Draft for legal review. Last updated: October 27, 2026. Replace the bracketed details before publishing, and have a qualified lawyer review this for every country where QuestWell is offered.
In short
- Everything you write and every rating you give stay on your phone, encrypted.
- No accounts and no ads. QuestWell sends anonymous usage counts, like app opens, to Google Analytics for Firebase. Never what you write or how you feel. You can turn this off in Settings.
- Purchases go through Google Play. We never see your payment details.
- We never see, sell or share your entries.
- You can export everything or delete everything at any time, from Settings.
Who we are
QuestWell is made by MHQ Softech, [postal address]. For questions about privacy, use our contact page: https://questwell.netlify.app/contact/. In this policy, "we" means the developer of QuestWell, and "you" means the person using the app.
What QuestWell keeps on your phone
QuestWell stores these things only on your device, in an encrypted database:
- Check-ins: mood and energy ratings, feeling words, optional tags for what was part of your day (such as movement or time with people), and an optional short note.
- Sleep you choose to log: hours and how restful it was.
- Steady use: which hard-moment tool you opened and whether things eased afterwards. Never any words.
- Ladders you build: the goal, the steps and how hard they looked, and each practice with its anxiety ratings and optional note.
- Quest answers, including mood before and after each quest.
- Side quests you plan, with optional dates and reminder choices.
- Season Review self-check answers (PHQ-9 and GAD-7) and their totals.
- Your safety plan.
- Your progress: skill levels, Embers, camp items and restored valley pieces.
- Settings, including when you confirmed you are 18 or older, when you gave consent, your chosen values, what brought you to QuestWell, your reminder time, app lock choices and your crisis-line country.
- A record that a safety moment happened, with its time and where it came from (for example, a check-in). The words that raised it are never stored.
To show crisis lines for your country, QuestWell reads your phone's time zone and region setting on the device. It never uses your location, and this never leaves your phone.
How it is protected. The database is encrypted with SQLite3MultipleCiphers. The encryption key is created on your phone and kept in the Android Keystore. Android cloud backup and device-to-device transfer are turned off for QuestWell, so your entries are not copied to any backup service. Private screens block screenshots and the recent-apps preview. You can add an app lock that uses your fingerprint, face or screen lock.
What leaves your phone
Your entries never do. Check-ins, notes, quest answers, sleep, day tags, self-check answers, your safety plan, ladders and everything else listed above stay on your phone. There is no sign-in, no cloud sync, no crash reporting, no advertising and no remote configuration. Because your entries never reach us, we cannot read them, recover them, or hand them to anyone, including in response to a request from a third party.
Anonymous usage counts. To learn how QuestWell is used and to improve it, the app uses Google Analytics for Firebase. It is on by default, and you can turn it off at any time in Settings > Share anonymous usage stats.
- What is sent: that the app was opened, and a few events, each with no content: setup finished, a quest finished (only whether it was a daily or a story quest), a check-in saved (with nothing from it), the upgrade page viewed (only where it was opened from), and a purchase started, completed or restored. Firebase also records basic details automatically: a random app instance ID, device model, Android version, app version, language, an approximate country or region, and which Google Play page or link led to the install. Google Analytics does not log or store IP addresses.
- What is never sent: moods, feelings, notes, quest names or answers, sleep, day tags, self-check answers or results, your safety plan, or any use of Steady, the Lighthouse or crisis lines. No advertising ID, no Android ID, and nothing for ads or ad personalization.
- Google processes this data for us as a service provider, under its own terms. We keep it for [2 months, the shortest Google Analytics setting].
- Turning it off stops collection and resets the app instance ID. Delete everything also resets it.
Purchases
QuestWell offers a free week, then an optional one-time lifetime unlock through Google Play. Google handles the payment and its own privacy policy applies to it. QuestWell only learns whether you own the unlock, so it can open the app on this phone and restore it after a reinstall. We never see your card or payment details.
Sharing and selling
We do not sell, rent, share or trade your information, and we never will. Google Analytics for Firebase and Google Play work for us as service providers, as described above. Your entries only leave your phone if you choose to send them:
- Export my data writes one file with your entries and opens your phone's share sheet. You choose where it goes. The temporary copy is deleted afterward.
- Share this note in the Thank-You Note quest lets you send your own words through the share sheet.
What happens after you share is up to you and the service you choose.
Crisis lines and links
Lighthouse buttons open your phone's dialer, messages app or web browser with a crisis line or a helpline directory. QuestWell does not see or record those calls, messages or pages. The services you contact have their own privacy practices.
Reminders
Setup suggests a daily check-in reminder at 8 PM, which you can change or turn off there or later in Settings. Reminders are created by your phone itself, never mention missed days, and side-quest reminders do not show what you planned. QuestWell asks for notification permission at that step of setup, or when you choose a reminder time later.
Your choices and rights
You are in control of your information at all times:
- See it. Everything is visible in the app.
- Take it with you. Settings > Export my data gives you a complete copy in JSON, a common format.
- Correct it. Edit your safety plan and settings at any time.
- Delete it. Settings > Delete everything removes every entry and the encryption key, after two confirmations. Uninstalling QuestWell also removes everything.
- Withdraw consent. Deleting everything withdraws your consent to QuestWell storing your wellbeing entries. You can stop using the app at any time.
Because we hold no copy of your information, we cannot act on it for you. Every right above is carried out directly on your phone, by you, at any time.
Consent
During setup, QuestWell asks you to confirm you are 18 or older and to agree, with a checkbox you tick yourself, to QuestWell storing your wellbeing entries on your phone. The time of each confirmation is saved on your phone. QuestWell does not continue without this consent.
Setup also tells you about the anonymous usage counts and where to turn them off.
Age
QuestWell is made for adults aged 18 and over. It is not directed at children, and people under 18 cannot finish setup.
Laws in specific places
QuestWell is offered to people in many countries. Privacy and health-data laws differ, and some of them give you rights that apply even though we hold no copy of your data.
United States
- Washington My Health My Data Act. QuestWell handles what this law calls consumer health data, but only on your device. We do not collect, share or sell it, and we do not use geofencing. Our anonymous usage counts are designed to leave out health information: they never include moods, notes, answers, sleep, self-checks or any safety use. [Legal review: confirm that app-usage counts from a wellbeing app fall outside consumer health data, or ask for consent before collecting them in Washington.] We still ask for your explicit consent before storing anything, and you can withdraw it and delete all of it at any time. This policy is our consumer health data privacy policy.
- Other state health-data and privacy laws, including those in Nevada, Connecticut and California. We do not sell or share personal or consumer health data, and we do not use any data for targeted advertising or profiling. You can opt out of the anonymous usage counts at any time in Settings.
- FTC Health Breach Notification Rule. If we ever discover a breach of security involving identifiable health information that QuestWell is responsible for, we will notify affected people, the Federal Trade Commission and, where the Rule requires, the media. We will do this without unreasonable delay and within the time the Rule allows, no later than 60 calendar days after discovery. Because we hold no copies of your information, the most likely cause would be a flaw in the app itself. In that case we would also announce it in an app update and on the store listing, with steps you can take.
European Union, European Economic Area and United Kingdom
Under the GDPR and the UK GDPR, information about your wellbeing is health data, a special category of personal data. QuestWell processes it only on your device, under your control, and does not send it to us. If a supervisory authority regards this on-device processing as processing by us, our legal basis is your explicit consent (Article 9(2)(a), with Article 6(1)(a)), which you can withdraw at any time. You have the rights of access, rectification, erasure, restriction, portability and objection, all of which you can exercise in the app as described above. You also have the right to complain to your data protection authority. Your entries are never transferred outside your device. The anonymous usage counts are processed by Google, which may involve transfers outside your country under Google's standard contractual clauses. [Legal review: analytics on a device usually needs consent first in the EU, EEA and UK. Before launching there, either ask for consent in setup or confirm another legal basis.]
Other countries
We aim to meet the requirements of, among others:
- Canada: PIPEDA and provincial laws, including Quebec's Law 25.
- Australia: the Privacy Act 1988 and the Australian Privacy Principles.
- New Zealand: the Privacy Act 2020.
- India: the Digital Personal Data Protection Act 2023.
- Brazil: the LGPD.
- Singapore: the PDPA.
- Japan: the APPI.
- South Korea: the PIPA.
- South Africa: POPIA.
In each case, the same facts apply. Your entries stay on your device, they are kept only with your consent for the purpose of running the app, they are never shared or sold, and you can access, export, correct and delete them at any time. Anonymous usage counts work as described above, and you can turn them off in Settings.
Suggestions inside the app
QuestWell suggests quests using simple rules that run on your phone, for example "low energy means shorter quests". These suggestions have no legal or similar effects on you and are never sent anywhere.
How long information is kept
Your entries stay until you delete them, delete everything, or uninstall the app. QuestWell does not keep copies anywhere else. Anonymous usage counts are kept by Google Analytics for the period stated above.
Changes to this policy
If this policy changes, we will update the date at the top and describe the change in the app's release notes. If a change would affect how your information is handled, we will tell you in the app first. If we ever want to collect anything beyond what this policy describes, we will ask you first.
Contact
MHQ Softech [Postal address] Contact page: https://questwell.netlify.app/contact/
If you are in the EU or UK and we appoint a representative there, their details will appear here: [representative details].