Privacy Policy

The short version

Questkins is a family learning app operated for parents. Parents create every account — including their children's — and can see and delete everything at any time. We collect only what the app needs to work, we don't sell data, and we don't show ads.

What we collect

• Parent account: name, email address, and password (stored hashed).
• Child profiles: a first name or nickname, age, and a username chosen by the parent. Children do not provide an email address. Names, ages, and dates of birth are encrypted — see below.
• Learning activity: word/math/reading/chore progress, answers submitted for grading, points, and redemptions.
• Interests: up to three topics (like "dinosaurs" or "soccer") chosen from a fixed list we provide, used only to theme practice content. They are preferences, not identity, and are stored as-is.
• Billing: handled entirely by Stripe; we never see or store card numbers.

How we protect your children's names and ages 🔒

Each child's name, age, and date of birth are encrypted in our database. They are stored as ciphertext, which means anyone reading the database directly — from a backup, a replica, an exported copy, or a stolen one — sees nothing readable at all.

Inside the app, those details are shown only to signed-in members of your own family. Questkins staff and administrators see your children as a reference number, never a name or an age. Our internal screens, usage reports, and alert emails are all built to reference children by id alone, so there is nowhere for an administrator to look them up.

We would rather be precise than reassuring, so two limits are worth stating plainly:

• Questkins operates the servers and therefore holds the encryption keys. The technical ability to decrypt exists on our side — our commitment is that we do not, and the application is deliberately built with no screen that would show it. If you need protection that does not depend on our conduct, Questkins is not the right choice for you.
• A child's username is not encrypted, because it is the identifier they log in with. Please choose a nickname rather than a full real name.

Learning activity — words practised, scores, points, reading progress — is not encrypted, because the app has to compute over it. On its own it identifies no one.

AI grading

Answers a child submits (spellings, definitions, sentences, math answers) may be sent to Anthropic's Claude API to be graded. These requests contain the answer text and the child's age band — never names, usernames, or contact information.

Children's privacy (COPPA)

Child accounts can only be created by a parent, inside the parent's own account — this is how we obtain verifiable parental consent. Parents can review their child's data on the child's profile page and can delete a child (or their whole family account) at any time, which permanently removes the child's data.

Deleting your data

Deleting your account from the Settings page permanently removes your account, all child accounts, and all associated learning data. This works the same in the iOS and Android apps.

Contact

Questions? Email support@questkins.com.