Effective 1 September 2026 · Last updated 8 September 2026
Questing measures your real-world activity to give you screen time back. The things it touches that matter most — which apps you block, how long you spend on your phone, your health data and your photos — are read on your device and stay there. What reaches our servers is an account identifier, the minutes you have been granted, and the few settings needed to grant them.
This policy explains that in full. It applies to the Questing iOS app and to
ilovequesting.com. The service is operated by
Vision Communications Group, Norrsken House, 1 KN 78 St, Kigali, Rwanda ("we", "us").
Three categories, and each is a design constraint in the code rather than a promise about our intentions.
With your permission, Questing reads a narrow set of data from Apple Health to verify the quests you complete: step count, workouts, and mindful minutes. Access is read-only — Questing never writes to Health and does not request permission to.
Health data is evaluated on your device. What reaches our servers is the fact that a
named quest was completed — for example steps_1000 — never the underlying
samples, your step counts, your heart rate, your workout details, or anything else. Samples
that Health marks as manually entered are discarded rather than counted.
We do not use health data for advertising or marketing, do not sell it, do not share it with third parties, and do not use it for any purpose other than improving and providing Questing's core function. You can withdraw access at any time in Settings → Privacy & Security → Health → Questing; quests that rely on it will simply stop completing.
This is the complete list. It is short because the server is deliberately thin.
| What | Why |
|---|---|
| An account identifier (a random UUID created on your device on first run) | To attribute your minutes to you and to survive a reinstall |
| A subject identifier from Apple or Google, if you sign in | To recognise you on a new phone. Not your name or email address |
| Your minute ledger: each grant's kind (allowance, quest, top-up, Plus unlock), the quest it relates to, the number of minutes, the day, and a timestamp | To apply daily and weekly caps, and to stop allowances being reissued |
| Days off and guardrail loosenings you have used | The same — these are rationed per month |
| Your daily budget in minutes | Your base allowance is a share of it |
| Whether your subscription is active, and the timestamp of the last store event | To unlock Plus features and to apply store events in the right order |
| For each signed-in device: a hash of its session token, its expiry, and when it was last used | To keep you signed in and to let you sign out |
| A store transaction identifier, for a purchase | To verify with the store that a purchase happened before granting minutes |
| A notification token for each device, if you turn notifications on, and whether it is an iPhone or an Android phone | So we can send you announcements about Questing. It is an address to deliver to and says nothing about what you do on your phone |
| Product events: which screen you opened and which button you pressed, the time your device says it happened, whether you were subscribed at that moment, and — for some events — which quest or which plan it was about | To see which parts of Questing get used and which do not. You can turn this off from the Me tab. See section 5, which lists exactly what is and is not recorded |
The country your phone's language and region settings are set to (for example
GB) |
To know roughly where Questing is being used. It comes from your phone's own settings, not from your IP address, which we do not store or look up |
An account reference of the form RW-00000001 — a number assigned in
order, and a country prefix taken from the setting above |
So there is something short you can quote to support, and something we can look you up by that is not a name |
| Your sidekick: which of the six characters you chose, and the name you gave it | So your squad and, if you have linked one, your guardian see a name rather than a row of identifiers. It is the only name Questing has for you, and you typed it |
| Which quests you have switched on | So the same set is there on a new phone. Nothing is priced from it — a completed quest is paid at the rate in our own economy, never at one your device proposes |
| Which squad you are in, if any, and that squad's invite code | So the squad has members and the link you share leads to it. See section 7 |
| Whether you are linked to a guardian, or are a guardian of others, and when a link ended | So the Questing report reaches the right person, and so ending it shows as ended rather than as somebody disappearing. See section 7 |
| Whether you have turned announcements off | So we stop sending them. One setting, changed from the Me tab, and it is the only thing recorded about it — not when you changed it, and not how many times |
| If you report a squad member’s sidekick name: that you reported it, whose it was, the name as it stood at that moment, and when | So we can look at it and act on it. There is nowhere to write anything, so a report cannot carry anything about you or about them beyond this. See section 7 |
We do not store your name, email address, phone number, contacts, location, IP-based profile, or advertising identifier. Session tokens are stored only as a SHA-256 hash, so a copy of our database is not a set of working credentials.
Your balance is not stored on our servers. It is worked out on your device, which is the only place both halves of the sum exist.
Notifications are off until you turn them on. Questing asks once during setup, on the screen about streaks, and you can turn them on later from the Me tab instead — nothing is sent either way until you say yes. If you do, we store a token that identifies your device to the push service, and nothing else about it.
What we send is news about Questing — a new quest, a change to how the economy works, a word from us. A notification from Questing will never mention your screen time, an app you use, or how long you have spent on your phone. That is not only a promise about tone: the data does not exist on our servers to put in one. Screen time is measured on your device and never transmitted (section 1), so there is nothing for a notification to report even if we wanted it to.
There is a switch in the app. The same row on the Me tab that turned notifications on turns them off again: tap it and we stop sending, immediately and for every device on your account. We record that you asked us to stop, and nothing else about it. You can turn them back on from the same row, without iOS asking you anything a second time.
Turning them off in Settings → Notifications → Questing works too, and so does deleting the app — but those stop your phone showing what we send, where the switch in the app stops us sending it at all. The delivery token is discarded the next time the push service tells us it is no longer valid.
There is no advertising SDK, no third-party analytics SDK, and no tracking. We do not use cookies for tracking, do not fingerprint devices, and do not participate in any advertising network. We do not track you across other companies' apps or websites, and we do not ask for permission to, because we have nothing to do with it. Nothing described below is shared with anyone — it goes to our own server and stays there.
We do record product analytics of our own, on by default, and you can turn it off at any time from the Me tab under Help improve Questing. It is attached to your account identifier, which is what makes "how many people finished onboarding" a question we can answer.
What is recorded is a closed list, fixed in the app's code, and every item on it is something you did inside Questing:
What is never recorded, by design and not by policy: how long you spend on your phone, which apps you chose to lock, how many of them there are, when a shield appeared or how long it stood, or any number that could only exist because Apple's Screen Time frameworks told us. Those numbers are not withheld — they are never sent, so we do not have them to withhold. Section 1 explains why this is a property of how the app is built rather than a promise about how we behave.
Health figures are not recorded either. A completed quest is recorded by name; the steps, workout minutes or mindful minutes behind it stay on your device (section 2).
Each processes data only to provide these functions. We do not sell your personal information, do not share it for cross-context behavioural advertising, and have never done either.
Squads show only what a member has done inside Questing — the sidekick's name, quests completed and minutes earned. Never app usage, never which apps anyone blocked, never a balance. No member can change another member's settings, budget or shields; squads are visibility only.
Where a parent or guardian is linked to a child through Apple's Family Sharing, the guardian sees the same kind of report: which quests the child finished this week and the minutes those paid. They do not see the child's screen time or app usage — and on iOS that is not merely our policy, since those figures are rendered by the operating system in a sandbox that no third-party app can read.
The streak is on neither. It counts days your phone was actually protected, which it works out from whether Screen Time is granted and whether the shield was standing — and those are exactly the facts section 1 says never leave your device. So the streak is settled on your phone, is not sent to us, and is not something we could show anyone even if it were asked for.
Leaving, and reporting a name. You can leave a squad at any time from the Squad tab, and you go back to a squad of your own with your own invite link. Nobody is told. If a member has named their sidekick something offensive, the flag beside their row reports that name to us; we look at every report, and the person is not told who reported them. A name we act on is added to a list the server checks, so the next person to try it is refused too — which is also why every sidekick name is checked before anyone else can see it.
Questing is not directed at children under 13, is not offered to them, and we do not knowingly collect personal information from them. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
The guardian feature is for young people aged 13 and over, and it is worth being exact about who agrees to what, because the report is built from health data. A guardian can share a code and can do nothing else: the link is made on the young person’s own device, on a screen that lists what a guardian will see before anything is shared, and it is ended from the same screen. A guardian cannot add somebody, cannot see their screen time or their apps, and cannot change any setting, budget or restriction on their phone — not as a matter of our policy, but because Apple’s Family Controls terms do not permit an app to do it.
Product events (section 5) are deleted after 400 days. That is a scheduled deletion rather than an intention — a job runs and removes them. Everything else in section 3 is kept while your account exists, because it is what the account is: your ledger, your budget, your subscription state.
Your ledger is kept for as long as your account exists, because it is what prevents allowances being reissued — a ledger that forgets is a ledger that refunds. Session records are deleted when you sign out and expire automatically after one year. When you delete your account in the app, everything in section 3 is deleted immediately — it is a single database transaction, not a job scheduled for later. If you ask us by email instead, we will do it within 30 days.
Three things outlast it, and we would rather name them than let "everything" do work it cannot do:
We also keep records of a transaction where tax or accounting law requires it, which is the one exception the law does not let us give up.
We are established in Rwanda and our servers and database are operated by our hosting provider in the United States. Your data is therefore processed outside Rwanda.
Rwandan law — Law N° 058/2021 relating to the protection of personal data and privacy — regulates transfers of personal data outside Rwanda, and we handle this transfer in accordance with it, including obtaining the supervisory authority's authorisation where that is required. If you are in the UK, EU or EEA, transfers out of your country are covered by the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, as applicable, together with our contractual terms with our hosting provider.
Depending on where you live, you have some or all of these rights: to access the data we hold about you, to correct it, to have it deleted, to receive a copy in a portable format, to object to or restrict how we process it, and to withdraw consent.
You also have the right to complain to a data protection authority. In Rwanda, where we are established, that is the National Cyber Security Authority, which supervises Law N° 058/2021. In the UK it is the Information Commissioner's Office; in the EU/EEA, your national authority.
To delete your account and everything in section 3, open the app and go to Me › Delete account. It happens immediately and needs nothing from us. You can also email us at the address below from the account you signed in with, and we will confirm within 30 days. We will not charge you, and will not make the service worse for you because you asked.
Deleting your account does not cancel a Questing Plus subscription: Apple bills that, not us, and it is cancelled in Settings › your Apple Account › Subscriptions. The app says so on the deletion screen and links you there.
Traffic between the app and our servers is encrypted in transit. Session tokens are stored only as hashes. Access to the production database is limited to those who need it. No system is perfectly secure, and we will tell affected users and the relevant authority without undue delay if a breach affects personal data.
If this policy changes in a way that affects you, we will tell you in the app before the change takes effect, and update the date at the top.
Questions, requests, or anything here that looks wrong:
info@visioncgrp.com
Postal: Norrsken House, 1 KN 78 St, Kigali, Rwanda