Privacy Policy

The Short Version

We collect only what we need to make VaultQuest work. We don't sell your data. We don't show ads. We use Google and Facebook for login and Stripe for payments - they have their own privacy policies. That's basically it.

What Data We Collect

Account Information

• Your email and name (via Google or Facebook OAuth)
• Your profile picture from your chosen login provider (optional)

Family & Kid Profiles

• Kid names (first names only, no last names required)
• Virtual account balances
• Transaction history (deposits, withdrawals, descriptions)
• Allowance schedules and settings

Payment Information

• Payment details are handled entirely by Stripe - we never see your credit card numbers
• We store your Stripe customer ID to manage subscriptions
• We store subscription status and billing cycle information

Technical Information

• Session cookies for login (required for the app to work)
• Basic usage data (when you log in, what features you use) to help us fix bugs and improve the service

How We Use Your Data

• To provide the VaultQuest service (obviously)
• To manage your account and subscriptions
• To send important updates about your account or the service
• To fix bugs and improve features
• To prevent fraud and abuse

We do NOT:

• Sell your data to anyone
• Show you ads based on your data
• Share your data with third parties (except Google/Stripe as needed)
• Use your data for anything other than running the service

Data Storage & Security

Your data is stored in a secure PostgreSQL database hosted by Neon. We use industry-standard security practices:

• Encrypted connections (HTTPS)
• Secure authentication via Google OAuth
• Database access controls
• Regular security updates

That said, no system is 100% secure. We do our best, but use the service at your own risk.

Third-Party Services

Authentication Providers

We use Google and Facebook for authentication. When you sign in with these services, they share your basic profile information (name, email, profile picture) with us. See their privacy policies:

• Google's Privacy Policy
• Facebook's Privacy Policy

Stripe

Payment processing is handled by Stripe. See Stripe's Privacy Policy.

Neon Database

Your data is hosted on Neon's PostgreSQL platform. See Neon's Privacy Policy.

Children's Privacy

VaultQuest is designed for families with kids, but parents/guardians create and control all accounts. We don't knowingly collect personal information directly from children under 13. Parents are responsible for:

• Creating and managing their family account
• Deciding what information to include about their children
• Supervising their children's use of the service

Your Rights

You can:

• View and edit your account data anytime through your dashboard
• Export your transaction history as CSV
• Delete your account (see Data Deletion section below)
• Request a copy of your data (contact us)

If you're in the EU, you have additional rights under GDPR. Contact us for details.

Data Deletion

You have the right to delete your account and all associated data at any time. Here's how:

How to Request Account Deletion

1. Send an email to ozarkexpeditions@gmail.com with "Delete My Account" in the subject line
2. Include the email address associated with your VaultQuest account
3. We will process your deletion request within 30 days and send you a confirmation email when complete

What Gets Deleted

When you request account deletion, we will permanently delete:

• Your account information (name, email, profile picture)
• All kid profiles and their virtual account balances
• All transaction history and descriptions
• All allowance schedules and settings
• Any kiosk pairings and device associations

What We May Retain

We may retain certain information if required by law or for legitimate business purposes:

• Payment records (required for tax and accounting purposes)
• Aggregated, anonymized usage data (no personally identifiable information)
• Records necessary for fraud prevention or legal compliance

Note: Account deletion is permanent and cannot be undone. Please export any data you wish to keep before requesting deletion.

Cookies

We use cookies to:

• Keep you logged in (essential cookies)
• Remember your preferences

That's it. No tracking cookies, no advertising cookies.

Data Retention

We keep your data as long as your account is active. If you delete your account, we'll delete your data within 30 days (we may keep some data longer if required by law or for legitimate business purposes like fraud prevention).

Changes to This Policy

We may update this privacy policy occasionally. We'll update the "Last Updated" date at the top. Continued use of the service means you accept the updated policy.

Contact Us

Questions about privacy? Email us at: ozarkexpeditions@gmail.com