Privacy Policy

Legacy Quest is operated by Digital Skyline Co.. In this policy, “we” and “Legacy Quest” mean Digital Skyline Co., and “you” means the person using the app.

For privacy questions, data exports or deletion requests, contact us at support@legacyquest.quest.

Account information. Your email address, display name, and password. Passwords are handled by our authentication provider and stored as a hash — we never see or store your actual password. You may optionally add a profile photo, date of birth, and a personal quote.

Household information. The name of your household, who belongs to it, each person's role (adult or child), and which adults are Household Guardians. Households may also contain “managed members” — profiles for family members who do not have their own login, created by someone who does. A managed member's profile may include a name, photo, relationship, and date of birth, entered by the adult who created it.

Content you create. Everything you put into the app: chat messages, journal entries, mood boards, photos, videos, voice notes, documents, family-tree relationships, calendar events and their guest lists, goals, chores, and notes.

Family Vault content. If you are a Household Guardian, the vault may hold records about wealth, family businesses, wills, trusts, estate planning, important documents, emergency information, and stored passwords.

Notifications. When calendar events are shared with you, changed or canceled, we create notification records addressed to you so the app can tell you about them. They contain the event summary, not your other content.

Diagnostics and usage. We record which features are opened, which screens are slow, and what errors occur — as event names, error types, screen paths, app version, browser user-agent string, and timings.

Usage events deliberately do not include the content of anything you write, photograph or store. Error messages are truncated to a single line before being recorded, specifically so that a message cannot carry your data into our diagnostics.

Things you send us. Bug reports (including any screenshot you choose to attach), app feedback ratings and comments, and support requests. A screenshot you attach may contain whatever was on your screen — that is your choice at the moment you attach it.

• To provide the app: showing your family their content and keeping it separated from every other family.
• To operate and improve the product: understanding which features are used, finding errors, and fixing them.
• To support you: answering the requests and bug reports you send us.
• To keep accounts secure: detecting problems and responding to abuse.
• To handle billing, if and when paid subscriptions are enabled.

We do not sell your information. We do not use your family's content to build advertising profiles, and we do not serve third-party advertising in the app.

Your household. By design, the core of Legacy Quest is shared: everyone in a household sees the same chat, photos, family tree, calendar, goals, chores, academy and timeline. Some features let you choose a narrower audience per item — journal entries respect the visibility you pick when you write them, and a calendar event can be private to you, shared with your household, shared with specific people you select, or shared with an extended-family circle.

Household Guardians only. The Family Vault, household billing and household security settings are restricted to Household Guardians. Other adults and children in the household cannot see them.

Extended family. Legacy Quest has an “Entire Family” layer for relatives outside your household. Nothing reaches it automatically — content appears there only when someone in your household explicitly shares it, and sharing one item (for example, a calendar event) exposes that item only, never the rest of your household's space.

Us. Our staff do not have a routine way to read your family's chats, journals, photos, documents or vault. Access for support requires a support session that a Household Guardian has to approve; it is limited in scope, expires automatically, and every use is recorded in an audit log.

This is enforced by database row-level security rather than by our own good behaviour. Administrative accounts have no policy granting them access to household content, so there is no “look anyway” path to disable. Approved support sessions can only surface operational context — who is in the household, its settings, which screens were used, and its subscription — never anything a family wrote or uploaded.

Legacy Quest runs on Supabase, which provides our database, file storage and authentication, hosted on their infrastructure. Photos, videos, voice notes and documents are kept in private storage and served through short-lived signed links rather than public URLs. Connections to the app are encrypted in transit.

Passwords you save in the Family Vault's password section are encrypted before storage using a key held per household, and can only be revealed through a check that re-verifies your household password and writes an access record.

Being precise, because this matters: vault password encryption is applied by our application, and the encryption key is stored in our database. That protects against casual exposure of the stored values, but it is not end-to-end encryption, and it would not protect against someone with full administrative access to the database itself. Nothing in Legacy Quest is zero-knowledge today. Please do not describe it as such.

No online service can promise perfect security, and we do not. We hold no security certifications and do not claim compliance with any certification or standard (such as SOC 2, HIPAA, or “bank-level security”) in this document.

We share information with a small number of providers that operate parts of the service on our behalf:

• Supabase — database, file storage, authentication and transactional email (such as confirmation and password-reset messages).
• Vercel — application hosting and delivery.
• If and when paid subscriptions are enabled, a payment processor and/or the app store you purchase through will process your payment details. We do not receive or store full card numbers ourselves.

We do not use third-party advertising or analytics services. Usage analytics are recorded in our own database, described in section 2.

Legacy Quest is built for families and expects children to take part:

• You must be 18 or older to independently create a Legacy Quest account or to create and manage a household.
• Family members aged 13–17 may participate only with the authorization and supervision of a parent or legal guardian in their household.
• Children under 13 may not independently create an account.

Today, a child participates in Legacy Quest through a managed profile: an adult in the household creates it, the child has no login of their own, and any information in that profile (such as a name, photo or date of birth) is provided by the parent or guardian who manages it. Parents and guardians can edit or remove a managed profile at any time, and can contact us at support@legacyquest.quest to exercise privacy rights on a child's behalf.

Household Guardians can see the household content connected to a child, because that is what a shared family space means. Children's profiles cannot reach the Family Vault, household billing or household security.

Where Legacy Quest would knowingly collect personal information directly from a child under 13, we will not do so until an appropriate verifiable parental-consent process has been completed, where required by applicable law (including COPPA in the United States).

Legacy Quest does not currently offer independent accounts or logins for children under 13: self-service signup creates adult accounts only, and children appear in the app as profiles managed entirely by their parent or guardian. This policy does not claim compliance with any particular certification.

We keep your information while your account exists. You can delete your account from Settings → Account, or by emailing support@legacyquest.quest from your account email address.

When you request deletion, the deletion process begins immediately: your account is removed from the app and you are signed out. Copies of deleted data may persist in backups and residual systems for up to 30 days before being permanently deleted or anonymized. Deletion cannot be undone from within the app — once processed, your account cannot be recovered, so export anything you want to keep first.

Shared family content is different from your personal account data. Content you intentionally contributed to shared spaces — household chat, shared albums, the family tree, shared calendar events, Entire Family circles — is part of your family's shared record. Deleting your account removes your account, your login, and data held only for you; it does not automatically destroy everything you ever shared with your family. Depending on the content type, shared items may remain available to the household with the link to your account removed. Deleting an entire household — a separate, more consequential action available to household parents — removes the household and its content.

Some information may be retained beyond the 30-day window where necessary for:

• legal obligations we are subject to
• fraud prevention and the security of the service
• financial and accounting requirements
• resolving disputes
• other legitimate requirements under applicable law

Some records intentionally outlive an account because they are not personal content: product feedback and administrative audit entries are retained so the audit trail stays intact, with the account link removed.

• Export your data. Settings → Backup & Data downloads your family’s content as JSON.
• Delete your account (Settings → Account), or delete your household — a separate, more consequential action.
• Control notifications. Settings → Notifications governs the alerts you receive in the app.
• Choose journal visibility when you write an entry, and choose each calendar event’s audience when you create it.
• Decide what reaches extended family — nothing is shared outside your household unless someone shares it.

Depending on where you live you may have additional rights, such as access, correction, deletion, or objecting to certain processing. To exercise them — for yourself or on behalf of a child you are the parent or legal guardian of — contact us at support@legacyquest.quest. We will respond as required by applicable law.

If we change this policy in a way that materially affects you, we will update the version and date at the top and let you know in the app. Continuing to use Legacy Quest after a change means you accept the updated policy.

Privacy questions: support@legacyquest.quest. General support: support@legacyquest.quest.