TicQuest Children's Privacy Notice

Effective date: 2026-06-09 Version: 1.0

*This notice is for parents and legal guardians. It supplements our full Privacy Policy with a focused explanation of how TicQuest, operated by Velynq, Inc., handles children's personal information under the Children's Online Privacy Protection Act (COPPA, 16 C.F.R. Part 312, including the FTC's 2025 amendments), GDPR Article 8, and equivalent laws.*

1. Our Commitment

TicQuest is built to collect as little about your child as possible. A child never creates an account, never signs in with credentials, and is never asked for any contact information. Only you — the parent or guardian — create and control the account.

2. What Child Data We Collect — and Why

2.1 What we collect

Category	What it is	Why	How long
First name (or nickname)	A single first name you type when adding a child	To show the child's name in the App	While the account is active; deleted with the child/account
Avatar	A preset illustration key (never a photo)	To personalize the child's view	Same
Stars, streaks, progress counters	Running totals of stars, active days, completion rate, streak state	To power the reward and motivation system	Same
Routine completion logs	Per-task on-time status, stars, timestamps	To show recent history to the parent	7-day rolling, then auto-deleted
Monthly / yearly summaries	Aggregate counts of days completed, stars, certificates	Parent progress dashboard; show progress over time	While the account is active; deleted with the child/account
Certificates	Date, routine names, stars, theme	To celebrate achievements	While the account is active
Alarm settings	Scheduled time, days, linked routine	Optional parent-set routine alarm	While the account is active
Quest-completion / daily-credit / rest-day records	Per-routine and per-day flags	To compute streaks and active days	While the account is active
Reward / unlock records	Which rewards the child has earned	To show reward status	While the account is active
Time zone	Your device's time zone (a coarse regional setting — not location)	To compute streak/activity dates in the child's local time	While the account is active
Device-pairing token	A UUID generated only if you pair a separate kid device	To link that device to your family	Until you unpair or delete the account

We keep child data only as long as reasonably necessary for these purposes and never indefinitely (see the Privacy Policy, Section 8).

2.2 What we deliberately do NOT collect

No child age or date of birth.
No child photographs or uploaded images (avatars are preset keys).
No child email, phone, or postal address.
No precise location / GPS.
No advertising profile and no advertising whatsoever — there is no ad SDK.
No third-party analytics, attribution, or crash-reporting SDK.

2.3 Parent-authored free text

Routine titles, task names, and reward labels are your content. The App never asks for a child's surname, school, address, or medical details, and we advise against entering any sensitive data there.

3. Who Controls the Account

Only a parent or legal guardian creates and controls a TicQuest account and is the only person who authenticates (email/password or OAuth). Children access the App on your device or on a "kid device" you pair using a time-limited 6-digit code. A child never registers and never creates credentials.

4. Verifiable Parental Consent

Before any child profile can be created, we obtain your verifiable parental consent. Because we collect only a first name plus in-app activity, use it solely to operate the App for your family, show no ads, and never disclose it to third parties for their own purposes, COPPA permits a consent method reasonably designed to confirm you are the parent — which for us is:

Direct notice — we tell you exactly what we collect from your child (a first name, in-app activity, a device time zone for local-time dates, and a device-pairing token), that it is used only to run the App and is never disclosed for anyone else's purposes, and that you can revoke consent at any time.
A verified parent account — you create and verify a parent account (an email-confirmation link, or sign-in through Apple, Google, or Facebook), so the person consenting holds a real, verified adult account.
Explicit parental consent — you confirm you are the child's parent or legal guardian and consent to TicQuest collecting their first name and activity, both when you accept the Privacy Policy at sign-up and again when you add a child.

We record your consent and the timestamp; this record is included in your data export. You can revoke consent at any time by deleting the child's profile or your account, or by emailing privacy@velynq.co.

5. We Never Advertise to or Profile Children

TicQuest shows no advertisements, builds no behavioral profiles, and shares no child data with advertising networks, data brokers, or any third party for marketing. Our service providers (Supabase for backend storage, PowerSync for offline sync) process child data only on our instructions, under written data-processing agreements, solely to operate the App.

6. Review, Export, and Delete Your Child's Data

You are in full control:

Review — see your child's name, progress, routines, and rewards anytime in the parent section of the App.
Export — Settings → "Export my family data" generates a machine-readable file containing your family's data, including every item in Section 2 for each child.
Delete a single child — deleting a child profile removes that child's data immediately.
Delete the entire account — Settings → "Delete account" immediately deletes your account, all child profiles, and all associated data by a cascading deletion; it cannot be undone from within the App. We may retain limited billing/transaction records in de-identified form (family identifier removed) for financial/legal record-keeping. Offline copies on your device are cleared on sign-out/deletion, and hosting backups are overwritten on the provider's standard cycle and not used to restore deleted accounts.

To request review, correction, deletion, or consent revocation, you can also contact us at privacy@velynq.co. We respond to verifiable parental requests within 30 days.

7. Changes to This Notice

We will update this notice if our data practices change (for example, at native launch when subscription and push-notification providers are added) and revise the effective date above.

8. Contact

Velynq, Inc. 221 W 9th Street, PMB 858, Wilmington, DE 19801, United States Privacy / parental requests: privacy@velynq.co

This notice is maintained by Velynq, Inc. and supplements the TicQuest Privacy Policy.