Quest Claim
Privacy Policy
1. Who we are
Quest Claim is run by Quest Claim LLC, 712 Park Street, Clinton, MO 64735 ("Quest Claim", "we", "us"). Contact for privacy questions and requests: questclaimapp@gmail.com. Effective date: [to be confirmed].
2. What we collect
• Account: your email address and password (handled by Supabase Auth; we never see your password).
• Age: only your age bracket (18+) and the Terms version you accepted. Your date of birth is used once on your device and never stored or sent.
• Country (jackpot hunt): the country you declare once, before your first dig on the worldwide jackpot hunt. It is used only to decide whether that hunt can accept your dig. You cannot change it yourself; contact us to correct a mistake. A log of declarations and corrections (country code and date) is kept for fraud prevention.
• Location (only if you allow it): Quest Claim asks for your approximate location while the app is in use, never in the background. Play is remote, so the game itself never uses your location: the map never centers on you, shows no "you are here" dot, and opens on a default region (the United States, a world view for the jackpot hunt, or during testing a fixed test area). Your location is used only to:
– show prizes in your local currency, using a point rounded to about 11 km (0.1°);
– pick the currency for a prize payout, using the approximate reading itself (not rounded further);
– choose miles or kilometers once when you sign up (only your choice of unit is saved);
– pick nearby sponsor messages when the app opens, using your last known location rounded to about 1 km, which is sent to our server but not stored.
On Android the app can only receive approximate location. On iPhone, iOS lets you choose whether to share Precise Location; the app asks only for a low-accuracy reading, but if Precise Location is on for Quest Claim, the reading iOS returns may be precise and is used as described above (you can turn Precise Location off in Settings, Privacy & Security, Location Services, Quest Claim). Your device location is never stored on our servers.
• Digs and claims: for every dig, the hunt, your account, the time and the result (hit or miss). A losing dig keeps no map point and no distance. A winning dig keeps the map point where you placed the crosshair (a point you chose on the map, not your device location) and its rounded distance from the hidden spot, as evidence for reviewing the claim. Players and the public never see that point; within Quest Claim, claim reviewers see it only through a tool that logs every view (database administrators can also access stored records for maintenance), and it is deleted if the claim is rejected. Digs saved while you are offline stay on your phone until they are sent. Claim records from earlier test versions of the app may still hold winning dig points stored before these changes; in those versions the map could open on the player's own location, so such a point may be close to where the player was at the time.
• Prizes and Prize Wallet: claims, Validated Wins, prize credits, wallet balance, cashout requests, payout status and records, and related notices.
• Public winner name (only if you opt in): the handle, or first name and last initial, you choose to show when you win. Off by default.
• Reports: what you report and why.
• Usage: events such as starting a hunt, digging and claim outcomes, used to run and improve the game and to stop cheating.
• Server logs: when the app talks to our servers, our hosting provider automatically records technical data such as IP address, device and app details, and request times, used for security and to keep the service working.
• Sponsors: business name and business address (turned into map coordinates by your phone's built-in geocoding service) and sponsor messages.
• Tax (only for winners who need it): legal name, state of residence, address type and the tax address you give, used for tax reporting and to check that prizes go to eligible US residents. Your tax state is the residence state you declare at this step, not your location, and it is fixed for the calendar year (staff can correct a mistake, with a logged note). Your tax ID number is entered on our tax-form provider's secure page; we keep only the provider's reference, the last 4 digits and a coded fingerprint used to total prizes per person.
• Identity check (only for prizes of $500 or more): an identity-verification provider checks who you are, which may include a photo ID and a selfie, collected and kept by that provider under its own privacy terms. We keep only the provider's reference and the result (pending, verified or failed).
• Device check (only once it is turned on): a Google Play Integrity result saying whether the app and device look genuine, used to stop cheating.
Sensitive information. Some of this may be "sensitive" under state privacy laws: your tax ID number (collected for us by our tax-form provider; we keep only the last 4 digits and a coded fingerprint), the photo ID and selfie collected by our identity-verification provider, your account login and password, and, if you share precise location on iPhone, a precise location reading. We use them only for tax reporting, identity checks, eligibility, account security and the purposes described in this section, never to infer things about you, and we don't sell or share them for advertising.
3. How we use it
To run hunts and decide claims, record Validated Wins, check eligibility (age, US residence, one account per person, excluded persons), credit prizes to a Prize Wallet, process cashouts, send prize notices, meet tax reporting duties, prevent cheating and multiple accounts, show sponsor messages, show opt-in winner names, answer reports and requests, and keep the app secure and working.
If you win, we maintain records of the hunt won, prize credit, wallet balance, cashout requests and payout status. We share information needed for payout with Tremendous and with the tax or identity providers identified in this policy when required. We retain records for the payment, tax, fraud-prevention and other purposes disclosed in this policy and as required by law.
When a treasure is found, its clue is deleted from that hunt, and the clue or hunt may later be reused or repurposed for another hunt. Separately, if a treasure remains unfound at the end of its selected advertising duration, the hunt's displayed clue text is removed. These changes to game content do not, by themselves, describe deletion of a player account or erasure of personal, payment, security, claim or backup records. Retention and deletion of personal information follow this policy and applicable law.
4. Who we share it with
Service providers that run parts of the app for us:
• Supabase: database, sign-in, server functions and server logs.
• Google: Google Maps draws the map, so Google receives requests for the map areas you view (with your device's IP address and app details). On Android, the phone's built-in geocoding service, normally provided by Google, receives the approximate location reading used to pick your payout currency and the point rounded to about 11 km used for prize display, and turns sponsor business addresses into coordinates. Google Play Integrity checks the app and device once it is turned on. Google Places is used on our servers with map facts about a hunt area only, never your personal data.
• Apple (iPhone): the phone's built-in geocoding service, provided by Apple, receives the same location readings and sponsor addresses on an iPhone.
• xAI: writes hunt clues on our servers; it receives map facts about the hunt area, never your personal data.
• OpenStreetMap (Overpass / Nominatim) and Wikipedia: used on our servers to check clues against real map data. They receive only map facts or a coarse map cell about a hunt area, never your personal data or your location.
• Frankfurter: currency exchange rates. It receives the currency codes and, when your phone asks, your IP address; no other personal data.
• Tremendous for cashouts and gift-card or money-transfer delivery when you request payout. A tax-form provider and an identity-verification provider when legally required: [to be confirmed].
Public: if you opt in, your winner name appears on the public prize list and jackpot ledger, which anyone can see. We never publish hidden spots, your dig locations or your contact details.
We share prize and tax information with tax authorities when the law requires it, and information with authorities when the law requires it or to protect people from fraud or harm. We don't sell your personal information and don't use it for targeted advertising.
5. How long we keep it
Account data is kept while you have an account. For a losing dig we keep only the hunt, your account, the time and the result, for fraud prevention. A winning dig's map point is kept with the prize record for [to be confirmed] and is deleted if the claim is rejected. Claims, prize and payout records are kept for contest administration and fraud prevention. Sponsor-message location is not stored. Tax records are kept for the period tax law requires. Server logs are kept for [to be confirmed].
6. Deleting your account
Delete your account any time in Settings (or https://questclaim.com/account-deletion/). Your sign-in, profile, country declaration, public winner name and game data are deleted (the country declaration log keeps only a country code, date and a reference that no longer links to an account). Claims, prize, payout and tax records are kept, no longer linked to your account; tax records keep the legal name needed for tax reporting. Deleting your account forfeits any prize not yet paid; the app lists those prizes and asks you to confirm first.
7. Your choices and rights
You can turn off location for Quest Claim in your device settings at any time. The game works the same without it: the map and digging never use your location. Without it, prizes show in US dollars, payouts default to US dollars, sponsor messages aren't local, and your units are picked from your phone's region setting. On iPhone you can also leave location on but turn off Precise Location. You can turn your public winner name on or off in the app.
Depending on where you live, you may have the right to ask what personal information we hold about you, to get a copy, to correct it, or to delete it, and to appeal if we refuse. To make a request, email questclaimapp@gmail.com from your account address. We will verify the request, answer within 45 days, and never treat you differently for using these rights. Some records must be kept even after a request (for example tax and prize records).
Authorized agents. Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws.
Request verification. Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.
If you submit the request through an authorized agent, we may need to collect additional information to verify your identity before processing your request and the agent will need to provide a written and signed permission from you to submit such request on your behalf.
Appeals. Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by emailing us at questclaimapp@gmail.com. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.
8. Children
Quest Claim is for adults 18 and older, and we don't knowingly collect information from anyone under 18. If an account recorded a 13–17 age bracket under an earlier version of the app, that record is flagged and the account can never claim or win a prize. We don't use the flagged record for anything else, and we delete it, with the account, when the account is deleted or on request to questclaimapp@gmail.com. If you believe someone under 18 is using Quest Claim, contact us and we will delete the account.
9. Security
We use access controls, encryption in transit and limited staff access to protect your information. No system is perfectly secure.
10. Changes
We'll update this policy when what we collect or how we use it changes, show the new version in the app, and update the effective date.
11. Controls for Do-Not-Track features
Quest Claim does not track you across other companies' apps or websites, and the app uses no cookies, advertising IDs or third-party analytics or advertising tools. Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online. If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy.
California law requires us to let you know how we respond to web browser DNT signals. Because there currently is not an industry or legal standard for recognizing or honoring DNT signals, we do not respond to them at this time.