Privacy Policy

Effective date: October 26, 2026 · Last updated: October 26, 2026

Balance Quest is a daily balance training app. We built it to collect as little as we can, keep it in Europe, and never sell it. This policy explains what we collect, why, who helps us run the app, and the choices you have.

Contents

1. Who we are
2. What we collect
3. How we use it and why
4. Health-related information
5. Who helps us run the app
6. Where your data is stored
7. How long we keep it
8. Your rights and choices
9. Regional information
10. Children
11. Security
12. This website
13. Changes to this policy
14. Contact us

1. Who we are

Balance Quest is provided by Juan Ortega, an individual developer based in Langley, British Columbia, Canada ("we", "us"). We are the controller of the personal data described in this policy.

For any privacy question or request, email support@balancequestapp.com. We answer requests from every country, including the EU, UK and Switzerland, directly at this address.

2. What we collect

Information you give us

• Onboarding answers: why you are training your balance (for example a health condition, an injury, staying steady as you get older, sport, or a therapist's plan), how steady you feel day to day, where you will practice, and the days and time you want to practice. We never ask for a diagnosis.
• Account details: when you sign in with Apple or Google, we receive an account identifier and the email address and name you choose to share. With Sign in with Apple you can hide your email, in which case we receive a private relay address.
• Therapist plan: exercises, repetitions and notes you enter from a physiotherapist or other professional.
• Support circle: if you invite people to cheer you on, the invitations you send, the progress you choose to share with them, and the cheers and voice notes exchanged in your circle.
• Messages to us: anything you send when you contact support.

Information created when you use the app

• Practice summaries: the exercise, its level, the date and duration of each session, your sway score and whether you completed it, and your progress on the exercise ladder and journey map.
• Motion sensor readings: during practice the app reads your phone's or watch's motion sensors to measure sway. These raw readings are processed on your device and are not sent to us. Only the summary above is stored on our servers.
• Subscription status: whether you have a trial or subscription, which plan, and when it renews or ends. Apple or Google process your payment; we never receive your card details.
• Usage analytics (only if you allow them): which screens you visit and which features you use, linked to a random identifier (and to your account identifier once you sign in), plus your device model, operating system, app version and language. We turn off IP-based location in analytics. Analytics never include your onboarding answers, sway scores, therapist plan or anything you type.
• Crash and error reports: technical details when the app crashes or something goes wrong, such as the device model, operating system, app version and a description of the error. We filter health information and free text out of these reports.
• Notification token: a device token that lets us send the reminders and support circle notifications you turn on.

We do not collect your precise location, contacts, photos, advertising identifier, or browsing history. We do not use Apple Health or Google Health Connect. If we add an optional health integration later, we will ask you first and update this policy.

3. How we use it and why

Data protection law asks us to name a legal basis for each use. The bases below come from the EU and UK GDPR; similar rules apply in other countries.

We do not use your data for advertising, we do not sell or rent it, and we do not share it with data brokers. We do not make decisions about you based solely on automated processing that have legal or similarly significant effects. The app's automatic level changes only adjust exercise difficulty, and you can always choose an easier session.

4. Health-related information

Your reason for training, how steady you feel and your sway scores can reveal information about your health. In the EU, UK and several other places this is a special category of personal data. We handle it as follows:

• We ask for your explicit consent during onboarding before storing it on our servers, and explain what it is used for.
• We use it only to personalize and run your training and to show your progress.
• We never send it to analytics, crash reporting or advertising tools.
• It is shared with your support circle or a professional only when you choose to share it.
• You can withdraw consent in Settings at any time. We then delete your health-related data from our servers and turn off sync, backup and sharing with your support circle; you can keep practicing on this device, with your history stored only there. Withdrawing consent does not affect processing that took place before.

Balance Quest is a general wellness app for balance practice. It is not a medical device and does not diagnose, treat, or predict any condition or falls. The progress report you can export is a summary of your own practice to discuss with a professional if you wish.

5. Who helps us run the app

We use the service providers below. They process data on our behalf, under contracts that limit their use of it to providing their service to us.

When you buy a subscription or sign in with Apple or Google, those companies also process your data as independent controllers under their own privacy policies. We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the app, in which case this policy will continue to apply.

6. Where your data is stored

We chose to keep your app data in the European Union. A few providers (RevenueCat, Expo, Apple, Google and Cloudflare) may process limited data, such as an account identifier, purchase records or a notification token, in the United States or other countries. When data leaves the EU or UK, we rely on the European Commission's adequacy decisions (including the EU-US Data Privacy Framework where the provider is certified) or on Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for a copy of these safeguards.

7. How long we keep it

• Account, onboarding answers, practice summaries, therapist plan: until you delete your account or withdraw consent.
• Support circle messages and voice notes: until the sender deletes them, the circle is closed, or the account is deleted.
• Data from onboarding without an account: if you never create an account, the anonymous profile and its data are deleted from our servers after 90 days without use. You can also delete it sooner from Settings.
• Usage analytics: up to 12 months.
• Crash reports: up to 90 days.
• Support emails: up to 24 months after the conversation ends.
• Purchase and tax records: as long as tax and accounting law requires.

When you delete your account we remove your data from our live systems within 30 days. Copies in encrypted backups are overwritten within 30 days after that.

8. Your rights and choices

Depending on where you live, you have the right to:

• access your data and get a copy of it in a portable format;
• correct data that is wrong;
• delete your data;
• object to or restrict some uses, including uses based on our legitimate interests;
• withdraw consent at any time, without affecting what happened before;
• not be treated differently for exercising these rights.

In the app

• Delete your account: Settings, then Account, then Delete account. This deletes your account and all data linked to it.
• Download your data: Settings, then Account, then Download my data.
• Analytics: Settings, then Privacy, to turn usage analytics on or off.
• Health-related data: Settings, then Privacy, to withdraw consent.
• Notifications: in the app's settings or your phone's settings.

Deleting the app does not delete your account or cancel your subscription. To stop paying, cancel the subscription in the App Store or Google Play; see Support.

If you can't use the app, email support@balancequestapp.com from the address linked to your account, or follow the steps on our account deletion page. We answer within one month (45 days in some US states), and may need to confirm your identity first. You can also complain to your local data protection authority, though we'd appreciate the chance to help first.

9. Regional information

European Economic Area, United Kingdom and Switzerland

The rights above apply under the GDPR, the UK GDPR and the Swiss data protection law. You can contact the supervisory authority where you live or work. Usage analytics are off until you allow them.

Brazil

Under the LGPD you have the rights listed in Article 18, including confirmation of processing, access, correction, anonymization or deletion, portability, information about who we share data with, and withdrawal of consent. Health-related data is processed with your specific consent. You can contact the ANPD. For LGPD requests and questions, our data protection contact can be reached at support@balancequestapp.com.

United States

We do not sell personal information or share it for cross-context behavioral advertising, as those terms are defined in California and other state laws, and we do not use or disclose sensitive personal information for purposes other than providing the app. Residents of California, Colorado, Connecticut, Virginia, Washington, and other states with privacy laws can exercise the rights above, including through an authorized agent. We treat consumer health data under Washington's My Health My Data Act and Nevada's similar law as described in section 4: we collect it only with your consent, use it only to provide the app, and never sell it.

Canada

You can access and correct your data and withdraw consent under PIPEDA and provincial laws, including British Columbia's Personal Information Protection Act and Quebec's Law 25. You can contact the Office of the Privacy Commissioner of Canada, the Office of the Information and Privacy Commissioner for British Columbia, or the Commission d'accès à l'information du Québec.

Mexico and the rest of Latin America

You can exercise your rights of access, rectification, cancellation and opposition (ARCO rights) and withdraw consent by emailing us. You can also contact your national data protection authority.

10. Children

Balance Quest is not directed to children. You must be at least 16 years old to create an account, or older if the law where you live requires it. If you believe a child has given us personal data, contact us and we will delete it.

11. Security

Data is encrypted in transit and at rest. Access to our database is restricted per user by row-level security, so one person's data cannot be read by another account. Only the people who run Balance Quest can access production systems, and only when needed. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.

12. This website

This website uses no cookies, analytics or advertising, and loads no third-party fonts or scripts. Cloudflare, our host, processes your IP address and basic request logs to deliver the pages and protect them from abuse. If you pick Light or Dark in the footer, your browser remembers that choice on your device only; it is never sent to us.

13. Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, for example a new use of your data, we will tell you in the app before it takes effect and ask for consent where required.

14. Contact us

Email support@balancequestapp.com. Balance Quest is made by Juan Ortega in Langley, British Columbia, Canada.