Privacy Policy for MainQuest (iOS)

Welcome to MainQuest. This Privacy Policy explains how EndSpec, the professional branding for Radoi Constantin-Iulian ("we," "our," or "us"), collects, uses, discloses, and safeguards your information when you use the MainQuest application on Apple iOS and iPadOS devices (the "App").

As an individual developer operating under the branding EndSpec, I am committed to protecting your privacy. Please read this Privacy Policy carefully. If you do not agree with its terms, please do not use the App.

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you sign in, we receive your email address, display name, and a unique user identifier from your chosen sign-in provider (Sign in with Apple or Google).
• Profile Information: The hero name you choose, avatar selection, character Class, and core value preferences.
• In-App Data: Quest names and descriptions, task/habit completion data, skill and attribute configurations, morning routine items, and focus session data.

1.2 Information Collected Automatically

• Device Information: Device model, iOS/iPadOS version, and app version.
• Usage Data: Features accessed, focus session durations, and game statistics (XP, level, HP, streaks, achievements).
• Local Storage Data: Preferences, cached profile data, and an offline sync queue stored on your device. Authentication tokens are encrypted in the iOS Keychain via Flutter Secure Storage.

1.3 Third-Party Services

2. AI Features (KODAN)

MainQuest includes KODAN, an in-app companion that provides narrative feedback on your progress.

• When you use an AI feature, KODAN sends the relevant input — such as your character stats, quest names, and the message you send to KODAN — to MainQuest's own backend servers to generate a response. This data is not sent directly from your device to any third-party AI company.
• To produce responses, our backend may use third-party AI infrastructure as a processor. Any such provider is bound by agreements that prohibit using your data to train their models, and we do not use your data to train AI models.
• KODAN only transmits data when you actively use an AI feature — it does not run in the background.

3. How We Use Your Information

• Core Functionality: Manage your account, track progress (XP, level, HP), and sync your quests and habits.
• Gamification: Power the HP system, streaks, achievements, and leaderboards.
• Sync and Backup: Keep your data available across devices and backed up securely.
• Purchases: Verify and restore in-app purchases and subscription entitlements.
• Improvement: Identify bugs and improve performance and UI.

4. Data Storage and Security

• Local: Preferences and cached data are stored on your device. Authentication tokens are encrypted in the iOS Keychain via Flutter Secure Storage.
• Cloud: Account data and game statistics are stored on secure backend servers, with HTTPS/TLS encryption for all transmissions.

We implement industry-standard security measures. We do not store passwords; authentication is handled by Apple or Google.

5. Data Sharing and Disclosure

• We Do NOT Sell Your Data. We do not sell, trade, or rent your personal information.
• Leaderboards & Social Features: Your display name, avatar, and level/focus statistics may be visible to other players on leaderboards and to friends you connect with.
• Service Providers: We share data only with the third-party services listed in Section 1.3, strictly to operate the App.
• Legal Requirements: We may disclose information if required by law or to protect the safety of our users.

6. Tracking & App Tracking Transparency

MainQuest does not track you across apps and websites owned by other companies. We do not use the Advertising Identifier (IDFA), and we do not serve third-party advertising. Because we do not track you in this sense, the App does not present an App Tracking Transparency prompt. The analytics described above are used solely to operate and improve MainQuest.

7. Your Rights and Choices

• Access & Deletion: You can request access to, or deletion of, your account and data by contacting privacy@endspec.net, or via in-app account settings where available. Data is deleted or anonymized within 30 days of a valid request.
• Correction & Export: You may request correction of inaccurate data or an export of your data.
• EU/EEA Users (GDPR): As an EU-based developer, we process your data under a lawful basis (performance of our service to you, and your consent for optional features). You have the rights of access, rectification, erasure, restriction, portability, and objection, and may lodge a complaint with your local data protection authority.
• Notifications: Manage notification permissions in iOS Settings at any time.

8. Children's Privacy

MainQuest is not directed at children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with data, contact us for immediate deletion.

9. Changes to This Policy

We may update this policy periodically. We will notify you of material changes by updating the "Last Updated" date or via an in-app notice.

10. Contact Us

Radoi Constantin-Iulian (EndSpec)

Privacy: privacy@endspec.net

Support: support@mainquest.net

Website: https://www.mainquest.net

11. Summary of Data Practices