Privacy Policy

Introduction

At ClueQuest ("we," "our," or "us"), we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, share, and safeguard information when you use our interactive adventure platform (the "Service").

Please read this Privacy Policy carefully. By using ClueQuest, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our Service.

1. Information We Collect

1.1 Information You Provide

We collect information that you voluntarily provide when you:

• Create an account (name, email address, password)
• Create or participate in adventures (location data, responses, team information)
• Contact us for support (correspondence, feedback)
• Subscribe to our newsletter or marketing communications
• Complete surveys or provide feedback

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type, IP address
• Usage Data: Pages visited, features used, time spent, clickstream data
• Location Data: GPS coordinates when you scan QR codes or participate in location-based activities (with your permission)
• Cookies and Tracking: We use cookies and similar technologies to track activity and improve our Service

1.3 AI-Generated Content

When you use our AI features to generate avatars or story content, we may process the inputs you provide and the outputs generated. This data is used solely to provide the service and improve our AI models.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our Service
• Create and manage your account
• Process your adventure participation and track progress
• Generate AI-powered content (stories, avatars, challenges)
• Verify QR code scans and prevent fraud
• Send you technical notices, updates, and security alerts
• Respond to your comments, questions, and support requests
• Send marketing communications (with your consent)
• Monitor and analyze usage trends and preferences
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

3. How We Share Your Information

We may share your information in the following circumstances:

3.1 With Other Users

When you participate in team-based adventures, your username, avatar, and game progress may be visible to other participants in the same adventure or team.

3.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

• Cloud hosting and infrastructure (Vercel, Supabase)
• AI services (OpenAI for content generation, Runware for avatar generation)
• Email delivery services (Resend)
• Analytics providers (Google Analytics, Vercel Analytics)
• Payment processors (if applicable)

3.3 Legal Requirements

We may disclose your information if required by law or in response to:

• Valid legal processes (subpoenas, court orders)
• Requests from law enforcement or government agencies
• Protection of our rights, property, or safety
• Prevention of fraud or security threats

3.4 Business Transfers

If ClueQuest is involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your personal information becomes subject to a different privacy policy.

4. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security audits and updates
• Employee training on data protection
• Incident response procedures

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

5. Your Rights (GDPR & Data Protection)

Depending on your location, you may have the following rights regarding your personal data:

5.1 Access & Portability

You have the right to request a copy of your personal information and receive it in a structured, commonly used, and machine-readable format.

5.2 Correction

You can update your account information at any time through your account settings. You may also request that we correct inaccurate or incomplete data.

5.3 Deletion

You can request that we delete your personal information. We will comply unless we have a legal reason to retain it (e.g., compliance with legal obligations, fraud prevention).

5.4 Restriction & Objection

You can request that we restrict processing of your personal data or object to certain types of processing, such as direct marketing.

5.5 Withdraw Consent

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time.

5.6 Exercising Your Rights

To exercise any of these rights, please contact us at privacy@cluequest.app. We will respond to your request within 30 days.

6. Data Retention

We retain your personal information for as long as necessary to provide our Service and fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Account Data: Retained until you delete your account, then deleted within 90 days
• Adventure Data: Retained for active adventures and for up to 2 years after completion
• Analytics Data: Aggregated and anonymized data may be retained indefinitely
• Legal Obligations: We may retain certain data as required by law (e.g., financial records, dispute resolution)

7. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@cluequest.app, and we will delete such information.

For educational use involving minors, we require that a parent, guardian, or teacher provide consent and supervise participation.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.

When we transfer personal data from the European Economic Area (EEA) to countries outside the EEA, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by the European Commission

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

Types of cookies we use:

• Essential Cookies: Required for the Service to function (authentication, security)
• Analytics Cookies: Help us understand how users interact with our Service
• Preference Cookies: Remember your settings and preferences

10. Third-Party Links

Our Service may contain links to third-party websites and services. We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before providing any personal information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page with an updated "Last Updated" date
• Sending you an email notification (for significant changes)
• Displaying a prominent notice on our Service

Your continued use of the Service after any changes constitutes your acceptance of the new Privacy Policy.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to request deletion of your personal information
• The right to opt-out of the sale of your personal information (we do not sell data)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us at privacy@cluequest.app with "California Privacy Rights" in the subject line.