Privacy policy
Last updated 21 Oct 2026
21 sections
Who we are
Sidequesting Club is an app for iPhone, Android and the web, with a browser extension, that offers you a real-world quest when you reach for an app you asked us to pause. It is run by Ambition Forge Private Limited, a company registered in India, at 235 Binnamangala, 13th Cross Road 2nd Stage, Indiranagar (Bangalore), Bangalore North, Bangalore- 560038, Karnataka.
Ambition Forge Private Limited decides how your data is used and is responsible for it: the data fiduciary under India's Digital Personal Data Protection Act, 2023, and the controller under the GDPR and the UK GDPR. "We" and "us" in this policy mean Ambition Forge Private Limited.
This policy says what we collect, why, who processes it for us, how long we keep it and how to get it deleted. It covers the app, the web app at sidequesting.club and the browser extension.
Signing in
You sign in with Apple or with Google. There are no passwords to remember. We use your name and email for your account and to send you messages about it.
Apple sends us your name and email only the first time you sign in, and you can choose to hide your email behind an Apple relay address. Google sends them each time.
If you sign in with Apple and then with Google, or the other way round, and both give us the same verified email, you get the same account. An Apple relay address never matches a Google email, so with a hidden email you get a separate account.
What we collect
Everything we collect is below, in plain words. The only part used to track you across other companies' apps and sites is what AppsFlyer measures for our ads, and on iPhone only if you allow it (see Our ads below).
Your name and email
From Apple or Google when you sign in. Linked to your account. Used for your account and for messages about it; lifecycle messages are sent through Customer.io.
Photos you add
Optional: the photo you attach to a finished quest or a Check-in. Location and camera details (EXIF) are removed on your device before the photo is uploaded. Used for your log and, if you share it, the Club.
Notes you write
Optional: the note on a finished quest or a Check-in, and the intention you type when you take a Pass. Used to show them back to you, and in the Club when you share a note.
The apps and sites you pause
On iPhone, opaque tokens from Screen Time that mean nothing outside your phone; on Android, the package names of the apps you block; in the browser extension, the domains you list. Linked to your account so the blocker works on each of your devices.
What you do inside those apps and sites
Never collected. We only see which app is in front. Never what you do inside it.
Your devices
An id the app makes for each install, the device's name and, if you allow notifications, its push token. Used to keep you signed in and to send notifications. For our ads, AppsFlyer also receives your phone's advertising ID (on iPhone only if you allow tracking), an id for this app on your phone and its own install id (see Our ads below).
How you use the app
Events such as starting or finishing a quest, stored in PostHog (EU) with an id linked to your account. No advertising, no fingerprinting, and no IP address: it is removed before anything is stored. You can turn this off (see Analytics below). Separately, AppsFlyer receives three things for our ads: that the app was installed and opened, that you signed up, and that you finished your first quest, with nothing about which quest or what you wrote.
Crash and error reports
When something breaks: the error and where in the code it happened (the stack), a request id, the device model, the system version and the app version, a hashed form of your member id (SHA-256 with a secret key per environment) and the IP address the report came from; never your name or email. Because of the id and the IP address a report is linked to your account. We use crash reports only to fix crashes and for security; the approximate location worked out from the IP address is described under Your location. Sent to Sentry (EU) and kept 90 days.
Your location
Approximate location only: when a crash report reaches Sentry, the approximate location (country, region and city) is worked out from its IP address and kept with the report for 90 days. We use it only for reliability and security, such as seeing that crashes cluster in one region or spotting abuse; we never use it to find anyone. AppsFlyer also works out an approximate location from the IP address its requests come from, for our ads (see Our ads below). We never collect your precise location: we never ask for location, and photos lose their location details on your device.
Contacts, calendar, health and financial data
Not collected.
The blocker: Screen Time, usage access and the browser extension
We only see which app is in front. Never what you do inside it.
•
On iPhone, Screen Time gives us opaque tokens for the apps you pick. They mean nothing outside your phone, and we cannot tell which app a token is.
•
On Android, usage access tells the app which app is in front. We store only the package names of the apps you block, like com.instagram.android. Display over other apps is used only to draw the pause screen over the apps you block.
•
In the browser, the extension notices only when a tab opens one of the sites you listed. It has no access to the content of any page, and no address beyond the matched site leaves your browser.
The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
We never collect what is on your screen, the pages you visit, how long you spend inside an app, or how you use any other app. Each permission is asked for with an explanation first, and you can turn it off any time in your phone's settings or by removing the extension.
Your photos and notes
Photos and notes are private by default: only you see them. When you share a finished quest with the Club, its photo and note are shown to signed-in Members only. Photos are never at a public address.
Your notes and intentions are yours. They are never used for advertising, never sent to analytics and never used to train anything. When you share a photo or note, an automated check looks at it for safety (OpenAI's moderation model, and Hive for photos it cannot decide), with no id attached.
Analytics and how to turn it off
We use PostHog, hosted in the EU, to see which parts of the app help people. It gets events with an id linked to your account, never your name, email, notes, intentions or photos. There is no session replay, no automatic click recording and no IP address. On the web it keeps its id in your browser's storage, not a cookie.
Analytics is on unless you turn it off. The switch, Settings → Account → Share usage analytics, is shown only to Members in the EEA and the UK, because the law there requires it: we rely on our legitimate interest for analytics, and the GDPR and the UK GDPR give you the right to object to that at any time. Elsewhere the app has no switch.
When it is off, every feature keeps working and the app sends nothing to PostHog, not even a request. Your XP and the record of your quests are not analytics and are kept.
Our ads, AppsFlyer and the tracking prompt
We advertise Sidequesting Club on other apps and sites. To see which of our ads lead to people joining, the app uses AppsFlyer, an attribution service. AppsFlyer receives your phone's advertising ID, an id for this app on your phone, its own install id, your device type, system and network, and the IP address its requests come from, which it maps to an approximate location. With them come three events: that the app was installed and opened, that you signed up, and that you finished your first quest. It never receives your name, email, account id, notes, intentions or photos, or anything about which quests you do. AppsFlyer tells the ad network that showed the ad whether it led to an install or a sign-up.
On iPhone, AppsFlyer gets your advertising ID only if you allow it: after you have signed up and set things up, the app explains this in one line and then shows Apple's question about tracking. On iPhone, AppsFlyer does not start until you have answered. Allow or not, the app works the same: nothing is locked, slower or different, and we never ask again. You can change your answer any time in your iPhone's Settings, under Privacy & Security, Tracking.
On Android, you can reset or delete your advertising ID in your phone's settings, under Privacy, Ads (the names vary by phone).
The data AppsFlyer holds is not linked to your account: we give it no id of ours. We do not use AppsFlyer for Members in the EEA or the UK, and the app is not offered there yet.
Why we use your data
•
Your account, quests, XP and the Club: to provide the service you signed up for (our contract with you).
•
Analytics, fraud prevention and security: our legitimate interests in learning which parts of the app help people and in keeping the service and its Members safe. In the EEA and the UK you can object to analytics at any time (see Analytics above).
•
Measuring our own ads with AppsFlyer: our legitimate interest in knowing which ads bring people to the Club, so we spend less on ads that don't; on iPhone, your advertising ID only with your permission in Apple's tracking prompt.
•
Notifications, camera, Screen Time, usage access, display over other apps and, on iPhone, tracking: your permission, asked by your phone after our explanation, and withdrawable in Settings at any time.
Who processes it for us
We do not sell your data, and there are no ads in the app. These companies process data on our behalf, under a data processing agreement, and only for the purpose named. The one that deals with advertisers is AppsFlyer: it tells the ad networks our ads run on whether an ad led to an install or a sign-up (see Our ads above).
Cloudflare
Runs our servers, database, photo storage and the web app, and sends our transactional email. Holds everything in your account.
Expo
Delivers app updates and push notifications. Sees push tokens, the device model and the text of a notification.
PostHog
Product analytics, hosted in the EU. Sees events and a pseudonymous id; never your name, email, notes, intentions or photos.
Customer.io
Sends messages about your account and progress. Sees your email, push token, time zone, streak, level, interests and notification choices; never notes or photos.
Sentry
Crash and error reports, hosted in the EU. Sees the error and stack, request ids, the device model, system and app version, a hashed member id, the IP address a report came from and the approximate location worked out from it.
Plain
Our support inbox. Sees your name, email and what you write to support.
OpenAI
Checks shared photos and notes for safety. Sees only what you shared, with no id; not used for training.
Hive
A second safety check for shared photos OpenAI cannot decide. Sees only the photo, with no id.
AppsFlyer
Measures which of our ads lead to installs and sign-ups, and screens out fake installs. Sees your phone's advertising ID (on iPhone only if you allow tracking), app and install ids, your device and network, an approximate location from the IP address, and three events: install, sign-up and first quest; never your name, email, account id or anything you write.
Anthropic
AI models that help us run the service, such as drafting support replies. Sees the text of a support conversation when it drafts a reply; never intentions or photos.
RevenueCat
Only once Plus, our paid tier, launches: manages App Store and Google Play subscriptions. Sees your account id and purchase records; never your name, email or content.
Stripe
Only once Plus launches: web payments outside India. Sees your email, country and subscription; Stripe handles card details, which we never see.
Razorpay
Only once Plus launches: web payments in India. Sees your email and, for UPI, your phone number; Razorpay handles payment details, which we never see.
Google Workspace
Our email, including the support, privacy and security mailboxes. Sees what you send to those addresses.
When we share it for other reasons
Standard clause, drafted without a lawyer's review
Apart from the companies above, we share your data only:
•
when the law requires it, such as a lawful order from a court or from a government agency authorised under Indian law (the IT Rules give us 72 hours to answer one), and then only what the order asks for;
•
to report an offence the law requires us to report, such as child sexual abuse material;
•
to protect a Member or anyone else from serious harm, or to defend a legal claim;
•
if our company is merged or sold, with the new owner, who must keep the promises in this policy.
Where your data is stored
Your account lives in one Cloudflare database and photo store. We ask Cloudflare to place them in the Asia-Pacific region, but that is a hint Cloudflare does not guarantee, and Cloudflare offers no India-only storage. So we do not promise that your data stays in any one country.
If you are in the EEA or the UK, your data is transferred outside it: to India, where our company is, and to our processors' servers. PostHog and Sentry are hosted in the EU. Each transfer is covered by the European Commission's standard contractual clauses or, for a US processor certified under it, the EU-US Data Privacy Framework; for the UK, by the UK's addendum to those clauses or the UK extension of that framework. You can ask for a copy of these safeguards at the address under Contact.
How we protect it
•
Everything between the app and our servers is encrypted in transit (TLS), and Cloudflare encrypts our database and photo storage at rest (AES-256).
•
Sign-in tokens are stored only in hashed form, and photos are never at a public address.
•
Only a few people on our team can reach Member data, through our company single sign-on, each with only the access their role needs, and every action they take is recorded in an audit log.
•
Our test and live systems are kept apart, and live changes are reviewed before they ship.
If a breach puts your data at risk, we tell you and the authorities as the law requires.
How long we keep it
•
Your account, quests, photos, notes and the Club: while you have an account.
•
The members you block: until you unblock them, or until either account is deleted.
•
The intention you type for a Pass: until the Pass has expired, at most 48 hours.
•
Sign-in sessions: 90 days, or until you sign out.
•
A device you have not used for 180 days is removed.
•
Analytics events: one year in PostHog, and 13 months in our own copies of them; after that, only totals.
•
Crash reports: 90 days. Support conversations: two years.
•
What AppsFlyer measures for our ads: as long as our contract with AppsFlyer says, with no link to your account.
•
Reports and moderation records: two years. A grievance case: three years.
•
Content we remove for breaking the rules: 180 days from removal, even if you delete it or your account, because India's IT Rules require us to keep it as evidence for an investigation; the reports and our decision stay two years, like other moderation records.
•
A minimal record that you signed up (which of Apple or Google, a hashed form of its sign-in id and the date; never your name, email or content): 180 days after your account is closed, as India's IT Rules require.
•
If we end an account for breaking the Terms: a hashed form of its Apple or Google sign-in id and of its email, kept so the same account or email can't sign up again.
•
Search words typed in Discover: 90 days, with no link to you.
•
Backups of our database, used only to recover from a disaster: kept 90 days, so what you delete is gone from them within 90 days. Photos are not in them.
Your rights
•
See and take your data: Settings → Account → Export my data. We email a link to a copy (your data and photos), within 30 days at the latest.
•
Correct it: your name, time zone, interests and settings are editable in the app; your email follows your Apple or Google account.
•
Withdraw a permission, tracking on iPhone included: in Settings, at any time. Object to analytics in the EEA and the UK: see Analytics above.
•
In the EEA and the UK you can also ask us to restrict how we use your data, and take it to another service: the export is a machine-readable file (portability).
You can also write to us at the address under Contact; a request to export or delete your data that way is done within 30 days. If you are in the EEA or the UK, you can also complain to your data protection authority (in the UK, the Information Commissioner's Office). In India, once the rights in the Digital Personal Data Protection Act, 2023 apply (from 13 May 2027), you can complain to the Data Protection Board of India after first raising it with our Grievance Officer.
Deleting your account
In the app: Settings → Account → Delete account. Your account is hidden immediately, and permanently deleted 30 days after your request unless you sign back in: signing in during those 30 days asks whether you want to keep it, and a copy of your data you asked for before still reaches you. Then everything is deleted: your account, quests, photos, notes and Posts, and our processors are told to delete what they hold (PostHog, Customer.io and Plain). Our storage removes the last copies of your photos within 48 hours of the deletion. If you signed in with Apple, we also revoke our access to your Apple sign-in. What AppsFlyer measured for our ads is not linked to your account, so deleting your account does not reach it; to cut the link from your phone from now on, turn tracking off on iPhone or reset your advertising ID on Android.
Without the app: write to support from the email you signed in with, and we delete your account within 30 days.
To step away without deleting anything, use Settings → Account → Take a break. You're signed out on every device and hidden from the Club: your profile and Posts can't be seen. We send you no notifications, your blocker stops, and your streak waits. Nothing is deleted, and signing in again brings everything back. You can take a break once every 7 days.
What we keep: a record that an account existed, with no name, email or content; a minimal record that you signed up (which of Apple or Google, a hashed form of its sign-in id and the date; never your name, email or content), 180 days after your account is closed, as India's IT Rules require; content we remove for breaking the rules, 180 days from removal, even if you delete it or your account, because India's IT Rules require us to keep it as evidence for an investigation, while the reports and our decision stay two years, like other moderation records; if we end an account for breaking the Terms, a hashed form of its Apple or Google sign-in id and of its email, kept so the same account or email can't sign up again; a report you filed, without its note, for two years, for the moderation record; a grievance case, with your name and email removed, for three years; crash reports, which carry the hashed member id and an IP address, until they expire after 90 days; and, once Plus launches, payment records for tax, with nothing linking them to you. Deleted data is gone from our database backups within 90 days.
How to delete your account18 and over
Sidequesting Club is for people 18 and over. We do not ask for your date of birth; you confirm your age when you sign up. If something suggests a Member is under 18, a person on our team looks at it, never an automated system, and a confirmed minor's account is deleted the same day.
What we never collect
•
Anything from inside a Blocked Target: no screen content, no addresses beyond the matched site, no time spent inside, nothing about how you use any other app.
•
Your contacts, calendar, health or financial data.
•
Your precise location: photos lose it on your device, and we never ask for location.
•
Your iPhone's advertising identifier, unless you allow tracking (then only AppsFlyer receives it, for our ads), or your IP address in our analytics.
•
Session recordings or automatic click tracking.
•
Card or bank details: the app stores and payment companies hold those, never us.
•
Anything about people who are not Members: invite links carry a code, not a name.
If you used the earlier app
This version of Sidequesting Club starts fresh: accounts and history from the earlier app are not carried over. The earlier app's data is kept read-only for 30 days after this version launches, then deleted. During those 30 days, write to support for a copy of your history.
support@sidequesting.clubGrievance Officer
Under India's Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, you can raise a complaint about Sidequesting Club, or about something shared in it, with our Grievance Officer. You do not need an account to complain, and you can complain for someone else. We acknowledge it within 24 hours and resolve it within 7 days, and act on a request to remove something within 36 hours. A complaint about a Post that shows you in nudity or a sexual act, or that impersonates you, including with a morphed image, is acted on within 2 hours.
If you are not satisfied with the Grievance Officer's decision, or have no decision in time, you can appeal to the Government's Grievance Appellate Committee within 30 days, at gac.gov.in.
Address
Ambition Forge Private Limited, 235 Binnamangala, 13th Cross Road 2nd Stage, Indiranagar (Bangalore), Bangalore North, Bangalore- 560038, Karnataka
Changes to this policy
Standard clause, drafted without a lawyer's review
When this policy changes, we post the new version on this page and change the date at the top. A change that lets us collect more, use your data for a new purpose or share it with a new kind of company applies no earlier than 30 days after we post it, and we do not start that new use before then. A change the law requires, or one that only fixes wording, can apply sooner.
Before a change applies, you can export your data, withdraw a permission, turn analytics off if you are in the EEA or the UK, or delete your account.