Privacy Policy

Last updated: 2026-07-25.

Information we collect

Account info: your email address and password (password is never visible to us — Supabase handles authentication).
Profile info you provide: display name, username, bio, home city, avatar and cover photos.
Taste quiz answers, used to personalize recommendations and generated plans.
Content you create: plans, plan stops, Clips (short videos), captions, ratings, comments, likes, recommendations, and group messages (including any plan you share into a group chat).
Group membership: which groups you're in, who else is in them, and messages sent within them are visible to every member of that group, not just to Questi.
Your device location, only when you use the map, to show and rank nearby venues.
Free-text prompts you type into "Generate for me," used to build your plan and, when a prompt appears to name a specific real place, to search for it.
Usage signals: swipes, views, and similar in-app interaction events, used to improve recommendations. These are automatically deleted after 90 days (see Data Retention below).
If you use a Questi Business account: your business name, contact email and phone number, and any venue information you submit or edit. Business accounts are a separate account type from consumer accounts — see "Business accounts" below.

A Questi Business account is a separate identity from a consumer account — creating one doesn't create or merge with a personal profile, and vice versa.
Approved venue claims, subscription tier (Free/Pro), and any campaign a business creates are visible to consumer users browsing that campaign or venue, as intended by the feature — this isn't a data leak, it's how the marketplace works.

Cash payments between businesses and creators for sponsored campaigns are built into Questi but not yet turned on for real users. Once enabled: payment card details are collected and processed entirely by Stripe, our payment processor — Questi never receives or stores your full card number. Stripe's own privacy policy governs the data you give directly to Stripe.
A creator receiving payouts will need to complete Stripe's own identity verification (Stripe Connect) before funds can be transferred to them.
This section will be expanded with specific detail once payments actually go live — treat it as a placeholder for now, not a complete description.

Supabase — hosts our database, authentication, and file storage.
Google Places and Google Maps — provide venue data, map display, and (for shopping-related searches) Google's Text Search, used when "Generate for me" looks up a specific place you named.
Anthropic (Claude) — powers the "Generate for me" AI plan feature.
Mux — hosts and transcodes Clips video.
OpenTable, Resy, and Eventbrite — only if you tap a "Reserve"/"Get tickets" link, which opens their site in a new tab. We don't share your account data with them.
Google Maps (directions) — tapping "Get Directions" on a shopping venue opens Google Maps with that venue's location; no account data is shared beyond the location itself.
Stripe — once payments are enabled, processes all card and payout information (see "Payments" above). Not currently active for real transactions.

Behavioral usage data (swipes, view events) is automatically deleted after 90 days.
Your content (plans, Clips, ratings, profile info) is kept until you delete it or delete your account.
Deleting your account permanently removes your profile and cascades through your owned content per our database's deletion rules; a few interaction records tied to other users' content (e.g. a like or comment) may be anonymized rather than deleted outright, to avoid breaking others' data.

Questi is not intended for anyone under 17, and account creation requires confirming you meet that age requirement.

We use industry-standard practices (encrypted connections, access controls) to protect your data, but no method of transmission or storage is 100% secure.

We'll update the date at the top of this page if this policy changes materially.