Privacy Policy for MainQuest
Last Updated: February 5, 2026
Effective Date: February 5, 2026
Welcome to MainQuest. This Privacy Policy explains how EndSpec, the professional branding for Radoi Constantin-Iulian ("we," "our," or "us"), collects, uses, discloses, and safeguards your information when you use our MainQuest mobile application (the "App").
As an individual developer operating under the branding EndSpec, I am committed to protecting your privacy. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.
1. Information We Collect
1.1 Information You Provide Directly
When you use MainQuest, we collect information you voluntarily provide:
- Account Information: When you sign in with Google, we receive your email address, display name, and unique Google user identifier.
- Profile Information: Username/hero name you choose, avatar selection, and core value preferences.
- In-App Data: Quest names and descriptions, task completion data, habit tracking information, skill/attribute configurations, morning routine items, and focus session data.
1.2 Information Collected Automatically
When you use the App, we automatically collect certain information:
- Device Information: Device type, operating system version, and unique device identifiers.
- Usage Data: App usage patterns, features accessed, focus session durations, and game statistics (XP, level, HP, achievements).
- Local Storage Data: We store your preferences, cached user data, and offline sync queue locally on your device using SharedPreferences and Flutter Secure Storage.
1.3 Third-Party Services
MainQuest integrates with the following third-party services:
Firebase Authentication (Google)
- We use Firebase for secure sign-in.
- Data collected: Email address, display name, Google user ID.
- Firebase Privacy Policy
Google Calendar (Optional)
- If you grant access, we read your calendar events to import tasks and sync quest deadlines.
- Data accessed: Calendar event titles, descriptions, start/end times.
- This access is used solely to sync quests and is read/write only for your primary calendar.
- You can revoke this access at any time via your Google Account settings.
Microsoft Clarity
- We use Microsoft Clarity for session recording and analytics to improve user experience.
- Data collected: User interactions (taps, scrolls) and heatmaps.
- No personally identifiable information is intentionally captured in recordings.
- Microsoft Privacy Statement
2. How We Use Your Information
- Core Functionality: To manage your user account, track progress (XP, level), and sync your quests/habits.
- Gamification: To provide features like the HP system, streaks, and rankings.
- Sync and Backup: To ensure your data is available across multiple devices and backed up securely.
- Improvement: To identify bugs and improve the app's performance and user interface.
3. Data Storage and Security
3.1 Storage
- Local: Preferences and cached data are stored on your device. Tokens are encrypted via Flutter Secure Storage.
- Cloud: Account data and game statistics are stored on secure backend servers with HTTPS/TLS encryption for all transmissions.
3.2 Security
We implement industry-standard security measures. We do not store passwords; all authentication is handled securely by Google via Firebase.
4. Data Sharing and Disclosure
- We Do NOT Sell Your Data: We do not sell, trade, or rent your personal information to third parties.
- Social Features: If you use friend features, your display name, avatar, and level may be visible to friends you connect with.
- Legal Requirements: We may disclose information if required by law or to protect the safety of our users.
5. Your Rights and Choices
- Access & Deletion: You can request account deletion by contacting us at privacy@endspec.net. Data is deleted or anonymized within 30 days of a valid request.
- Revocation: You can revoke Google Calendar access via your Google Account permissions at any time.
- Notifications: You can manage push notifications via device settings.
6. Children's Privacy
MainQuest is NOT directed at children under 13 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with data, contact us for immediate deletion.
7. Changes to This Policy
We may update this policy periodically. We will notify you of material changes by updating the "Last Updated" date or through an in-app notice.
8. Contact Us
If you have questions regarding this Privacy Policy, please contact:
Radoi Constantin-Iulian (EndSpec)
Email: privacy@endspec.net
Website: https://www.mainquest.net
9. Summary of Data Practices
| Data Type | Collected | Purpose | Stored |
|---|---|---|---|
| Yes | Account Identification | Server | |
| Display Name | Yes | Profile Display | Server & Device |
| Game Progress | Yes | Core Gameplay | Server & Device |
| Calendar Events | Optional | Task Synchronization | Not Stored |
| Usage Analytics | Yes | UX Improvement | Third-party (Clarity) |
This Privacy Policy was last reviewed and updated on February 5, 2026.
