← Back to App

Privacy Policy

Last updated: April 15, 2026

Overview

Stretch Quest ("we", "our", "the app") is a gamified stretching application designed for children and families. We take privacy seriously, especially when it comes to children. This policy explains what data we collect, how we use it, and your rights.

Children's Privacy (COPPA Compliance)

Stretch Quest is designed to be used by children under the supervision of a parent or guardian. We comply with the Children's Online Privacy Protection Act (COPPA):

  • We do not collect personal information directly from children under 13.
  • All accounts are created by a parent or guardian who provides their own email address.
  • Child profiles contain only a first name (chosen by the parent) and game progress data.
  • We do not use children's data for advertising or marketing purposes.
  • Parents may review, modify, or delete their child's data at any time.

Data We Collect

Free Tier (No Account)

The free version stores all data locally on your device using browser storage (localStorage). We collect zero data from free users. No analytics, no tracking, no cookies. Everything stays on your device.

Family Tier (With Account)

When you create an account for paid features, we collect:

  • Parent email address — for account authentication and communication
  • Child first names — for profile display (chosen by the parent)
  • Game progress — exercise completion, levels, streaks, and achievements
  • Payment information — processed securely by Stripe (we never see your card number)

How We Use Data

  • To provide the Family features: cloud sync, leaderboards, parent dashboard
  • To process subscription payments via Stripe
  • To send important account-related emails (no marketing without consent)
  • To improve the app experience through aggregated, anonymized usage data

Data Storage & Security

Account data is stored in Supabase (hosted on AWS) with encryption at rest and in transit. All connections use HTTPS/TLS. We follow security best practices including row-level security policies that ensure users can only access their own data.

Third-Party Services

  • Supabase — database and authentication
  • Stripe — payment processing
  • Vercel — application hosting and analytics

We do not sell, share, or provide personal data to any other third parties.

Your Rights

You have the right to:

  • Access your data through the parent dashboard
  • Modify child profiles and game progress
  • Delete your account and all associated data
  • Export your data (printable star charts and sticker books are built-in)
  • Opt out of any non-essential data collection

Data Retention

We retain account data for as long as your account is active. If you cancel your subscription, your data is kept for 90 days in case you resubscribe, then permanently deleted. You can request immediate deletion at any time.

Contact

For privacy questions, data deletion requests, or concerns, contact us at: privacy@playstretchquest.com