Privacy Policy

Last updated: April 1, 2026

SparkQuest ("the App") is developed by dio-dev ("we", "us", "our"). This Privacy Policy explains how we collect, use, and protect your information when you use the App.

1. Information We Collect

Account Information: When you sign in using Google or Apple, we receive your name, email address, and profile picture from the authentication provider. We do not receive or store your password.

Game Data: We store your game progress including XP, level, streak, completed missions, unlocked rewards, preferences, and city selection.

Location Data: When you use the geo check-in feature, we access your device's location to verify proximity to mission locations. Location data is used only at the moment of check-in and is stored only as part of completed mission records (city name and coordinates). We do not track your location in the background.

Device Information: We may collect basic device information (operating system, app version) for debugging and improving the App.

2. How We Use Your Information

• To provide and maintain the App's functionality
• To save and sync your game progress across devices
• To display city-based leaderboards
• To verify geo check-in locations for bonus rewards
• To display your profile name on leaderboards

3. Data Storage and Security

Your data is stored securely using Supabase, a cloud platform with encryption at rest and in transit. Authentication is handled via industry-standard OAuth 2.0 (PKCE flow). We use Row Level Security (RLS) to ensure you can only access your own data.

4. Data Sharing

We do not sell, rent, or share your personal information with third parties. The only publicly visible data is your display name and XP score on city leaderboards. Your email, location history, and other personal data are never shared.

5. Third-Party Services

The App uses the following third-party services:

• Google Sign-In — for authentication (Google Privacy Policy)
• Apple Sign-In — for authentication (Apple Privacy Policy)
• Supabase — for data storage and authentication (Supabase Privacy Policy)

6. Data Retention

Your data is retained as long as your account exists. You can delete your account and all associated data at any time by contacting us. Upon account deletion, all your data is permanently removed from our servers.

7. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

8. Your Rights

You have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent for location access at any time via device settings

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the App. Your continued use of the App after changes constitutes acceptance.