Privacy Policy
Last Updated: July 13, 2026
This Privacy Policy explains how Questline ("Questline," "we," "us," or "our") collects, uses, discloses, stores, and protects your information when you use our website, application, and related services (collectively, the "Service").
By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
Account Information
When you create an account, we collect information such as your name, email address, and authentication credentials. Passwords are securely managed through our authentication provider and are never stored by us in plain text.
Profile and User Content
We collect information you voluntarily provide through the Service, including:
- Profile information
- Personal goals
- "About You" responses
- Tasks and quests
- Journal-style brain dumps
- Notes
- Other content you submit while using Questline ("User Content")
Usage and Progress Information
We collect information relating to your use of the Service, including:
- Experience points (XP)
- Levels
- Achievements
- Streaks
- Completed tasks
- Subscription status
- Trial status
- General usage activity
Payment Information
If you purchase a subscription, payment information is processed securely by Stripe.
We do not collect or store your complete payment card information.
Technical Information
We may automatically collect certain technical information, including:
- IP address
- Browser type
- Device information
- Operating system
- Log information
- Usage patterns
- Diagnostic information
This information helps us maintain, secure, and improve the Service.
2. How We Use Your Information
We use your information to:
- Provide, operate, and maintain the Service
- Generate AI-powered responses through Sage
- Process subscriptions and payments
- Authenticate users
- Deliver transactional emails such as account verification, password resets, billing notices, and security notifications
- Improve the performance, reliability, and functionality of the Service
- Detect, investigate, and prevent fraud, abuse, and security incidents
- Respond to customer support requests
- Comply with legal obligations
- Enforce our Terms and Conditions
We do not sell your personal information.
3. AI Processing (Sage)
Questline includes an AI-powered assistant known as Sage.
When you interact with Sage, the information you provide, including goals, tasks, brain dumps, profile information, and other User Content, may be transmitted to one or more third-party AI providers to generate responses.
This processing is necessary for Sage to provide AI-powered functionality.
We do not intentionally provide your content to third-party AI providers for the purpose of training their general-purpose AI models beyond what is permitted under the applicable API or enterprise terms governing the services we use.
We may change or replace the AI providers powering Sage from time to time.
4. Information We Share
We do not sell your personal information.
We share information only as necessary to operate the Service.
| Recipient | Purpose |
|---|---|
| Supabase | Database hosting, authentication, and backend infrastructure |
| Stripe | Payment processing and subscription billing |
| Third-party AI providers | AI processing for Sage |
| Mailgun | Transactional email delivery |
| Google Workspace | Business email infrastructure |
We may also disclose information:
- when required by applicable law or legal process;
- to protect the rights, safety, or security of Questline, our users, or others;
- to investigate fraud, abuse, or security incidents;
- with your consent or at your direction.
We select service providers that are expected to maintain appropriate security and confidentiality measures and use your information only as necessary to provide services on our behalf.
5. Business Transfers
If Questline is involved in a merger, acquisition, financing, sale of assets, bankruptcy, or another business transaction, your information may be transferred as part of that transaction, subject to applicable law.
6. Legal Basis for Processing (EEA/UK)
Where the General Data Protection Regulation (GDPR) or similar laws apply, we process personal information based on one or more of the following legal bases:
- Performance of a contract with you
- Your consent
- Compliance with legal obligations
- Our legitimate interests in operating, improving, maintaining, and securing the Service
7. Data Retention
We retain your information for as long as your account remains active or as necessary to provide the Service.
If you delete your account, we will delete or anonymize your personal information within a reasonable period unless we are required or permitted to retain certain information for legal, tax, accounting, billing, fraud prevention, dispute resolution, or security purposes.
8. Your Rights
Depending on your location, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate information
- Request deletion of your information
- Restrict or object to certain processing
- Request a portable copy of your information
- Withdraw consent where processing is based on consent
EU, EEA and UK Residents
If GDPR applies to you, you also have the right to lodge a complaint with your local data protection authority.
California Residents
If the California Consumer Privacy Act (CCPA) or California Consumer Privacy Rights Act (CPRA) applies to you, you may have rights including:
- The right to know what personal information we collect
- The right to request deletion of personal information
- The right to correct inaccurate information
- The right to receive your information in a portable format
- The right not to be discriminated against for exercising your privacy rights
We do not sell or share personal information for cross-context behavioral advertising.
To exercise any of these rights, contact us at support@questline.one.
You may also delete your account through your account settings. Certain information may be retained where required or permitted by law.
9. Data Security
We implement reasonable technical and organizational measures designed to protect your information from unauthorized access, disclosure, alteration, or destruction.
However, no method of transmitting or storing information over the internet is completely secure, and we cannot guarantee absolute security.
10. International Data Transfers
Your information may be processed or stored in countries other than your own, including the United States, where our infrastructure providers operate.
Where required by applicable law, we rely on appropriate safeguards, including Standard Contractual Clauses or similar approved transfer mechanisms, for international transfers of personal information.
11. Children's Privacy
The Service is intended for users who are at least 18 years old.
If you are under the age of majority in your jurisdiction, you may only use the Service with the permission and supervision of a parent or legal guardian, as described in our Terms and Conditions.
We do not knowingly collect personal information from children under the age of 13 (or the applicable minimum age required by local law). If you believe a child has provided us with personal information, please contact us and we will promptly delete it.
12. Cookies and Similar Technologies
We may use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Maintain the security of the Service
- Improve functionality and performance
- Understand how the Service is used
You can control cookies through your browser settings. Disabling cookies may affect certain functionality of the Service.
Our Service does not currently respond to browser "Do Not Track" signals.
13. Email Communications
We may send transactional emails that are necessary to operate the Service, including:
- Account verification
- Password resets
- Billing notifications
- Security alerts
- Important service announcements
If we send optional marketing emails in the future, you will have the ability to unsubscribe. You cannot opt out of transactional emails that are necessary to provide the Service.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
If we make changes, we will update the "Last Updated" date at the top of this page.
If material changes are made, we may provide additional notice through the Service or by email where appropriate.
Your continued use of the Service after changes become effective constitutes acceptance of the revised Privacy Policy.
15. Contact Us
If you have any questions about this Privacy Policy or our privacy practices, please contact us:
Email: support@questline.one