Sidequest — Privacy Policy

Last updated: 6 August 2026 · Controller: STOIC AS, Oslo, Norway · Contact: privacy@stoicholding.no

Sidequest helps a group of friends find each other at events. Location can reveal a great deal about a person, so the app starts with sharing paused and lets you control it at all times. This policy explains what we process, why, for how long, and your rights under the GDPR.

What we collect

• An anonymous account. You don't give us an email or phone number. We create an anonymous ID and you choose a display name, avatar emoji, and colour.
• Your live location, only while you choose to share it. It is shared only with the members of the gang(s) you join. We store one last-known position, accuracy, update time, and battery reading; each new update overwrites the previous position.
• Gang content, including membership, Board posts, rally points, and SOS alerts that you choose to send. An SOS may include your last-known location.
• A device push token (optional) so Sidequest can wake your phone for Find or notify you about an SOS.
• Coarse beta diagnostics: anonymous user and gang IDs, app-open/onboarding/feature milestones, platform, build number, and time. These events never contain coordinates, contacts, Board text, or SOS text.

What we do NOT do

• We never sell your location or disclose it to advertisers or data brokers.
• We do not keep a history/track of where you've been — your location row is overwritten with your latest position only.
• We do not send coordinates, contacts, or message text to analytics or advertising tools.
• The beta has no ads and no third-party advertising or tracking SDKs.

Why we process it (legal basis)

We process location based on your consent, given by choosing Sharing. You can withdraw it at any time: Paused stops new updates but keeps the last-known spot for your gang; Ghost stops updates and removes that spot; leaving a gang removes your data from it. We process identity, gang content, and push delivery as necessary to provide the service you ask for. We process the limited beta diagnostics for our legitimate interest in testing reliability and improving onboarding, balanced against the privacy safeguards described above.

How long we keep it

• Location: one last-known position per person and gang. Ghost, leaving, deleting the gang, or deleting your account removes it. Paused deliberately retains the last-known spot.
• Board posts: shown for about six hours. Gangs expire after about seven days and are removed with their associated locations, memberships, posts, alerts, and rally point during routine cleanup.
• Beta diagnostics: deleted after 90 days, or earlier when you delete your account.

Service providers

Supabase hosts authentication, the database, realtime updates, and server functions in the EU. Apple processes push-notification delivery when you enable notifications. Cloudflare serves the invitation and privacy web pages, and the map providers named in the map attribution deliver map tiles. These providers may receive ordinary technical request data such as IP address and device information. They process data to operate Sidequest, not for Sidequest advertising.

Your rights

Under the GDPR, depending on the circumstances, you may access, correct, export, restrict, object to processing of, or delete your data, and withdraw consent. Use Settings → Delete account to remove the anonymous account and associated data, or email privacy@stoicholding.no. You may also complain to the Norwegian Data Protection Authority (Datatilsynet).

Emergency / SOS

The SOS feature alerts the members of your group only. It is not connected to, and is not a substitute for, emergency services. In a real emergency, call your local emergency number (112 in the EU/Norway).

Security

Access to every location, gang, and alert is restricted to that gang's members by row-level security in the database. Traffic is encrypted in transit. No internet service is risk-free; please do not use Sidequest as your only safety plan.

Children

Sidequest is not intended for children under 16.

Changes

We'll update this page if our practices change and revise the date above. Questions: privacy@stoicholding.no.