Privacy policy | Health Quest Ally

Last updated: 28 July 2026

1. Overview

Health Quest Ally ("the App") is operated by Alexander Djurovic ("we", "us", "our") in Brisbane, Australia. This policy explains how we handle information when you use the App.

2. What we collect

When an account is created, we collect:

First name
Age
Health condition information, meaning the condition selected during setup
Fitness and workout activity data, such as XP, streaks and badges
A parent or guardian email address, used to create and manage the account

3. How we store your data

Your account and progress are stored securely in the cloud, using Supabase, so your progress is not lost if you change or lose a device. Some settings, such as notification preferences, are also stored on your device.

If you grant permission, the App can read Apple Health data on your device. That data stays on your device and is never sent to our servers.

4. Data sharing

We do not sell, rent or trade your data, and we do not show advertising.

We use a small number of service providers to run the App:

Supabase, which hosts account and progress data
RevenueCat, which tells us whether a subscription is active
Resend, which sends account emails

Subscription payments are handled by Apple. We never see or store your card number or bank details.

5. What we do not collect

No government or personal ID numbers
No location or GPS data, ever
No photos and no camera access
No microphone recordings
No browsing history or activity outside the App
No card numbers or bank details
No contact lists or phone book

6. Children's privacy (COPPA)

The App is used by children, and a child's account is set up and managed by a parent or guardian behind a consent gate. We follow the Children's Online Privacy Protection Act (COPPA).

There is no social feed, no user-generated content, and no chat with other users. We do not sell children's data to anyone, and we do not show advertising.

7. Your rights

You can sign out at any time.

Uninstalling the App does not delete your account data, because that data is stored in the cloud. To delete an account and everything associated with it, email privacy@healthquestally.com and we will action it within 30 days.

Parents and guardians can ask what we hold about their child, ask us to correct it, or ask us to delete it. We will respond within 30 days.

8. Changes to this policy

If we change how we handle your information, we will update this page and change the date at the top. Material changes affecting children's data will also be notified to the parent or guardian email on the account.

9. Contact us

For privacy enquiries: privacy@healthquestally.com

We are a small team. We will always do our best to help.