Privacy Policy

Last updated: July 29, 2026

This page is maintained by the LQuest team to explain, in plain language, how the LQuest reading app handles family data. It describes our own practices — it is not an independent audit or certification.

Who this is for

LQuest is a reading game for young children. Accounts are created and managed by a parent or guardian. We do not knowingly allow children to register on their own.

Children's privacy (COPPA & GDPR-K)

LQuest is designed for children under 13, so a parent or guardian must create the account and give consent before a child plays. The account holder is the one who provides an email address; the child only enters a first name or nickname and picks an animal avatar.

We collect only what is needed to run the learning experience. We do not require a child's real name, birthdate, photo, address, or phone number, and we ask parents not to enter any of these in free-text fields such as the display name.

Parents can review, export, or delete their child's information at any time — see "Your rights and choices" below. Consent can be withdrawn by deleting the account.

What we collect

Parent email address and password (handled by our authentication provider).
Learning progress: stars, letters practiced, stickers, streaks, and time in app.
An optional display name and animal avatar for the leaderboard.
Parent-chosen settings such as prize wheel rewards and study plan preferences.
Basic technical logs needed to keep the service running.

We use this information only to deliver the lessons, save progress across devices, show the leaderboard, produce parent reports, and keep the service secure and working.

Microphone and voice

Read Aloud activities record short audio clips only while your child taps and holds the record button. Audio is sent to our speech provider to score the word, then discarded. We never store voice recordings, and we never use them for advertising or model training.

Advertising and tracking

LQuest contains no third-party ad networks, no advertising SDKs, no ad identifiers, and no cross-app or cross-site tracking. The only promotional content in the app is our own "Unlock Premium" cards, which link to our in-app purchase screen. We do not sell or share personal information, and we do not build behavioral profiles of children.

Cookies and analytics

The web app uses local storage and a sign-in cookie so your child stays logged in and keeps their progress offline. We do not use advertising cookies or third-party analytics trackers that follow visitors across other sites.

Service providers we use

We share the minimum data needed with a small set of providers:

Lovable Cloud (Supabase) — account sign-in, database, and progress sync.
ElevenLabs — generates the spoken letter and word audio; short Read Aloud clips are sent for scoring and are not retained by us.
Stripe — processes subscription payments on lquest.app. We never see or store your card details.

These providers act on our instructions and are not permitted to use family data for their own advertising.

Where data lives

Progress is stored locally on the device and, when signed in, synced to our secure cloud database so your child keeps their stars across devices. Access is restricted per account. Data is transmitted over encrypted HTTPS connections and stored on managed cloud infrastructure that may be located outside your country.

How long we keep it

Account and progress data is kept for as long as the account is active. If an account is inactive for 24 months we may delete it after emailing the parent. When you delete your account, progress records are removed immediately; routine backups and security logs age out within 30 days.

Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your family's information, to object to or restrict certain processing, and to withdraw consent. Parents of children under 13 can always review what we have collected and ask us to delete it or stop collecting more.

Use Account settings for instant deletion, or email us for any other request. We will not discriminate against you for exercising these rights.

Deleting your data

You can permanently delete your account and all associated progress at any time from Account settings. Deletion is immediate and cannot be undone.

Security

Accounts are protected by our authentication provider, and database access rules limit each account to its own records. No system is perfect, so if we ever discover a breach affecting your family's data we will notify affected parents by email.

Changes to this policy

If we make a material change — especially one affecting children's data — we will update the date above and notify parents by email or an in-app notice before it takes effect.

Contact

Questions, privacy requests, or security reports: support@lquest.app. We aim to respond within 30 days.