# Privacy Policy for WinQuest
**App Name:** WinQuest
**Package Name:** `com.musonda.winquest`
**Effective Date:** August 18, 2026
**Contact Email:** musondaf2004@gmail.com
This Privacy Policy explains how **WinQuest** ("we", "us", or "our") collects, uses, retains, and protects your personal data when you use the WinQuest mobile application and related services.
---
## 1. Data Retention Policy
**How long we retain your data:**
- **Active User Accounts:** We retain your personal data (account profile, logged habits, victories, images, pacts, XP, and AI insights) for as long as your WinQuest account remains active to provide app functionality.
- **Account Deletion:** When you delete your account (via in-app Settings or by submitting a deletion request), your personal profile and associated data are **immediately and permanently removed** from our active database.
- **Encrypted Backups:** Residual encrypted database backups containing past record snapshots are automatically and permanently purged within **30 calendar days** of backup generation.
- **Server Logs & Analytics:** Anonymized operational logs and crash diagnostics are retained for a maximum of **90 days** strictly for security auditing and bug resolution, after which they are deleted.
---
## 2. Data Deletion Process & Instructions
WinQuest provides clear, straightforward methods for users to delete their account and personal data at any time:
### Method A: Instant In-App Deletion
1. Open the **WinQuest** app on your device.
2. Navigate to your **Profile** screen and tap the **Settings** (gear) icon.
3. Scroll to the bottom of the Settings screen.
4. Tap **DELETE FOREVER**.
5. Confirm your selection when prompted. Your account, habits, victories, photos, and AI memories will be instantly and permanently deleted from our servers.
### Method B: Web / Email Deletion Request
1. Send an email to our support address: `musondaf2004@gmail.com`.
2. Use the subject line: **"WinQuest Data Deletion Request"**.
3. Provide your registered username and account email address in the body of the message.
4. Our support team will verify your identity and process the complete deletion of your account and all associated data within **30 calendar days**, sending you a final email confirmation upon completion.
**Data Removed Upon Deletion:** Full name, username, email address, avatar, logged habits, victory records, uploaded photos, pacts, social posts, AI chat history, and earned badges.
---
## 3. Information We Collect
We collect information to provide and improve WinQuest services:
- **Account Information:** Name, email address, username, profile picture/avatar, and authentication credentials (via Google Sign-In or Firebase Auth).
- **User Activity Content:** Habits created, daily victory entries ("drops"), custom pacts, streak progress, XP points, level titles, and earned badges.
- **Uploaded Media:** Photos or image attachments added to victory drops.
- **AI Interactions:** Text prompts and victory logs processed through Google Gemini AI to generate victory interpretations and motivational guidance.
- **Device & Notifications:** Push notification tokens (via Expo Notifications / Firebase) and basic device OS information.
- **Purchase Information:** In-app subscription tier status managed securely via RevenueCat and Google Play Billing. (We do not collect or store raw credit card information).
---
## 4. How We Use Your Information
Your information is used strictly to:
- Deliver core app features, habit tracking, victory logging, and gamification rewards.
- Generate AI victory responses and personalized Sentinel advice.
- Maintain public leaderboards and social feeds (only for content you choose to publish).
- Send daily streak reminders and app notifications.
- Process subscriptions and manage account security.
---
## 5. Data Sharing & Third-Party Service Providers
**We do NOT sell, rent, or trade your personal information to third parties or advertisers.**
We share necessary data only with trusted infrastructure providers who assist in operating the app:
- **Supabase Inc.:** Database storage and backend services (data encrypted in transit and at rest).
- **Firebase / Google Sign-In:** Identity authentication and push notifications.
- **Google Gemini AI:** Processing victory descriptions to provide text responses (data is not used to train public global models).
- **RevenueCat Inc.:** Processing in-app purchase entitlements and subscription state.
---
## 6. Data Security
We implement robust technical measures to protect your information, including HTTPS/TLS encryption for all data in transit, Row-Level Security (RLS) policies on database tables, and secure cloud storage. Access to personal data is restricted to authorized systems only.
---
## 7. Children's Privacy
WinQuest is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal data, we will take immediate steps to delete such information.
---
## 8. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
- **Developer:** Musonda / WinQuest Team
- **Email:** `musondaf2004@gmail.com`
- **Package Name:** `com.musonda.winquest`