Privacy Policy

1. Who We Are

World Quest ("the App", "we", "our") is a children's educational geography application developed and operated by EverRun (everrun.app). This Privacy Policy explains how we handle information when your child uses World Quest on iOS or Android devices.

If you have questions, contact us at privacy@everrun.app.

2. Our Commitment to Children's Privacy

World Quest is designed for children ages 3–12. We are fully committed to the Children's Online Privacy Protection Act (COPPA) and similar laws worldwide, including the UK GDPR and GDPR provisions for children.

• We do not collect personal information from children under 13.
• We do not require registration or account creation to use the core app.
• We do not include social features, chat, or user-generated content.
• We do not allow third parties to collect personal data from children through the App.
• We do not use behavioural advertising targeting children.

3. Information We Do NOT Collect

We do not collect:

• Names, email addresses, or contact information
• Photos, videos, or voice recordings
• Location data (GPS or otherwise)
• Device contacts or calendar
• Social media profiles or connections
• Health or biometric data
• Any information that could personally identify a child

4. Information Stored Locally on Your Device

The App stores progress data only on your device (using AsyncStorage / local device storage). This includes:

• Explorer name (chosen voluntarily, never transmitted)
• Countries explored and stories read
• Quiz scores, XP points, and streak counts
• App settings (age group, audio preferences, notification preferences)
• Premium subscription status (verified with the App Store / Google Play)

This data never leaves your device and is not accessible to us or any third party.

5. Optional Account (Parental)

Parents or guardians may optionally create an account to sync progress across devices. If you create an account, we collect:

• Email address (parent/guardian only) — used for account recovery and transactional emails only
• Anonymised user ID — to link your account to your progress data

We never ask for the child's name, age, or any identifying information via account registration. Account data is stored securely using Supabase infrastructure with encryption at rest and in transit.

6. Analytics

We may collect anonymised, aggregated analytics to understand how the app is used and improve it. This data cannot be used to identify any individual user or child. Examples include:

• Number of sessions started (no user identity)
• Which screens are visited most (no user identity)
• App crash reports (device model and OS version only — no personal data)

All analytics are configured with tagForChildDirectedTreatment = true and tagForUnderAgeOfConsent = true.

7. Advertising

The free version of World Quest may display advertisements. All advertising in World Quest is:

• Served by Google AdMob, configured with non-personalised ads only
• Set to maximum content rating G (family-safe only)
• Tagged as child-directed (tagForChildDirectedTreatment = true), which disables interest-based targeting
• Never shown to children in the 3–6 (Toddler) age group

Premium subscribers see zero advertisements. You can remove all ads permanently by subscribing to World Quest Premium.

8. In-App Purchases

World Quest offers optional in-app purchases (Premium subscription). All payment processing is handled entirely by Apple (App Store) or Google (Play Store). We never receive, store, or process payment card information. The purchase receipt is verified with the respective store to confirm premium status.

9. Third-Party Services

The following third-party services may be used within the App. Each is configured to respect children's privacy:

• Supabase — Database for optional account data (parent accounts only). Privacy policy: supabase.com/privacy
• Google AdMob — Advertising (non-personalised, child-directed). Privacy policy: policies.google.com/privacy
• Apple App Store / Google Play — Purchase verification. Subject to their respective privacy policies.
• Expo / React Native — App framework. No personal data shared.

We do not sell, rent, or share personal data with any third party for marketing purposes.

10. Data Security

We implement appropriate technical and organisational measures to protect any data we handle:

• All network communication is encrypted using TLS/HTTPS
• Server-side data (parent accounts) is encrypted at rest
• Access to backend systems is restricted to authorised personnel only
• We conduct regular security reviews

11. Data Retention

Local device data is retained until the app is uninstalled. Optional account data is retained until you request deletion. You may request deletion of your account and associated data at any time by emailing privacy@everrun.app — we will process your request within 30 days.

12. Parental Rights

As the parent or guardian of a child using World Quest, you have the right to:

• Review any personal data we may hold about your family
• Request deletion of any account data
• Revoke consent for data collection at any time
• Object to our processing of data

To exercise any of these rights, contact us at privacy@everrun.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes by updating the date at the top of this page. We encourage parents to review this policy periodically. Continued use of the App after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your child's data, please contact:

• Email: privacy@everrun.app
• Website: worldquest.everrun.app
• Company: EverRun, everrun.app

We aim to respond to all privacy enquiries within 5 business days.