Privacy Policy

Effective date: July 26, 2026 · InvestQuest is operated by GAB International LLC ("we," "us"). Questions: fbarganier@gabint.com

The short version: InvestQuest is an educational game. All investing is pretend. We collect as little as possible: one parent email if you choose a cloud account, first names or nicknames for family profiles, and anonymous usage statistics. Children never create accounts, never give us an email, and never see ads or sales content. We never sell personal data, and we never use behavioral advertising on anyone — especially not minors.

1. What InvestQuest is

InvestQuest (investquest.io) is a family investing-education game: simulated trading with practice money, lessons, quizzes, and a kids mode. It is for educational and entertainment purposes only and does not provide investment advice or handle real money or securities.

2. What we collect — and what we don't

Parent account (optional). If you enable cross-device sync, we collect one parent email address and password. The password is hashed by our authentication provider (Supabase); we never see or store it in readable form.
Family profiles. First names or nicknames, chosen avatars, and game progress (practice portfolios, stars, quiz results, PINs). Without a cloud account, this lives only in your browser on your device. With a cloud account, it's stored in your account so your family can sign in anywhere.
Children under 13. Child profiles are created by a parent, who gives permission at creation. Children have no accounts, no emails, no passwords of our making — just a name/nickname and avatar inside the parent's account. We do not knowingly collect personal information from children beyond this parent-provided profile, and children's screens contain no advertising, links to advisors, or requests for personal information.
Advisor introduction requests (adults only). If you ask for an advisor introduction, we collect what you submit: name, email, phone (optional), state, and topic. This is shared only with our team and the specific advisor matched to you.
Reward redemption requests. Player first name, family name, and the requested prize — used solely to fulfill the reward, and always requiring parent approval first.
Usage analytics. Aggregate, anonymous event counts (e.g., "a lesson was completed by a teen-band player"). No names, no emails, no device fingerprinting, no cross-site tracking.
We do not collect: government IDs, real financial account numbers, real trades, payment card details, precise location, contacts, photos, or behavioral advertising profiles.

3. How we use information

To run the game and sync your family across devices; to fulfill parent-approved rewards; to arrange advisor introductions you request; to keep the service safe; and to understand, in aggregate, which features help people learn. That's it.

4. What we never do

We never sell or rent personal information.
We never serve behavioral (interest-based) advertising — to anyone, and categorically never to minors.
We never show advertising, marketing, or lead-generation content on children's or teens' screens.
We never contact your children. All communication goes to the parent.

5. Service providers

We use a small number of processors to run InvestQuest: Netlify (website hosting), Supabase (account authentication and family-data storage), Finnhub (market prices and news — it receives only stock ticker symbols from our server, nothing about you), and ElevenLabs (voice narration — it receives only the text to be spoken). These providers process data on our behalf under their own security obligations.

6. Affiliate links and advisor fees

Some links on adult screens are referral/affiliate links, and advisors listed in our network pay a subscription or per-introduction fee to participate. These relationships are disclosed where they appear and never influence what children see. Clicking an outbound link takes you to a third party's site governed by its own privacy policy.

7. Data retention and deletion

Device-only families can erase everything with "Sign out of this device" (and by clearing browser data). Cloud accounts keep your family data until you delete the account: email fbarganier@gabint.com from your account email and we'll delete your account and family data within 30 days. Parents may review or delete their child's profile at any time in the app, or ask us to do it.

8. Children's privacy (COPPA)

We designed InvestQuest so that children's participation requires parental permission and involves the minimum possible information — a parent-provided first name or nickname and avatar, stored inside the parent's own account. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us directly, contact us and we will delete it promptly. Parents may review, update, or delete their child's profile and refuse further collection at any time.

9. Security

The site is served exclusively over HTTPS with strict transport security. Passwords are hashed by our authentication provider. API keys and credentials are kept server-side and never appear in the pages we send to your browser. No system is perfectly secure, but there is deliberately very little here to steal: no real money, no real trades, and minimal personal data.

10. Your rights

Depending on where you live (including under state privacy laws such as the CCPA), you may have rights to access, correct, delete, or export your personal information, and to opt out of sale or sharing. We honor these for everyone: email us and we'll help. We do not sell or share personal information for cross-context behavioral advertising, so there is nothing to opt out of on that front.

11. Changes

If we change this policy, we'll update the date above and, for meaningful changes affecting accounts, notify the parent email on file. Continued use after changes means acceptance.

12. Contact

GAB International LLC · fbarganier@gabint.com