CodeQuest Ltd is the data controller for personal data collected through this platform.
Contact: privacy@codequest.app · DPO: dpo@codequest.app
Address: 2389 Edward Leaver Trail, Oakville, Canada
| Data | Why | Legal basis |
|---|---|---|
| Name and email address | Account creation and communications | Contract performance |
| Country | Apply the correct legal framework | Legal obligation |
| Payment information | Subscription billing (processed by Stripe / Paystack) | Contract performance |
| IP address and user agent | Consent audit trail (legal requirement) | Legal obligation |
| Email and marketing preferences | Send product updates (with your consent) | Consent |
Please see our Children's Privacy Policy for full details. In short: we collect only a nickname, age group, chosen avatar, and in-app progress. We never collect a child's real name, email, location, or any other personal information.
| Provider | Purpose | Location |
|---|---|---|
| Amazon Web Services | Hosting, database, email | USA (us-east-1) |
| Stripe | Payment processing (USA/UK/Canada) | USA |
| Paystack | Payment processing (Nigeria) | Nigeria |
| Anthropic | AI coding hints (no personal data sent) | USA |
We do not sell your data to anyone, ever.
| Data | Retention period |
|---|---|
| Parent account | Until deletion is requested + 30-day grace period |
| Consent records | 7 years (COPPA legal requirement) |
| Billing records | 7 years (tax law requirement) |
| Support emails | 3 years |
Depending on your country, you have the right to: access a copy of your data, correct inaccuracies, request deletion (30-day grace period), restrict processing, data portability, and to object to certain processing. Contact privacy@codequest.app to exercise any right — we respond within 30 days.
You can also download all your data and delete your account from the parent dashboard at any time.
We use TLS 1.3, AES-256 encryption at rest, private VPC subnets, and role-based access controls. We will notify you within 72 hours of any breach affecting your personal data.
We use only essential session cookies required for you to stay logged in. No advertising cookies, no third-party analytics that track you individually.
We will email you at least 30 days before any material change. Continued use after the effective date constitutes acceptance.
Email: privacy@codequest.app
UK: You may complain to the ICO at ico.org.uk
Nigeria: Nigeria Data Protection Commission at ndpc.gov.ng
Canada: OPC at priv.gc.ca