can be submitted through the contact page.

Information We Collect

Parent account data, including email address, hashed PIN credentials, passkeys, recovery codes, session records, and security metadata such as device or browser information.
Household data, including household name, theme, time zone, household join codes, privacy settings, onboarding choices, and member relationships.
Child profile data added by a parent, including names or nicknames, usernames, roles, points, levels, streaks, check-ins, collectibles, achievements, and family progress.
Quest and reward data, including chores, routines, homework tasks, submissions, parent approvals, reward inventory, redemptions, point ledger records, and journal entries.
Community and outpost content, if used, including outpost names, membership, posts, comments, challenges, and leaderboard/activity settings.
Reviews voluntarily submitted by parents for display on the landing page, including rating, review text, household name, and creation date.
Analytics and diagnostics, including event name, page path, referrer, landing page variant, anonymous ID, session ID, account or household IDs when logged in, user agent, hashed IP address, and event properties.
Browser storage and cookies, including a parent session cookie, local storage for parent token and anonymous landing analytics ID, and session storage for short-lived signup, household code, account, and kid-session state.

How We Use Information

Provide the BraveQuest app, including account access, kid login, household setup, quests, rewards, progress, outposts, and parent approvals.
Keep accounts secure, prevent misuse, manage sessions, support passkeys and recovery codes, and detect repeated failed authentication attempts.
Show family progress, calculate points, maintain streaks and achievements, and display theme-specific app experiences.
Improve onboarding, landing pages, product reliability, and feature design through analytics.
Respond to support, privacy, security, and legal requests.
Comply with law and enforce the Terms of Service.

Legal Bases For EU And UK Visitors

Where EU GDPR or UK GDPR applies, BraveQuest relies on these legal bases as appropriate:

Contract, to create accounts and provide requested app features.
Legitimate interests, to secure the service, prevent abuse, understand basic product performance, and improve BraveQuest in ways families reasonably expect.
Consent, where required for optional communications, non-essential storage, or other optional processing.
Legal obligation, where we must preserve or disclose information to comply with applicable law.

Children's Privacy

BraveQuest is intended to be used by children under parent or guardian direction. Parents create and manage child profiles, invite children into kid access, approve rewards, and control household privacy settings.

We design for data minimization: children do not need an email address, public profile, real full name, precise location, or payment details to use the kid experience. Parents should avoid adding sensitive information to quest titles, check-in notes, posts, comments, rewards, or reviews.

Cookies And Similar Technologies

BraveQuest uses storage that is necessary to provide login, security, app state, offline behavior, and basic analytics. The parent session cookie is HttpOnly, Secure, SameSite=Lax, and expires after the configured session period. Browser local storage and session storage help remember app state and landing analytics IDs.

BraveQuest does not currently use advertising cookies or behavioral advertising trackers. If non-essential cookies or similar technologies are introduced, BraveQuest will provide any consent controls required by applicable law.

Sharing And Service Providers

We do not sell personal information. We share information only as needed to operate BraveQuest, comply with law, protect rights and safety, or complete a transaction such as a business transfer.

BraveQuest is built on service providers that may process data on our behalf, including hosting, database, security, analytics, and infrastructure providers such as Cloudflare.

International Transfers

BraveQuest may process and store information in the United States or other countries where our service providers operate. Where EU or UK transfer rules apply, BraveQuest relies on appropriate transfer mechanisms, such as adequacy decisions, standard contractual clauses, or another lawful safeguard.

Retention

We keep information for as long as needed to provide BraveQuest, maintain security, comply with legal obligations, resolve disputes, and improve the service. Account and household records are generally retained while the account is active. Authentication attempts, analytics events, sessions, and security metadata are retained for operational, security, and compliance needs. Families may request deletion as described below.

Your Rights And Choices

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to certain processing of your personal information. You may also have the right to withdraw consent where processing depends on consent.

Parents can update many household settings directly in BraveQuest. To make a privacy request, use the contact page and choose Privacy. EU and UK visitors may also have the right to complain to their local data protection authority, including the UK Information Commissioner's Office.

Security

BraveQuest uses technical and organizational measures intended to protect family data, including hashed PINs and codes, secure session cookies, passkey support, restricted API access, and security headers. No online service is perfectly secure, so families should use strong account PINs, protect recovery codes, and keep household codes private.

Changes

We may update this policy as BraveQuest changes. Material updates should be dated clearly and, where appropriate, communicated inside the app or by email.