Privacy Policy

1. Who We Are

World Quest ("the App", "we", "our") is a children's educational geography application developed and operated by EverRun (everrun.app). This Privacy Policy explains how we handle information when your child uses World Quest on iOS or Android devices.

If you have questions, contact us at privacy@everrun.app.

2. Our Commitment to Children's Privacy

World Quest is designed for children ages 3–12. We are fully committed to the Children's Online Privacy Protection Act (COPPA) and similar laws worldwide, including the UK GDPR and GDPR provisions for children.

• We do not collect personal information from children under 13.
• We do not require registration or account creation to use the core app.
• We do not include social features, chat, or user-generated content.
• We do not allow third parties to collect personal data from children through the App.
• We do not use behavioural advertising targeting children.

3. Information We Do NOT Collect

We do not collect:

• Names, email addresses, or contact information
• Photos, videos, or voice recordings
• Location data (GPS or otherwise)
• Device contacts or calendar
• Social media profiles or connections
• Health or biometric data
• Any information that could personally identify a child

4. Information Stored Locally on Your Device

The App stores progress data only on your device (using AsyncStorage / local device storage). This includes:

• Explorer name (chosen voluntarily, never transmitted)
• Countries explored and stories read
• Quiz scores, XP points, and streak counts
• App settings (age group, audio preferences, notification preferences)
• Premium subscription status (verified with the App Store / Google Play)

This data stays on your device unless you choose to create a parent account and sync progress.

5. Optional Account (Parental)

Parents or guardians may optionally create an account to sync progress across devices. If you create an account, we collect:

• Email address (parent/guardian only) — used for account recovery and transactional emails only
• Anonymised user ID — to link your account to your progress data

We never ask for the child's name, age, or any identifying information via account registration. Account data is stored securely using Supabase infrastructure with encryption at rest and in transit.

6. Analytics

Parents may choose to share anonymised analytics to help us improve the app. Analytics are off by default and can only be enabled from parent-controlled settings. The data is configured to avoid directly identifying a child. Examples include:

• Number of sessions started (no user identity)
• Which screens are visited most (no user identity)
• App crash reports (device model and OS version only — no personal data)

We do not send analytics until a parent has given consent, and a parent can turn that choice off again at any time.

7. Advertising

World Quest does not contain third-party advertising. We do not use advertising SDKs or show ads to children or parents.

8. In-App Purchases

World Quest offers optional in-app purchases (Premium subscription). All payment processing is handled entirely by Apple (App Store) or Google (Play Store). We never receive, store, or process payment card information. The purchase receipt is verified with the respective store to confirm premium status.

9. Third-Party Services

The following third-party services may be used within the App. Each is configured to respect children's privacy:

• Supabase — Database for optional account data (parent accounts only). Privacy policy: supabase.com/privacy
• Apple App Store / Google Play — Purchase verification. Subject to their respective privacy policies.
• Expo / React Native — App framework. No personal data shared.

We do not sell, rent, or share personal data with any third party for marketing purposes.

10. Data Security

We implement appropriate technical and organisational measures to protect any data we handle:

• All network communication is encrypted using TLS/HTTPS
• Server-side data (parent accounts) is encrypted at rest
• Access to backend systems is restricted to authorised personnel only
• We conduct regular security reviews

11. Data Retention

Local device data is retained until the app is uninstalled. Optional account data is retained until you request deletion. You may request deletion of your account and associated data at any time by emailing privacy@everrun.app — we will process your request within 30 days.

12. Parental Rights

As the parent or guardian of a child using World Quest, you have the right to:

• Review any personal data we may hold about your family
• Request deletion of any account data
• Revoke consent for data collection at any time
• Object to our processing of data

To exercise any of these rights, contact us at privacy@everrun.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. We encourage parents to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your child's data, please contact:

• Email: privacy@everrun.app
• Website: worldquest.everrun.app
• Company: EverRun, everrun.app

We aim to respond to all privacy enquiries within 5 business days.