Privacy Policy for HistroQuest

Last updated: 12 August 2026

This Privacy Policy explains how personal data is processed when you use the mobile application HistroQuest (“the App”).

1. Data Controller

The controller responsible for processing personal data in connection with HistroQuest is:

Niels Cimpa
Redtenbachergasse 25
1160 Vienna
Austria

Email: support@histroquest.com

2. About HistroQuest

HistroQuest is an interactive educational application that provides historical stories, learning activities and related digital content.

We process only the information necessary to:

• provide and operate the App;
• create and manage user accounts;
• save learning progress and settings;
• provide access to purchased or unlocked content;
• manage purchases and subscriptions;
• protect the App and its content against misuse; and
• respond to support requests.

We do not sell or rent personal data. HistroQuest does not contain third-party advertising and does not use personal data for targeted advertising.

3. Anonymous Accounts

When HistroQuest is first used, an anonymous account may automatically be created through Firebase Authentication.

The following information may be processed:

• an anonymous user identifier;
• authentication tokens;
• technical connection information;
• timestamps relating to registration and authentication; and
• information required to operate and secure the account.

The anonymous identifier does not directly contain your name or email address. It allows the App to recognise the account, save progress and provide access to appropriate content.

If you later sign in with Apple or Google, the anonymous account may be linked to the selected sign-in provider so that progress, purchases and unlocked content can remain associated with the same account.

The legal basis for this processing is Article 6(1)(b) GDPR, as the processing is necessary to provide the App, and Article 6(1)(f) GDPR, based on our legitimate interest in operating and securing HistroQuest.

4. Sign in with Apple

You may choose to sign in using Sign in with Apple.

When you use this option, Apple provides HistroQuest with a provider-specific user identifier. Depending on your Apple settings and choices, Apple may also provide:

• your name;
• your email address; or
• a private relay email address generated by Apple.

Apple generally provides the name and email information only during the first authorisation. HistroQuest does not receive your Apple ID password.

The information received from Apple is used to create or identify your HistroQuest account, restore progress and provide access to unlocked or purchased content.

The legal basis is Article 6(1)(b) GDPR.

Apple may independently process information about your use of Sign in with Apple. Further information is available in Apple’s Privacy Policy:

5. Google Sign-In

You may choose to sign in using your Google account.

When you use Google Sign-In, Google may provide HistroQuest with:

• a provider-specific user identifier;
• your email address;
• your display name; and
• your profile picture, where available.

The exact information provided depends on the permissions displayed during the sign-in process and the information associated with your Google account. HistroQuest does not receive your Google password.

This information is used to create or identify your HistroQuest account, restore progress and provide access to unlocked or purchased content.

The legal basis is Article 6(1)(b) GDPR.

Google may independently process information about your use of Google Sign-In. Further information is available in Google’s Privacy Policy:

6. Learning Progress and App Settings

HistroQuest may process and store information such as:

• completed chapters and lessons;
• learning progress;
• answers and activity status;
• unlocked content;
• app settings;
• technical account status; and
• information required to restore access to content.

Some information may be stored locally on your device. Where cloud storage or synchronisation is used, the information may be associated with your HistroQuest user identifier.

This processing is necessary to provide the App’s learning functions and maintain your progress.

The legal basis is Article 6(1)(b) GDPR.

7. Firebase and Google Cloud Services

HistroQuest uses Firebase and Google Cloud services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and affiliated Google companies.

The services used by HistroQuest may include:

• Firebase Authentication;
• Cloud Firestore;
• Cloud Storage for Firebase; and
• Cloud Functions for Firebase.

These services are used to:

• create and authenticate user accounts;
• save account information and learning progress;
• provide App content;
• verify access rights;
• generate protected access to downloadable content;
• operate server-side App functions; and
• protect the technical infrastructure against misuse.

Depending on the service and request, Google may process:

• Firebase and provider-specific user identifiers;
• IP addresses;
• device and operating-system information;
• app version;
• authentication tokens;
• request information;
• server logs; and
• timestamps.

The legal basis is Article 6(1)(b) GDPR where processing is necessary to provide the App and Article 6(1)(f) GDPR where processing is necessary for security, fraud prevention and reliable operation.

Further information about privacy and security in Firebase is available at:

Google’s Privacy Policy is available at:

HistroQuest does not currently use Firebase Analytics or Firebase Crashlytics. Accordingly, HistroQuest does not currently use those services to collect analytics events, screen views or crash reports.

8. Purchases and Subscriptions

Purchases and subscriptions are processed through the platform from which HistroQuest was downloaded, such as the Apple App Store or Google Play.

We do not receive or store your complete payment-card or bank-account details.

The platform provider may process information such as:

• purchased products or subscriptions;
• purchase and subscription status;
• transaction identifiers;
• purchase receipts;
• renewal and expiry dates;
• country or storefront; and
• information required to process, restore or refund a purchase.

HistroQuest receives only the information necessary to determine whether content should be unlocked and whether a purchase or subscription remains valid.

The legal basis for processing purchase and subscription information is Article 6(1)(b) GDPR. Certain transaction information may also be retained under Article 6(1)(c) GDPR where necessary to comply with legal, accounting or tax obligations.

Purchases made through Apple are also subject to Apple’s Privacy Policy:

Purchases made through Google Play are also subject to Google’s Privacy Policy:

9. RevenueCat

HistroQuest uses services provided by RevenueCat, Inc., 1032 E Brandon Blvd #3003, Brandon, FL 33511, United States, to manage purchases, subscriptions and access rights.

RevenueCat may process:

• a HistroQuest user identifier;
• device type and operating system;
• app version;
• purchase and subscription status;
• transaction identifiers;
• Apple purchase receipts;
• Google purchase tokens;
• the time the App was last used; and
• technical information required to validate and restore purchases.

RevenueCat does not receive complete payment-card details from HistroQuest. Payment processing remains the responsibility of Apple, Google or the relevant platform provider.

RevenueCat processes this information on our behalf to determine whether premium content should be unlocked and to restore purchases across supported devices.

The legal basis is Article 6(1)(b) GDPR.

RevenueCat states that customer data is stored using Amazon Web Services infrastructure in the United States. Amazon Web Services is used as RevenueCat’s infrastructure provider and is not integrated directly into HistroQuest by us.

International transfers are protected through contractual or other safeguards recognised under applicable data-protection law.

Further information is available in RevenueCat’s Privacy Policy:

10. Support Requests

If you contact us at support@histroquest.com, we process the information you provide, which may include:

• your email address;
• your name;
• the content of your message;
• technical account information;
• screenshots; and
• other attachments or information you choose to provide.

This information is used solely to respond to your request, investigate technical problems or resolve account and purchase issues.

The legal basis is Article 6(1)(b) GDPR where your request concerns the use of the App, an account or a purchase. For other enquiries, the legal basis is Article 6(1)(f) GDPR, based on our legitimate interest in responding to communications and providing support.

Support correspondence is retained only for as long as necessary to handle the request and comply with applicable legal obligations.

11. Children and Young Users

HistroQuest is a general-audience educational application and is not specifically directed at children.

The App does not contain personalised advertising and is not intended to create advertising profiles of children or young users.

If a young user is not legally permitted to provide personal data or create an online account independently under the laws applicable to them, the App should be used with the involvement and supervision of a parent or legal guardian.

If you believe that a child has provided personal data inappropriately, please contact us at support@histroquest.com so that we can review and, where required, delete the relevant information.

12. International Data Transfers

Some service providers used by HistroQuest are located in, or process information in, countries outside the European Economic Area, including the United States.

Where personal data is transferred outside the EEA, the transfer is based on:

• an adequacy decision adopted by the European Commission;
• approved Standard Contractual Clauses;
• the EU–US Data Privacy Framework, where applicable; or
• another legally recognised transfer mechanism.

Additional technical and organisational safeguards may be applied where necessary.

13. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this Privacy Policy.

In particular:

• account and progress information may be retained while the HistroQuest account remains active;
• authentication information is retained while required to provide and secure the account;
• purchase and subscription information may be retained for the duration of the relevant purchase or subscription and for legally required accounting or dispute-resolution periods;
• support correspondence is retained for as long as necessary to resolve the request;
• local information remains on your device until it is deleted through the App, the App is uninstalled or the device data is otherwise removed; and
• server logs and security information are retained according to the applicable service provider’s retention periods.

Information may be retained for longer where required by law or where necessary to establish, exercise or defend legal claims.

Information that is no longer required will be deleted or anonymised.

14. Account and Data Deletion

You can delete your HistroQuest account directly within the App by navigating to:

Settings → Account → Delete Account

Deleting your account initiates the deletion of the personal data associated with your HistroQuest account, including cloud-stored account information and learning progress, unless specific information must be retained to comply with legal obligations.

Deleting the HistroQuest App from your device does not automatically delete your account or cloud-stored information. To delete this information, you must use the Delete Account function within the App.

You may also contact support@histroquest.com if you require assistance with an account-deletion request.

Certain transaction records may be retained where required by tax, accounting, fraud-prevention or other legal obligations.

Subscriptions must be cancelled separately through the Apple App Store, Google Play or the platform through which the subscription was purchased. Deleting your HistroQuest account does not automatically cancel an active platform subscription.

15. Your Data-Protection Rights

Subject to the requirements and limitations of the GDPR, you may have the right to:

• obtain information about the processing of your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• receive certain information in a structured, commonly used and machine-readable format;
• object to processing based on legitimate interests; and
• withdraw consent where processing is based on consent.

To exercise these rights, contact:

support@histroquest.com

Because HistroQuest may use an anonymous account, we may need your HistroQuest user identifier or other information shown in the App to identify the relevant account and verify the request.

You also have the right to lodge a complaint with a data-protection supervisory authority.

In Austria, the competent authority is:

Austrian Data Protection Authority
Barichgasse 40–42
1030 Vienna
Austria

16. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss, disclosure or destruction.

These measures include authenticated access, protected cloud storage, encrypted data transmission and server-side verification of access rights.

No electronic transmission or storage system can be guaranteed to be completely secure. However, we regularly review the technical measures used to protect HistroQuest and its users.

17. No Advertising or Sale of Personal Data

HistroQuest does not currently contain third-party advertising.

We do not:

• sell personal data;
• rent personal data;
• use personal data for third-party behavioural advertising; or
• allow third-party advertisers to track users through the App.

If these practices change in the future, this Privacy Policy and any necessary consent mechanisms will be updated before the relevant processing begins.

18. Changes to this Privacy Policy

We may update this Privacy Policy when HistroQuest, its functions, its service providers or applicable legal requirements change.

The current version will be available at:

The date at the beginning of this Privacy Policy indicates when it was last updated.

19. Contact

If you have questions about this Privacy Policy or the processing of personal data in connection with HistroQuest, please contact:

Niels Cimpa
Redtenbachergasse 25
1160 Vienna
Austria

Email: support@histroquest.com