Questree — mobile app
Last updated: October 2026
This covers the Questree mobile app. The website privacy policy is here and covers this site only.
This policy explains what Questree collects when you use the app, how, why, who else sees it, and what you can do about it. We've written it in plain English on purpose — and there's one section, "Your conversations with the coach", that we'd genuinely like you to read rather than scroll past.
Questree is run by Rowley Labs Ltd, a company registered in England and Wales (company no. 17527212), registered office 42 Beaumaris Road, Bournemouth, BH11 9FX. For the purposes of UK GDPR, we are the "data controller" — meaning we decide what happens to your data and we're accountable for it.
Questions, requests, or complaints: support@getquestree.com
Your account details. Your first name, your email address, and a securely hashed password. We never see or store your password in a readable form.
Your onboarding answers. During setup you tell the coach what you're working towards, where you're starting from, what you won't sacrifice, and — if you choose to — where your current path leads if nothing changes. These are stored and used to shape how the coach talks to you.
Your conversations with the coach. Everything you type to your coach, and everything the coach replies. This is stored so your conversations continue across sessions rather than starting fresh each time, and so the coach can refer back to what you've told it.
Your goals and progress. The life areas (pillars) you choose to work on, the skills and quests you set, what you complete, what you skip, and any reflections, mood or effort notes you add when you log something.
Your device timezone. Used to work out which calendar day a log belongs to, so "today" means your today.
Basic usage information. Message counts, timestamps, and whether requests to the coach succeeded or failed. Used to enforce daily limits and to spot faults.
We do not collect your location, your contacts, your photos, or any advertising identifiers. We do not track you across other apps or websites.
We do not buy data about you from anyone, and we do not combine your data with data from other sources.
We do not use your data for advertising, we do not sell or rent it, and we do not use your conversations to train any AI model — and neither do our providers.
Questree is a coaching app, so you may end up writing things about your health, your mental health, your relationships, your finances, or your beliefs. Under UK GDPR some of that counts as "special category" data, which gets extra protection.
Three things you should know:
Please don't share anything with your coach you would be uncomfortable being stored — including other people's personal details.
You can turn AI data-sharing off at any time in the app (You → Coach data sharing). While it is off, the coach cannot reply — it has nothing to send — but your quests, skills and history stay exactly as they are, and you can turn it back on whenever you want. You do not have to delete your account to withdraw this consent.
We use the following providers. Each is bound by a written contract to process your data only on our instructions, and each is contractually required to protect it to a standard at least equal to the protection described in this policy.
| Provider | What they handle | Where | Protection |
|---|---|---|---|
| Supabase | Accounts, onboarding answers, conversations, goals and progress | European Union | Data-processing agreement; protection at least equal to this policy. |
| Anthropic | Generates the coach's replies from your messages and context | United States | Data-processing terms that provide protection at least equal to this policy; your data is not used to train Anthropic's models and is not retained by Anthropic to build its products. Transfers covered by the UK International Data Transfer Addendum or an equivalent approved safeguard. |
| Langfuse | Reliability and cost monitoring (redacted copies only) | European Union | Data-processing agreement; protection at least equal to this policy. |
| Expo | App delivery and over-the-air updates | United States | Processes app-delivery data only; no access to your account contents. Transfers covered by an approved safeguard. |
| Apple | App Store distribution | United States | Governed by Apple's own terms; Apple does not receive your account contents from us. |
Some of these are outside the UK. Where that happens we rely on the UK International Data Transfer Addendum or equivalent safeguards approved under UK GDPR.
We do not sell your data. We do not share it with advertisers. We do not use your conversations to train any AI model, and neither do our providers.
You can export your data yourself, at any time, from inside the app: You → Export my data. This produces a single file containing your profile, your onboarding answers, your skills and progress, your quests, your logs, and your full history with the coach, which you can save or send wherever you like.
If you'd rather we sent it to you, email support@getquestree.com and we'll respond within one month, at no charge.
You can delete your account and everything in it from inside the app at any time: You → Delete account. You'll be asked to confirm twice, because it cannot be undone.
When you confirm, we immediately and permanently delete:
This is a genuine deletion, not a hidden or deactivated account. It is removed from our live systems at once and from encrypted backups within 90 days. We keep no copy afterwards, and there is nothing for us to restore if you change your mind.
If you'd rather we did it for you, email support@getquestree.com.
Under UK GDPR you can ask us to: give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can do the first and third of those yourself in the app (above). You can also withdraw consent at any time, and complain to the Information Commissioner's Office at ico.org.uk.
Email support@getquestree.com and we'll respond within one month. There's no charge.
Questree is not intended for anyone under 18 and we don't knowingly collect data from under-18s. If you believe a child has created an account, email us and we'll delete it.
Data is encrypted in transit and at rest by our providers. Your login session is stored in your device's secure keychain. Access to the production database is restricted to the app's own backend — the app on your phone never holds a key that could read anyone else's data — and users cannot read one another's conversations, something we test rather than assume.
If we change this policy we'll update the date above and, for anything significant, tell you in the app before it takes effect. If we ever add a new provider that receives your data, or start using your data for a new purpose, we'll ask for your consent again rather than carry the old one forward.
Questions? Email support@getquestree.com