Privacy Policy

1. Introduction

Quest App, Inc. (“Quest,” “we,” “our,” or “us”) operates the Quest dating app and the thequestapp.co website. This Privacy Policy explains how we collect, use, and protect your information when you use our services, including our AI matchmaker, Rumi.

By using Quest, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

A. Information You Provide

When you create an account or use Quest, you may provide us with the following information:

• Account data: name, email address, phone number, date of birth, and gender.
• Profile data: photos, bio, and survey or prompt responses, which may include sensitive information such as dating preferences.
• Exercise habits: We do not ask about health conditions; we do ask about exercise habits. We use them to personalize Rumi and the matchmaking experience.
• Notes and answers: notes you leave Rumi, answers you give it, and Rumi’s replies.
• User-generated content: messages sent to other users, photos shared within the app, and feedback you submit.

Quest is free today; if we add paid plans, we will update this policy and ask before charging.

B. Automatically Collected Information

When you use Quest or visit our website, we automatically collect certain information, including:

• Device data: device type, operating system, and browser type.
• Usage data: app opens, screens and features used, profile actions, push-notification taps, and answer interactions. Our own telemetry records this information with your account.
• Diagnostics: a crash and performance reporting provider receives account-linked crash reports, performance data, limited network diagnostics, and feedback.
• Location: the app asks for your location while it is in the foreground. Before the coordinates leave your phone, they are rounded to about a kilometre. We keep the rounded location and city. We do not store your precise location, and we do not rely on your IP address alone to find your city.
• GIF searches: the GIF search provider receives your search terms, not your identity.
• Cookies and similar technologies: as described in our Cookie Policy.

C. Information from Third Parties

Apple and Google may give us the sign-in information described below when you choose to use their sign-in services. We do not verify identity through a third party today; if we add it, this policy will say so first.

D. Sign-In Providers

You can sign in to Quest using Sign in with Apple, Sign in with Google, or your phone number (via SMS one-time passcode). When you choose a third-party sign-in option, we receive a limited set of information from the provider to create and authenticate your Quest account.

Sign in with Google. When you sign in with Google, we request only the basic OpenID profile and email scopes. From these, we receive your Google account email address, name, and profile-photo URL. We use your email address and name to create and authenticate your Quest account. We do not save or use the profile-photo URL. We do not request access to your Google contacts, calendar, drive, or any other Google service, and we do not use your sign-in information for advertising. You can revoke Quest’s access to your Google account at any time at myaccount.google.com/permissions. Google’s own handling of your data is governed by the Google Privacy Policy.

Sign in with Apple. When you sign in with Apple, we receive an Apple-issued user identifier and your name (only the first time you sign in). For your email, you can choose to share your real Apple ID email or use Apple’s “Hide My Email” feature, in which case we receive an Apple-generated relay address ending in @privaterelay.appleid.com. We use this information solely to create and authenticate your Quest account, and we do not use it for advertising. You can revoke Quest’s access at any time on your device under Settings → Apple ID → Sign in with Apple → Quest.

Phone sign-in. If you sign in with your phone number, we send a one-time passcode by SMS to verify that you control the number. Phone verification is described in more detail in our Security Statement.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To operate, maintain, and improve the Quest app and website.
• To facilitate matching between users based on preferences and compatibility.
• To enable Rumi AI features, including personalized matchmaking recommendations and conversations.
• To verify your identity and prevent fraud.
• To send you service-related communications, updates, and promotional messages (with your consent where required).
• To analyze usage patterns and improve our services.
• To enforce our Terms of Service and other policies.
• To comply with legal obligations and respond to lawful requests.
• To learn from how people use Quest and make Rumi better, as Section 4 explains.

4. How We Use AI

Rumi runs on AI models from an outside AI company in the United States. When you use Rumi, certain content from your account is sent to that company so it can return Rumi’s reply and help Rumi learn what to ask. The same company also runs an automated safety check on match messages, as described below. Here is what we send and why.

What We Send

• Your name, age, gender, city, height, ethnicity, bio, religion and politics if you give them, exercise habits, preferences, free-text answers, notes you leave Rumi, Rumi’s memory of you, and anything else you choose to share.

What We Don’t Send to Rumi

• What you and a match say to each other. (A separate automated safety check, run by our AI provider, does read every match message; see Private 1:1 Chats.)
• Your photos.
• Your contact information (phone number, email address).
• Information about other users beyond what’s needed for a specific match suggestion.

Training Posture

Our AI provider does not train its models on your content under the terms we use. API inputs and outputs are not fed back into model training by default.

Retention

Our AI provider keeps what we send for up to 30 days for abuse and safety monitoring, then deletes it. Quest keeps Rumi’s notes and replies, and what Rumi has learned about you, until you delete your account.

How to Withdraw Your Consent

Rumi is the core of how Quest works, so you cannot keep using Quest with Rumi turned off. To withdraw your consent for AI processing, delete your account: in the app, go to Settings → Account → Delete account. We will remove your content, photos, and account after 14 days. A few records stay for safety, fraud prevention, and legal duties, as described in Section 6.

Private 1:1 Chats

Messages between you and other users are encrypted in transit and at rest. Every message in a match chat is checked automatically by an outside AI safety service, before or after it is stored, to keep people safe. Rumi never reads what you and a match say to each other. Message previews travel through real-time messaging and push-notification delivery providers so they can reach the other person’s phone. Match chats are not used to train AI models.

How Quest Learns

Rumi personalizes your experience from what you tell it and how you use Quest. We also learn from patterns in how everyone uses Quest, to improve Rumi and the app. We don’t sell this data or use it for ads.

Face data

When you add photos, we turn the faces in them into numbers so we can learn who members are drawn to and who to show them. This may count as biometric data in some places. We don’t use it to identify anyone, and we never sell it. We delete it within 30 days of you deleting that photo or your account, or 3 years after you last use Quest.

Sensitive Data

We do not use your dating preferences, sexual orientation, religion, politics, ethnicity, or relationship history for advertising or marketing. We use them only to run, personalize, and improve Quest.

Questions About AI Specifically

Email us at privacy@thequestapp.co with subject “AI question.” You can also read our AI Principles for a plain-language overview of how Rumi works.

5. Data Sharing

We share information with these categories of recipients to run Quest:

• AI provider: powers Rumi, personalizes its replies, and checks match-chat messages for safety.
• Cloud hosting and database providers: host Quest and store and process the information needed to provide it.
• Crash and performance reporting providers: receive account-linked crash reports, performance data, limited network diagnostics, and feedback so we can find and fix problems.
• Email and text delivery providers: send account, waitlist, data-export, deletion, and verification messages.
• Real-time messaging and push-notification delivery providers: deliver messages, message previews, and service notifications.
• Photo-safety screening providers: screen profile photos for safety.
• GIF search providers: receive your search terms, not your identity, and return GIF results.
• Voice and video call providers: carry live call media and the room and account details needed to connect a call. We do not record calls.
• Apple and Google: provide sign-in services and return the account details needed to sign you in, only if you choose to use them.
• Other users: your profile information (such as your name, photos, bio, and age) is visible to other users as controlled by your settings.
• Law enforcement and legal authorities: when required by law, subpoena, court order, or other legal process, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfers: in connection with a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Every company we share data with is bound by contract to protect it at least as well as this policy does, and to use it only to provide its service to Quest.

We report suspected child-safety material to the authorities as the law requires.

We do not sell your personal data.

6. Data Retention

We keep your personal data while your account is active or as needed to provide Quest. When you ask us to delete your account, we delete your content, photos, and account after 14 days.

A few records stay for safety, fraud prevention, and legal duty:

• Deletion request: the user ID, the email address only until we send your goodbye email, reason, and timestamps stay as a record of the request.
• Restore-attempt security records: device ID, IP address, user agent, and region stay to prevent fraud and account takeovers.
• Deletion ledger: a permanent, append-only record keyed by a one-way code shows that deletion occurred without keeping your plain user ID in the ledger.
• Child-safety quarantine: content held for a child-safety report stays for at least 365 days, as the law requires.
• Safety reports: a report you made, or one made about you, stays after either account is deleted. If you made a report, we also keep a one-way code made from your phone number or email. It can’t be turned back into your number or email, and it’s used for one thing: if you sign up again, the person you reported is kept away from you. We keep reports and these codes for as long as they’re needed to keep people safe.
• Accounts on hold: on hold means we’ve paused an account while we look into a safety concern. If an account is on hold when it is deleted, we keep one-way codes made from its verified phone number, email and Apple or Google sign-in, so we can spot it and review it if it signs up again. These codes stay until we lift the hold.
• Safety evidence: messages from a conversation that was reported or flagged are kept for one year in a restricted store for review, or longer if the law requires it for a report to the authorities, then erased.
• Anonymous records: after your account is deleted we keep a few records with nothing that identifies you: which screens and onboarding steps were reached, in which month, and the reason you chose for leaving (never your own words). We only add them in batches of five or more people. We don’t try to work out whose records these are, and anyone we share them with must promise the same.
• Learned patterns: what Quest learned from many people’s use together stays after your account is deleted. It isn’t linked to you.

7. Your Rights and Choices

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you.
• Correction: request that we correct inaccurate or incomplete personal data.
• Deletion: request that we delete your personal data, subject to certain exceptions.
• Opt out of marketing communications: you can unsubscribe from marketing emails by clicking the “unsubscribe” link in any marketing email, or by adjusting your notification settings in the app.
• Cookie preferences: you can control cookie preferences through your browser settings or as described in our Cookie Policy.
• Data export: request a copy of your data in a portable format.

To exercise any of these rights, please contact us at privacy@thequestapp.co. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

8. Cookies and Tracking

We use cookies and similar tracking technologies to operate our website, analyze usage, and improve your experience. Cookies are small text files stored on your device that help us recognize you and remember your preferences.

For detailed information about the types of cookies we use, how we use them, and how you can control your cookie preferences, please see our Cookie Policy.

9. Security

We implement reasonable technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Private messages between users are encrypted in transit and at rest to protect their confidentiality.

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security. For more information, please see our Security Statement.

10. Children

Quest is not intended for anyone under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from a minor, we will take steps to delete that information promptly. If you believe that a minor has provided us with personal data, please contact us at privacy@thequestapp.co.

11. International Data Transfers

Quest is operated from the United States. If you are accessing our services from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated. By using Quest, you consent to the transfer of your information to the United States and acknowledge that data protection laws in the United States may differ from those in your country of residence.

12. Consumer Health Data

Certain jurisdictions, including Washington and Nevada, have enacted consumer health data privacy laws that may broadly define “consumer health data.” We do not ask about health conditions; we do ask about exercise habits. Dating preferences and gender identity may also fall within these broad definitions.

We use these details to personalize and improve Rumi and the dating and matchmaking experience. We do not use them for advertising or marketing, and we do not sell consumer health data. If you are a resident of a jurisdiction with consumer health data protections, you may exercise your privacy rights by contacting us at privacy@thequestapp.co.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the “Last updated” date at the top of this page. If we make material changes, we will notify you by email or through a prominent notice within the app prior to the changes becoming effective.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Privacy inquiries: privacy@thequestapp.co
• General support: support@thequestapp.co

Quest App, Inc.
A Delaware corporation