Fret Quest Privacy Policy

Effective October 13, 2026 · Last updated October 13, 2026

1. Who we are

Fret Quest (“the app”) is published by Summit Lane Studios LLC, a Hawaii limited liability company (“Summit Lane Studios”, “we”, “us”). We are the controller of personal data processed through the app and its website pages. This policy explains what we collect, why, who we share it with, and the choices you have. It applies to the Fret Quest mobile apps, web app and the pages for Fret Quest at summitlanestudios.com.

Summit Lane Studios LLC
4754 E Ekahi Way, Unit D
Ewa Beach, HI 96706, USA
support@summitlanestudios.com

2. Information we collect

We collect only what the app needs. We do not collect location, contacts, photos, advertising IDs or cross-app tracking data, and the app contains no advertising, analytics or crash-reporting SDKs.

Account information from Google sign-in (and Sign in with Apple on iPhone, if offered): name, email address and a unique account ID. Used to sign you in and, on the website, for parent/guardian approval.
Learning progress: lessons and quests completed, streaks, XP, badges, settings (such as instrument and left-handed mode), and best tuner and rhythm scores.
Your bard character: the bard name, crest, colour, ancestry, background, alignment and optional short backstory you choose. Please don't put personal details in your bard name or backstory.
Family and band features (optional): member lists and bard names, invite codes (they expire after 7 days), a practice summary (quests done, streak, minutes, instrument, last practice day), bard duel scores and Guild Master gifts.
Tavern stage recordings (optional, opt-in): only if you tick the consent box and share a take. The first 30 seconds are compressed and stored. Only members of the family or band you chose (and the Guild Master, for safety) can hear it, and they can only react with 👏, 🎉 or 🌟. You can delete your clip at any time.
Purchase information: your anonymous app account ID and your subscription or gold-pack status and store receipts (product, price, dates, trial status). We never see your card details.
Technical data: our hosting provider automatically processes standard request data (such as IP address, browser type and time of request) to deliver and secure the service.

Microphone: the microphone is used only while a tool (tuner, chord check, rhythm check, recorder, bard duel) is running. Sound is analysed on your device. Recordings stay on your device unless you choose to share one on the Tavern stage.

3. How we use information

To create and secure your account and sign you in.
To provide the app: save and sync your data across your devices, and run the features you choose.
To process and verify purchases and subscriptions and restore them on new devices.
To keep the service secure, prevent abuse and fix problems.
To answer support requests and send service messages (for example about your account, purchases or changes to this policy).
To comply with law and enforce our terms.

We do not use your data for advertising, and we do not send marketing emails. If we ever do, we will ask first where required and every marketing email will include a working unsubscribe link, our postal address and accurate sender information, as the CAN-SPAM Act requires.

4. Legal bases (EEA/UK users)

Under the GDPR and UK GDPR we rely on: performance of a contract (providing the app and your purchases); legitimate interests (security, fraud prevention, fixing errors and improving reliability, in ways that do not override your rights); consent (optional features you switch on, such as sharing a Tavern stage recording), which you can withdraw at any time; and legal obligation (for example tax records for purchases).

6. Cookies and similar technologies

The app and web app use your browser's or device's local storage, and Firebase Authentication session storage, only to keep you signed in, save your settings and make the app work offline. These are strictly necessary and are not used for advertising or analytics. summitlanestudios.com sets no advertising or analytics cookies. YouTube may set its own cookies only once you play a video.

7. Do Not Track and Global Privacy Control

Because we do not sell or share personal data or track you across other companies' sites and apps, there is nothing for a Do Not Track signal to switch off. We honor Global Privacy Control (GPC) signals as a valid request to opt out of sale and sharing for the browser or device that sends them.

8. Retention

We keep your account data for as long as your account is active. When you delete your account, we delete or de-identify your personal data from our live systems within 30 days, and remaining copies in backups are overwritten within a further 90 days. We may keep limited records longer where the law requires (for example purchase and tax records, generally up to 7 years), to resolve disputes, or to enforce our terms. Purchase records held by Apple, Google and RevenueCat are kept under their own policies.

9. Security

Data is encrypted in transit (HTTPS/TLS) and stored with providers that encrypt data at rest. Access rules limit who can read your data, and we limit our own access to what is needed to run and support the service. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.

10. International transfers

We are based in the United States, and our providers process data in the United States and other countries. If you use the app from outside the US, your data will be transferred to and processed in the US, where laws may differ from yours. For transfers from the EEA, UK or Switzerland we rely on our providers' safeguards, such as the European Commission's Standard Contractual Clauses (and the UK Addendum) or the EU-U.S. Data Privacy Framework where the provider is certified.

11. Children

Fret Quest is intended for users 13 and older and is not directed to children under 13. We do not knowingly collect personal information from children under 13, in line with the U.S. Children's Online Privacy Protection Act (COPPA). On the website, new accounts must be approved by a parent or guardian (the “Guild Master”); users under 18 need a parent or guardian's permission to use the app and to make purchases. If you are under 13, please don't use the app. If we learn that we have collected personal information from a child under 13, we will delete the account and that information promptly. Parents who believe their child under 13 has given us information can contact support@summitlanestudios.com and we will delete it. In the EEA and UK, where the age of digital consent is higher than 13, a parent or guardian must consent for younger teens.

12. Your privacy rights

Depending on where you live, you may have the right to: access or know the personal data we hold about you; correct it; delete it; receive a portable copy; object to or restrict certain processing; withdraw consent at any time (without affecting earlier processing); and opt out of the sale or sharing of personal data, targeted advertising and profiling. We do not sell or share personal data, run targeted ads, or make decisions with legal or similarly significant effects by automated means.

United States residents

Residents of California (CCPA as amended by the CPRA) and other states with consumer privacy laws, including Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, Iowa, Delaware, New Hampshire, New Jersey, Nebraska, Tennessee, Minnesota, Maryland, Indiana, Kentucky and Rhode Island, have the rights above as their state law provides. In the last 12 months we have collected the categories of personal information listed in section 2 (identifiers, account and commercial (purchase) information, internet or other electronic activity information, and user content) from you and your device, for the business purposes in section 3. We disclose them only to the service providers in section 5. We have not sold or shared (for cross-context behavioral advertising) personal information, and we have no actual knowledge of selling or sharing data of consumers under 16.

We will not discriminate against you for exercising your rights. You may use an authorized agent; we may ask the agent for proof of authorization and ask you to verify your identity. We verify requests by matching them to the email address on your account. If we deny a request, you may appeal by replying to our decision with the subject “Privacy appeal”; we will respond within the time your state law requires (generally 45 to 60 days). If your appeal is denied you may contact your state Attorney General.

EEA, UK and Swiss residents

You have the rights in the GDPR and UK GDPR described above. You may also lodge a complaint with your local data protection authority (in the UK, the Information Commissioner's Office). We respond to requests within one month, extendable as the law permits.

How to exercise your rights

Email support@summitlanestudios.com with the subject “Privacy request”, or use the in-app tools (deletion, and export where available). We respond within the time required by applicable law: generally 45 days in the US and one month in the EEA/UK.

13. How to delete your account and data

In the app go to Settings → Account → Delete account and confirm. You can also follow the steps on our account deletion page or email support@summitlanestudios.com from the address on your account with the subject “Fret Quest account deletion”. Deleting your account does not cancel an App Store or Google Play subscription; cancel it in your store account settings.

14. Changes to this policy

We may update this policy. We will post the new version here and change the “Last updated” date. If changes are material, we will tell you in the app or by email before they take effect and, where the law requires, ask for your consent.

15. Contact us

For questions, requests or complaints about privacy: