Privacy Policy

QuestDo for iOS · published by IT Duck s. r. o.

Last updated: 16 August 2026

Who is responsible for your data

QuestDo is published by IT Duck s.r.o., which is the data controller for the limited processing described below.

Summary

Everything you enter into QuestDo stays on your device. There is no account, no sync, and no analytics.

There is one exception, and it only happens if you agree to it: when you ask QuestDo to work out what a task is worth, the title and description of that one task are sent to an AI service to be classified. You are asked before this ever happens, you can decline, and you can change your mind later. The rest of this policy explains that in detail.

What the app stores on your device

Held in the app's private storage, not uploaded anywhere:

Task classification — the one thing that leaves your device

QuestDo can estimate how demanding a task is, and award experience points accordingly. Working that out requires an AI model, which does not run on your phone.

You are asked first

The first time you ask for a classification, QuestDo explains what will be sent and asks permission. Nothing is sent unless you agree. If you decline:

If you later withdraw permission, QuestDo stops sending anything from that moment. Classifications already made stay on your device as ordinary task data.

What is sent

Only the task being classified:

What is never sent

Who receives it

  1. Cloudflare, Inc. operates the endpoint the app talks to. It relays the request and holds the API key so the key does not have to ship inside the app. It does not store your task text.
  2. Google LLC performs the classification using the Gemini API, and returns a difficulty rating and an optional list of steps.

QuestDo uses the paid tier of the Gemini API. On that tier Google does not use submitted content to train or improve its models. Google's handling is governed by their own terms, currently at https://ai.google.dev/gemini-api/terms.

Because the classification is computed on request and nothing is stored against you, there is no profile of your tasks anywhere. We cannot look up what you have written, because we do not keep it.

Your IP address

The endpoint sees your IP address, as any internet service does. It is used only to apply a per-hour request limit so one source cannot exhaust the service, and is held for that purpose for up to two hours before expiring automatically. It is not combined with your task text and is not used to identify you.

The endpoint does not retain logs of what you sent. Cloudflare may record standard network-level information about the connection in the course of operating its service, under its own privacy terms.

Legal basis, and how to withdraw

The legal basis is your consent, under Article 6(1)(a) GDPR. Consent is optional, and refusing it does not degrade the parts of the app that do not depend on it.

You can withdraw consent at any time in Profile → AI classification. Withdrawing is as easy as giving it, and takes effect immediately.

If we ever change what is sent or who receives it, this policy is updated and you are asked again — an agreement to the old wording is not carried over.

Transfers outside the EEA

Cloudflare and Google are US companies and the request may be processed outside the European Economic Area. Both operate under the EU–US Data Privacy Framework and standard contractual clauses.

Photos

Attaching a photo is always something you start. When you do:

Photos are never sent anywhere, including for classification.

Sharing

You can turn a task into an image and share it. The app draws that image on your device and passes it to the iOS share sheet, where you choose what happens next. No server is involved and we have no visibility into where you send it. Nothing is shared unless you tap Share, and you see the finished image before that happens.

Backups

Your data is included in your device's normal backups. If you back up your iPhone to iCloud or to a computer, your QuestDo data is part of that backup, handled under Apple's privacy policy rather than by this app.

Deleting your data

Both options are entirely under your control:

  1. In the app: Profile → Reset all progress. This permanently erases all tasks, skills, experience points, attached photos and your classification preference on the device. You are asked to confirm twice, because none of it can be recovered.
  2. Delete the app. Removing QuestDo deletes its storage along with it.

Because task content is not retained after a classification is returned, there is no stored copy elsewhere to request the deletion of.

Your rights

Under GDPR you have the right to access, correct, erase, restrict and port your personal data, and to object to its processing.

In practice, your QuestDo data lives on your device and is under your direct control — you can view, edit and delete all of it in the app without asking us, which is faster than any request we could answer. For anything else, or if you believe your data has been mishandled, write to info@itduck.sk.

You also have the right to complain to a supervisory authority. In Slovakia this is the Office for Personal Data Protection (Úrad na ochranu osobných údajov Slovenskej republiky), https://dataprotection.gov.sk.

Children's privacy

QuestDo is suitable for all ages. It does not knowingly collect personal data from anyone, including children. If classification is declined, nothing at all leaves the device.

Changes to this policy

If a future version changes what is transmitted, or who receives it, this policy is updated before that version ships, the in-app disclosure is updated to match, and you are asked for your agreement again. The App Store privacy disclosures are updated at the same time.

Contact

Questions about this policy: info@itduck.sk