Privacy Policy
This policy explains how QuestNudge collects, uses, and stores personal information when you use the QuestNudge app, this website, and the QuestNudge Alexa skill. It matches how the product works today.
Who this covers
A parent creates the QuestNudge account and, if they choose, child profiles. The Alexa skill is linked to that parent’s Amazon account. Children do not need their own Amazon accounts or email addresses.
Information we collect
- Parent account. Name, email address, password (stored only as a hash), and time zone.
- Child profiles. Name, username, an optional PIN or password (stored only as a hash), and which parent the child belongs to. A child email address is optional.
- Routines. Task titles, descriptions, categories, schedules, due times, points, estimated minutes, subtasks, and whether a task was completed and when.
- Alexa account linking. When a parent links the skill, we store Amazon’s user id for that account and the tokens needed to keep the link working.
- Alexa voice profiles. If a recognized voice is used, we store Amazon’s person id for that voice so a parent can assign it to a child. We do not receive or store the audio of what anyone says. Amazon processes the speech and sends us the request, such as “what tasks do I have” or a child name you spoke.
- Alexa devices. The device id of an Echo that opens the skill, an optional label you set in the app, and the last time that device opened the skill.
- Alexa reminders. If you allow reminders, we send Amazon the reminder text and time so it can nudge a routine, and we store Amazon’s reminder id so we can update or remove it later.
- Google Tasks, only if you connect it. We store Google OAuth tokens and the Google task ids needed to sync open QuestNudge tasks. We do not connect Google unless you do.
How we use it
We use this information to run the account, show each child their routines, answer Alexa requests, create and update Alexa reminders, and, if you turn it on, sync tasks to Google Tasks. We also use it to keep the service secure, such as checking a password or linking the right household.
We do not sell personal information. We do not use it for advertising, and the skill does not show ads.
Children
Child information is provided by a parent. We use a child’s name and routines to speak the right tasks and to remember which voice belongs to which child. We do not ask a child to create an Amazon account, and we do not use child information for marketing.
Who we share it with
- Amazon receives skill requests and, when reminders are allowed, the reminder text and schedule. Amazon also hosts the account-linking step in the Alexa app.
- Google receives task details only if a parent connects Google Tasks.
- Hosting providers store the website (Vercel) and the app service and database (Render, or a PostgreSQL host we use for that database).
We do not share personal information with other companies for their own marketing. We may disclose information if the law requires it.
How long we keep it
We keep account, routine, and Alexa link data while the parent account is open. Short-lived Alexa API tokens expire and are replaced or cleared. Parents can delete tasks in the app.
To close a parent account or delete a child profile, email us from the parent email on the account. We will delete that account and the information stored with it, including child profiles, tasks, and Alexa links.
Your choices
- You can skip account linking. The Alexa skill cannot read your tasks until a parent links the account.
- You can turn off reminders in the Alexa app. The skill can still list and complete tasks.
- Voice profile mapping is optional. Without it, a speaker can still say a child’s name.
- You can disconnect Google Tasks. Sync stops when the Google link is removed.
Security
Passwords and child PINs are stored as hashes, not as plain text. Traffic to the website, app API, and Alexa webhook uses HTTPS. No method of storage is perfectly secure.
Changes
If this policy changes, we will update this page and the effective date. For a material change, we will also update the skill listing.
Contact
Questions, access requests, and deletion requests: privacy@questnudge.com. Include the parent email on the QuestNudge account so we can find the right records.