Privacy Policy

SideQuest is operated by Steven Luong ("we," "us," or "our"), an individual based in Washington, United States. You can reach us at stevenluong05@gmail.com.

We collect the following information when you use SideQuest:

• Account information — email address, username, and password (stored as a one-way hash; we never see your plaintext password).
• Profile information — optional profile photo and bio that you choose to provide.
• Quests and activity — the quests you create, their due dates, completion status, and payoff session history.
• Social data — friend connections and challenge history between users.
• Push notification subscription — if you opt in, browser-generated keys used to deliver notifications. You can revoke this at any time through your browser settings.
• Timezone — detected automatically from your browser to correctly calculate due dates and streaks.

The pushup verification feature uses your device camera. Video is processed entirely on your device using MediaPipe Pose and is never sent to our servers. We do not record, store, or transmit any video or images from your camera.

• To provide and operate the SideQuest service.
• To send password reset emails when requested.
• To send optional email reminders about overdue quests (only if you enable this in your settings).
• To show your progress and rank on the leaderboard.
• We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We use the following third-party services to operate SideQuest:

• Resend — used to deliver transactional emails (password reset, reminders). Your email address is passed to Resend solely for this purpose.
• Railway — our backend server and database are hosted on Railway. Your data is stored on Railway's infrastructure.
• Vercel — our frontend is hosted on Vercel.
• Google CDN (MediaPipe) — the pushup detection library is loaded from Google's CDN in your browser. No data is sent to Google from this interaction.

We retain your data for as long as your account is active. Completed quests are automatically purged from our system after 7 days. You can permanently delete your account and all associated data at any time from your profile settings.

SideQuest is not directed at children under 13. If we become aware that a child under 13 has created an account, we will delete it promptly. If you believe a child under 13 is using this service, please contact us at stevenluong05@gmail.com.

You have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data via your profile settings.
• Delete your account and all associated data at any time from your profile settings.
• Opt out of email reminders at any time in your notification settings.

To make any other data request, email us at stevenluong05@gmail.com.

Passwords are hashed using bcrypt before storage. All data is transmitted over HTTPS. We take reasonable measures to protect your information, but no internet service can guarantee absolute security.

We may update this policy occasionally. If we make material changes, we will update the date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy.

Questions about this policy? Email us at stevenluong05@gmail.com.