Sidequest Privacy Policy

Last updated October 9, 2026.

Sidequest is a chore-and-reward app for families. A parent makes the account and runs the Sidequest family: the parents and children who share chores and rewards in the app. Children use the app on a device the parent sets up. This page covers what data is maintained, why, who else handles it, and how you delete it. Section 3 is the notice to parents about children’s information that US law (COPPA) requires.

1. Who we are

Fletchwork (“we”) is the operator of Sidequest and the controller of the information described here.

• Address: 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States
• Email for anything in this policy, including privacy requests: [email protected]
• Privacy officer: Fletchwork’s founder, at the address above.

2. What we collect

From the parent

• Sign in with Apple identifier. Sidequest has no passwords; Apple gives us a stable identifier for you.
• Email address. The one Apple shares. If you choose Apple’s “Hide My Email”, Apple gives us a private relay address it creates for Sidequest, and we never see your real one. If Apple sends no address, we store a placeholder instead.
• When you start a Sidequest family, where Apple’s age features apply, the app may ask Apple whether the person signing up is an adult. If Apple says they are under 18, the app sends them to set up a child’s device instead. The answer stays on the phone for that moment: we don’t store it, and it isn’t sent to us.
• When you start a Sidequest family on an iPhone or iPad, the device asks Apple to confirm it is running the real Sidequest app. The app sends Apple’s answer to us with your sign-up. We check it and keep nothing that identifies you or your device; our logs record only whether it passed.
• Your name, if Apple passes it on the first time you sign in; what your children’s app calls you (for example “Dad”), if you set it; and the avatar and color you pick from the choices built into the app.
• Family details: the family name you choose, its time zone, and your weekly report preferences.
• Your phone’s notification address (an Apple push token), so we can tell you a chore is ready to check, with when each of your phones last checked in for notifications. If you turn on notifications in a web browser instead, that browser’s notification address and keys.
• When you last signed in, and the last day any parent in your Sidequest family opened the app (used for the 12-month rule in section 7). The other parents in your Sidequest family can see your name, avatar, and when you last opened the app.
• Sign-in and invite records: a sign-in token kept on your device, which stays valid until 30 days after you last use the app; a one-way hash of each Apple sign-in, with Apple’s identifier for you, kept until Apple’s sign-in expires (and cleared at the next sign-in after that) so it can’t be used twice; invites you create for another parent; and counts of recent attempts to join a Sidequest family or to send us a purchase, used to block abuse.
• Devices connected to your Sidequest family, such as a wall display or a home-screen widget: any name you give them, which parent set up a widget, and, for some, when they were last used.
• The internet (IP) address each attempt to start a new Sidequest family comes from, with a count, so we can slow down repeated sign-ups from one place. It isn’t tied to an account, and we use it for nothing else. A clean-up deletes these records about a day after the count started, but it runs when someone signs up or joins a family, not on a timer, so a record can stay longer when the app is quiet. Copies also sit in our backups until they are overwritten.
• If your Sidequest family has Sidequest Plus, the subscription details Apple sends us, so the app knows your family has Plus: which plan it is (monthly or yearly), when it renews or ends, whether it is set to renew, any billing grace period, whether Apple refunded or revoked it, whether it is in or has used the free month, which parent bought it, whether it was a test purchase, and when Apple last updated it. We keep Apple’s number for the subscription only as a keyed one-way digest, so nobody without a secret key held on our server can match it to Apple’s number. We also keep a random code for your family that goes with each purchase, so Apple’s updates reach the right family; when your family used its free month; if Plus ends, which parent keeps control; and, if we give your family Plus at no charge, until when. We don’t keep the price, currency, or country that Apple’s record also shows, and we never receive your card or bank details; Apple keeps those.
• Consent records: which parent agreed, for which child, when and how you agreed, which version of the notice you agreed to, and a fingerprint of that version’s wording, so any later change to the wording shows.

About each child

You add each child. We store:

• a first name or nickname you type;
• an avatar and a color the child picks from the choices built into the app;
• their chores, what they mark done, what you check, the XP and rewards they earn, their achievements and battle pass progress, and the weekly and battle pass season reports made from those;
• the notes and reasons you type about them: when you approve or send back a chore, answer a reward request, or adjust their XP;
• the notices the app shows your Sidequest family (the bell), which repeat names, chores, rewards, and notes from the items above. A notice that has been read is deleted 90 days after it was sent; an unread one stays until it is read or the family is deleted;
• for a child’s device: a code that proves the device is paired (we keep only a scrambled copy of it), the device’s notification address, the name you give the device, which children use it and which one is using it now, when it was paired and last used, and, if it was signed out, when and why;
• for a child’s device, a scrambled code for the Apple Account the device uses. Each time the app starts (when the device is online and signed in to the App Store), the device sends Apple’s signed record of the app’s download. We keep only a keyed one-way hash of the download number in it, so that if a parent withdraws consent through Apple, we can find and sign out that Apple Account’s devices. It is cleared from live records when the device is signed out; backup copies age out as described in section 7.

The app doesn’t ask for a child’s age. Where Apple’s age features apply, a child’s device may ask Apple for the user’s age range when the app starts, and then discards the answer: nothing from Apple’s age check is kept or sent to us.

We do not collect a child’s email address, location, photo, phone number, or contacts, and we never receive the name or email address of a child’s Apple Account. A child does not have an account of their own, and never signs in with Apple. Sidequest has no photo upload.

What we don’t do

• No advertising, and no tracking of you or your child across other apps or sites.
• No analytics or crash-reporting tools from other companies in the app.
• No selling or renting of information.
• No text messages, email, or WhatsApp notifications. Notifications are the app’s own.

If you join the Android wait list on sidequest.family, your email address comes to us in one email. We use it only to tell you when Sidequest is on Android, and then we delete it. Cloudflare’s Turnstile checks that a person sent it. To be taken off sooner, email [email protected].

3. Notice to parents about children’s information (COPPA)

Children use Sidequest only under a parent’s account, and we ask for a parent’s permission before we store anything about a child.

• What we collect from children: what is listed above under “About each child”, and nothing more. The child gives it through the app; we do not ask a child for more than they need to do a chore. Nothing a child enters can be made public; only their own Sidequest family sees it in the app.
• How we use it: only to run the family’s chores and rewards, to send the family’s notifications, and to sign a child’s device out if a parent withdraws consent through Apple.
• How long we keep it: only while the Sidequest family uses Sidequest, so a child’s chores, XP, and history carry from one battle pass season to the next. It is deleted when a parent removes the child or deletes the family, or, from October 2027 at the earliest, after 12 months in which no parent opens the app (section 7). A family with an active Sidequest Plus subscription is kept until the subscription ends; then the same rule applies, and we never delete a family sooner than 30 days after we first tell its parents. Backup copies, including any we download, are deleted within 30 days.
• Who we share it with: our hosting, notification, and support email providers (section 5), and no one else. We do not disclose children’s information to third parties for their own use.
• If you withdraw consent through Apple: Apple tells us, and we sign out the child devices we can match to that Apple Account, in every Sidequest family, and try to tell the family’s parents in the app and by notification. A device that hasn’t been opened, online and signed in to the App Store, since it was paired may not be matched; you can always sign a device out yourself in Settings. We keep a short record of each sign-out (which device and family, when, and why) so that restoring a backup can’t undo it. The child’s chores and XP stay in the family until a parent removes the child.
• Your choices: you can look at everything stored about your child in the app. You can remove a child, or delete the whole Sidequest family, in the app (section 7). To refuse further collection about a child, withdraw your permission for that child in the app (below), or remove the child. You can also email us to see or correct what we hold, or to ask for a copy.
• How we get your permission: when you register, and again as you add each child, the app shows you a notice and asks you to confirm you are an adult responsible for the Sidequest family, and the child’s parent or guardian. You do this in the app, signed in with Apple, and a child’s device can’t be paired until you have. We keep a record of each confirmation. You can withdraw your permission for one child in the app at any time, without removing them. We stop collecting from that child’s devices, sign out their devices (a device shared with a sibling keeps working for the sibling), stop their notifications, and cancel any unused pairing codes. Their history stays until a parent removes the child, and we keep a short record of the withdrawal so that restoring a backup can’t undo it. You can give permission again in the app, and then pair each device again.
• The operator’s contact details: Fletchwork Studio LLC, doing business as Fletchwork, 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States, +1 407-674-3881, [email protected].

There is a shorter, plainer version written for children at sidequest.family/privacy/kids.

4. Why we use it (and our legal basis in Europe and the UK)

• To run your account and Sidequest family (sign you in, keep your family separate from others, show chores and rewards, send notifications). Basis: it is needed to give you the service you asked for.
• To keep the service safe (limit repeated sign-up attempts, check with Apple that a new Sidequest family is started from the real app, keep backups so a mistake or an outage doesn’t lose your family’s history). Basis: our legitimate interest in a service that works and is safe.
• To follow app-store age laws: check with Apple that the person starting a Sidequest family is an adult, and act when a parent withdraws consent through Apple. Basis: our legitimate interest in keeping children out of the parent’s role and honoring a parent’s decision, and, where a law requires it, that law.
• To provide Sidequest Plus (check with Apple that a subscription is real and current, match it to your Sidequest family, give the free month once per family, and keep Plus on while Apple retries a failed payment). Basis: it is needed to give you the service you asked for.
• Children’s information, which you provide as their parent or guardian. Basis: your consent, given when you add the child. You can withdraw it for one child in the app at any time (section 3).

You don’t have to give us any of this. Without the details in section 2, the app can’t run your Sidequest family.

5. Who else handles it

Three companies process information for us, and if you turn on notifications in a web browser, that browser’s push service delivers them (below). None of them may use it for anything but providing their service to us.

• Cloudflare, Inc. hosts the app, stores its database and backups, and forwards email sent to our support address. Cloudflare reports that storage’s placement as eastern North America. That placement is not a promise that the information stays in one country: Cloudflare’s servers are in many countries and handle each request close to where it comes from, so your information may be processed outside the country you live in. Like any web host, Cloudflare sees the internet address each request comes from. For information from the EU, the UK, or Switzerland, Cloudflare’s data protection terms include the European Commission’s standard contractual clauses and the UK and Swiss versions of them; email us for a copy.
• Apple Inc. provides Sign in with Apple, confirms that a new Sidequest family is started from the real app, and delivers push notifications. A notification’s text can include a child’s or a parent’s first name, the name of a chore or a reward, a name a parent gave a device, the name of a parent who just joined, or a note or reason a parent typed, and can show on a locked screen.
• Google LLC hosts our support mailbox (Google Workspace). An email you send us, and anything in it, is kept there while we need it to help you and to keep a record of what we did. You can ask us to delete it. If you write to us from the app’s Settings, or from a sign-up screen that couldn’t finish, the app adds a short list of details to help us fix a problem: the app’s version, your device model, its iOS version, language, and time zone, whether you are signed in as a parent, whether you have Plus, whether notifications and Low Power Mode are on, and the last few errors the app saw. The list holds no names, and you can read or remove it before you send.

When you buy Sidequest Plus, you buy it through the App Store. Apple handles the sale for us (as our agent or reseller, depending on your country), takes the payment, and runs renewals, cancellations, and refunds. Apple handles your payment and Apple Account details under Apple’s privacy policy, and we never receive them. The app gives Apple your Sidequest family’s random code with the purchase, and Apple sends us signed updates about the subscription with that code; what we keep from them is in section 2.

If you use Sidequest in a web browser and turn on notifications there, your browser’s own push service (run by the browser’s maker, such as Apple, Google, or Mozilla) delivers them.

We may also disclose information if the law requires it, or to protect someone’s safety.

6. Who at Sidequest can see it

Fletchwork can access a Sidequest family’s records for support purposes: to fix a problem, or when you ask us to. Nothing in the app lets anyone at Sidequest sign in as you or act as you inside a family, and we do not look at your family’s records for any other reason. The app does have operator tools that reach every family at once: backing up, downloading, and restoring the whole database, deleting backups, and managing the built-in achievements every family shares (removing a built-in achievement also removes it from every child who earned it).

7. How long we keep it, and how to delete it

You can delete your information yourself, in the app, at any time.

• Delete my account is in Settings. If another parent is still in the Sidequest family, it removes you and your sign-in only, and the family stays for them; notes you typed stay in the family’s history, credited to “A former parent”. If you are the last parent, it removes the whole family: every child, chore, history entry, consent record, and paired device. Invites, widgets, and unused pairing codes you made stop working either way.
• If Apple tells us you deleted your Apple Account, we remove you from Sidequest too. If you were the last parent, we remove your own details right away and delete the Sidequest family 30 days later.
• If another parent removes you from a Sidequest family, your account stays, with no family in it, and the child devices you paired are signed out. To delete your account, open Sidequest and choose Delete my account on the screen it shows.
• Remove a child removes that child and their history.
• When you delete something in the app, it leaves our live systems right away. Backups exist only to recover from a failure, and restoring one never brings back an account, Sidequest family, child, or permission you removed. For that, we keep a record of each such deletion: what kind of record it was, its number, its family’s number, when each was made, when it was deleted, why, and, if a parent was removed by another parent, the number of the parent who removed them. It holds no names and nothing anyone typed. We keep this record with no end date. It holds only numbers and dates our system made, and once a family is deleted and its backup copies are gone, nothing links those numbers to anyone. Backup copies, including any we download, are deleted within 30 days. (The sign-up address records and attempt counts in section 2 follow their own clean-up.)
• Sidequest Plus records are kept while your Sidequest family exists and deleted with it. If the parent who bought Plus deletes their account, the record stays with the family but no longer says who bought it; if that parent was the one chosen to keep control, the choice is cleared too. A subscription update from Apple that is never matched to a family is deleted 30 days after that subscription ends.
• Deleting your account or your Sidequest family doesn’t cancel Sidequest Plus. Apple keeps billing until you turn off auto-renew in your Apple Account settings, and Apple keeps its own record of your purchase.
• When you delete your account we also ask Apple to end your Sign in with Apple link to Sidequest.
• If no parent in a Sidequest family opens Sidequest for 12 months, we will delete the family and everything in it. We count those 12 months from October 1, 2026 at the earliest, so no family can be deleted this way before October 2027. We will tell the family’s parents in the app and by notification at least 30 days before, and try to remind them again 7 days before. Opening the app keeps the family; after months away, you sign in with Apple again first. A family with an active Sidequest Plus subscription isn’t deleted this way until the subscription ends; then the same rule applies, and we still tell its parents at least 30 days before. This kind of deletion doesn’t end your Sign in with Apple link to Sidequest; you can remove it in your Apple Account settings.

Sidequest doesn’t offer a self-serve data export yet. Email us and we will send you a copy of what we hold about your Sidequest family.

8. Security

Information is sent over encrypted connections. The keys that keep a child’s device, a wall display, or a widget connected are stored only as one-way hashes. Short setup codes, for pairing a child’s device or a wall display, or inviting another parent, are single-use, and are kept readable only while they can still be used. Codes for a child’s device or a wall display expire 10 minutes after they were last shown; an invite lasts up to 12 hours, and never more than a day. Once used, a code is kept only in a form that can’t be used again, with the Sidequest family, and deleted with it. Sign-in goes through Apple, so we never handle a password. We keep a written security program for children’s information, run by one named person and reviewed every year.

9. Your rights

Wherever you live, you can ask us to show you, correct, or delete what we hold about you and your children, and we will answer within the time your local law sets (one month under the GDPR). You can use the in-app controls in section 7 or email [email protected].

• EU and UK: you also have the right to restrict or object to our use, to move your information to another service, to withdraw consent at any time, and to complain to your data protection authority (in the UK, the Information Commissioner’s Office).
• Quebec: our privacy officer is listed in section 1. Your information is stored with Cloudflare in eastern North America (section 5), and may be held and processed outside Quebec. We assessed the risks of that before launch.
• California and other US states: we don’t sell or share personal information for advertising. You can ask to know, correct, or delete it.
• We check a request comes from your Sidequest family by writing to the email address Apple shared with us when you signed up.
• Complaints: if you’re unhappy with how we’ve handled your information, email [email protected] with “Privacy complaint” in the subject, or write to the address in section 1. We’ll confirm we have it within 30 days, look into it, and tell you what we found and what we did. You can also complain to your data protection authority: in the UK, the Information Commissioner’s Office; in Quebec, the Commission d’accès à l’information; in the EU, the authority where you live.

10. Where Sidequest is available

Sidequest is offered in the App Store in most countries, in English. It is not offered in mainland China or Brazil.

11. Changes

If we change this policy in a way that matters, we will tell parents in the app before it takes effect. If a change alters what we collect about children, we will ask for your permission again first.

12. Contact

Fletchwork, 7901 4th St N, STE 300, St. Petersburg, FL 33702, United States · [email protected].

Sidequest is run by Fletchwork Studio LLC, doing business as Fletchwork, a Florida limited liability company.