Privacy Policy
Last updated: 7 October 2026
Terms · Privacy · Game rules
Who is responsible
CreatifyHer LLC (“LALANDIO”) is the controller of your personal data. Contact: hello@quest.app.
What we collect and why
- Account: email address and the name you choose – to log you in and show you in the ranking and to your group.
- Trip answers: dates, airports, interests, budget, pace, transport, group size – to build your route.
- Location: only at the moment you press “Catch” or “Solve”, to check you are at the place. We store the position and accuracy of each catch to prevent cheating. We do not track you in the background.
- Camera: used live on your phone to show the creature. Images are never recorded or uploaded.
- Game data: cards, points, hints used, group membership.
- Payments: handled by Stripe. We receive confirmation of payment and the package, not your card details.
- Waitlist: email and travel month, if you signed up on our website.
Legal bases (GDPR): performance of our contract with you (account, route, game), our legitimate interest (fraud prevention, security, improving LALANDIO) and your consent (optional statistics, marketing emails). You can withdraw consent at any time.
Ranking visibility
Your display name, points and number of cards appear in the public ranking unless you switch “Show me in the public ranking” off in your Passport. Players in your couple or group always see each other.
Cookies and storage
Essential (always on): login session and game progress saved in your browser. Optional (only with “Accept all”): anonymous usage statistics – not active yet; we will list the provider here before turning them on. We do not use advertising cookies.
Who we share data with
Service providers that run LALANDIO for us: Supabase (database and login), Vercel (hosting), Stripe (payments), an email provider (login and invite emails), OpenStreetMap/CARTO (map tiles) and Google Fonts (fonts). Partner sites like 12Go and Klook receive data only if you click a link and book with them. We never sell your data.
International transfers
Our providers may process data outside your country (for example in the USA). Where required we rely on standard contractual clauses or equivalent safeguards.
How long we keep it
Account and game data: while your account exists, then deleted within 30 days of deletion. Catch locations: up to 12 months. Payment records: as long as tax law requires. Waitlist: until you unsubscribe or we launch.
Your rights
You can ask to access, correct, delete or export your data, object to processing or restrict it, and complain to your data protection authority. Write to hello@quest.app.
Children
LALANDIO is not meant for children under 16 without a parent’s permission.
Changes
We will announce important changes in the app.