Privacy policy

Code Quest · Last updated: November 9, 2026

In short: Code Quest can be played without an account and without sending anything over the internet. The account is optional, is created by an adult, and stores the minimum needed to sync progress. There are no ads, no usage analytics, no third-party trackers, and no access to the camera, microphone, contacts or location.

1. Who we are

Code Quest is an educational app that teaches children aged 6 to 12 to code by playing. It is published by VEFLAT SAS, which is also the controller of the data described here. Contact for any privacy matter: info@veflat.com.

2. If you play without an account

Everything stays on the device and nothing is sent to any server:

levels won, stars, unlocked outfits and settings (sound, language, chosen age, character, speed);
unfinished programs and the levels a child builds in Create mode (they are not uploaded to any server);
the parental PIN, if you set one.

It is deleted when you uninstall the app or clear its data in the phone settings.

3. If you create an account (optional)

Only an adult can create one, from the “For grown-ups” section, which is protected by a PIN or a math challenge. When registering, the adult must tick the parental consent for cloud sync.

Data	Why
The adult's email address	To identify the account and sign in.
Password (only an encrypted hash is stored, never the password itself)	To sign in securely.
Date of consent	To keep a record of the parental consent.
A nickname for each child (we do not ask for a real name, birth date, photo or email)	To tell the profiles of one account apart.
Each profile's progress: levels won, stars and settings	To save progress and continue on another device.
Technical connection data (for example, the IP address)	Security and rate limiting against abuse. Not used to profile anyone.

Please do not type full names or personal data into nicknames or level names.

4. What we do not do

We show no advertising.
We use no third-party analytics or crash-reporting services inside the app.
We do not sell data or share it with third parties for marketing.
We do not ask for camera, microphone, contacts or location permissions. The app only needs internet access for the optional account.
There is no chat and no messaging between users.

5. Children

The app is designed for children aged 6 to 12. That is why the game works without an account; the account is managed by an adult; settings and the account sit behind a grown-ups gate; and child profiles only carry a nickname. If you believe a child has provided personal data without a parent's or guardian's permission, write to us and we will delete it.

6. Security

Communication with our servers is encrypted (HTTPS). Passwords are stored as irreversible hashes, sessions use short-lived keys, and repeated sign-in attempts are limited. No system is infallible, but we apply reasonable measures to protect the data.

7. How long we keep data

As long as the account exists. If you delete it, we delete the account and everything that depends on it: profiles, progress and sessions.

8. Your rights and how to use them

Delete: in the app, “For grown-ups” → “Account” tab → “Delete account”. It is deleted immediately and cannot be undone.
Access, correct or request a copy: email us at info@veflat.com from the account's email address.
Depending on your country you may also have the right to object, restrict processing or complain to your data protection authority.

9. Where the data is stored

On VEFLAT SAS servers located in Canada (OVHcloud). If you use the account from another country, your data is transferred there.

10. Changes to this policy

If something important changes we will update this page and the date above. If the change affects children, we will ask the adult for consent again where the law requires it.

11. Contact

VEFLAT SAS · info@veflat.com