Quest Nest Legal Hub

Privacy Policy

Last Updated: May 27, 2026

Quest Nest (the "Platform" or the "App") is owned, operated, and published by Lamareen Ltd (collectively referred to as "Lamareen", "we", "us", or "our"). We are dedicated to safeguarding the privacy and security of our users, particularly children who engage with our educational and habit-building features. This Privacy Policy explains how we collect, process, secure, and delete data within the Platform.

1. Children's Privacy & COPPA Compliance

Quest Nest is designed to be fully compliant with the Children's Online Privacy Protection Act (COPPA). We do not collect personally identifiable information (PII) directly from children. All child profiles are created, modified, and controlled solely by their verified parents or legal guardians. Display names chosen for child profiles can be completely anonymous (e.g. "SpaceHero" or "Emily"), and children are never asked to enter email addresses, phone numbers, or external social media links.

2. Information We Collect

• Parent Accounts: When creating a parent account, we collect the parent's display name, email address, password hash, and security PIN.
• Child Profiles: We collect and store child display names, avatar base characters, and equipped virtual inventory items (hats, pets, backgrounds).
• Gameplay & Progress Logs: We track active stars balance, total stars earned, badge cabinet levels, completed quests, and streak logs to render the 2D/3D map progression charts.
• Billing Metadata: Subscription details and tokenized payment metadata are processed through Stripe. We do not store full credit card numbers on our servers.

3. Data Sharing & Security Practices

Lamareen Ltd maintains a strict policy: we do not sell, rent, or trade user data to any advertisers or marketing agencies. Data access is protected by Firebase Firestore collection security rules. Parent PIN codes are hashed client-side using cryptographic SubtleCrypto SHA-256 routines before verification. External integrations are restricted to Stripe (subscription handling) and Resend (parent email notifications and onboarding guides).

4. Right to be Forgotten (GDPR & CCPA)

Under the General Data Protection Regulation (GDPR) and similar global compliance rules, parents have the absolute right to view, download, or delete their family accounts. You can immediately purge all databases logs, child profiles, and billing histories at any time using our self-service deletion portal at /legal/gdpr.

5. Contact Information

If you have any questions, concerns, or inquiries regarding our children's safety protocols or data handling policies, please reach out to us at:
Lamareen Ltd Support Desk
Email: support@questnest.space or legal@lamareen.com