Trust Centre
Your information, treated the way it deserves.
QUEST holds some of the most sensitive information a family can have. This page explains, in plain English, what we do to protect it, how the Companion works, where your data lives, and the choices you have.
Last updated: 17 July 2026
How QUEST protects your information
- Every account is separated from every other account by strict row-level security in our database. Another user cannot see your Journey, even by accident.
- Documents you upload are stored in a private bucket and only served to you through short-lived signed links.
- Passwords are checked against the Have I Been Pwned breach database at sign-up and password change, so you can't reuse a password known to be leaked.
- All traffic is served over HTTPS. Backups are held in the same UK/EU region as your live data.
- We minimise data: we don't collect any information about you beyond what's needed to run QUEST for you.
Privacy Policy
Controller. QSP Technologies Ltd (in formation). Registered address to be confirmed on incorporation, United Kingdom. The company is currently being incorporated. This page will be updated with the final registered name, company number and address once Companies House confirms them.
Contact. Privacy questions: privacy@questcompanion.co.uk. Support: support@questcompanion.co.uk.
What we hold. Your account (email, display name, optional username), the Companion conversations you have with us, your Timeline entries, Planner events, Journal notes, imported communications, files you upload, and court-form drafts.
Why we hold it, and our lawful bases.
- Contract (Art. 6(1)(b)). Creating your account, running the Companion, storing your Timeline, Planner, Journal, documents and form drafts, and taking payment for a membership.
- Legitimate interests (Art. 6(1)(f)). Keeping QUEST secure, preventing abuse, diagnosing faults and improving the service. We balance this against your privacy and keep the data to a minimum.
- Legal obligation (Art. 6(1)(c)). Tax and accounting records, and responding to lawful requests.
- Consent (Art. 6(1)(a)). Non-essential cookies and any optional emails. You can withdraw consent at any time.
Special category data. What you write in QUEST may include health, family, or similar sensitive details about you and your children. We process it only because you have chosen to give it to us to receive the service, and on the basis of your explicit consent (Art. 9(2)(a)), which you can withdraw by deleting the content or your account. Please only include information about other people where you have a genuine reason to.
Children. QUEST is for adults. You must be 18 or over to hold an account. We do not knowingly create accounts for children, though you may of course write about your children in your own records.
How long we keep it. Your content is kept for as long as your account exists. When you ask us to delete your account we soft-delete immediately and permanently erase everything after 30 days. Server and security logs are kept for up to 90 days. Billing records are kept for six years where tax law requires it.
International transfers. Your account, database and documents stay in AWS Ireland (eu-west-1). Companion messages and voice notes are routed through the Lovable AI Gateway, which may process them outside the UK/EEA. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.
Automated decision-making. The Companion generates suggestions, but it never makes a decision that has a legal or similarly significant effect on you. Nothing is saved to your Journey unless you tap Save.
Who we share it with. Only the processors listed in "Where your information is stored" below. We do not sell your information. We do not use your information to train AI models.
Your rights. See "Your UK GDPR rights" below.
Terms & Conditions
QUEST is not a law firm and does not give legal advice. The Companion is a supportive, plain-English guide — it will explain things, help you organise information and prepare for what's next, but it is not a solicitor and cannot represent you.
Who can use QUEST. You must be 18 or over and using QUEST for your own family matter. You are responsible for keeping your password safe and for everything done through your account.
You are responsible for the information you put into QUEST. Please don't upload other people's private information without a lawful reason, don't upload material that isn't yours, and don't use QUEST to harass anyone.
Court reporting restrictions. Family proceedings are private. Sharing documents or information from your case outside QUEST may be a contempt of court. QUEST helps you organise material for your own use and for the court, not for publication.
Memberships and payment. Memberships are monthly, in advance, and renew automatically until you cancel. You can cancel at any time from the Membership page and keep access until the end of the period you've paid for. Prices shown include VAT where it applies.
Cancellation and refunds. Under the Consumer Contracts Regulations 2013 you have 14 days to cancel a new membership. Because QUEST starts immediately at your request, you agree that the 14-day right ends once the service has been fully provided, and any refund within that window is reduced in proportion to what you've used. Free trials can be cancelled at any time before they end at no cost.
Complaints. Email support@questcompanion.co.uk and we'll respond within five working days.
Suspension. We may suspend or close an account that is used unlawfully, to harass another person, or in a way that puts other users' data at risk. Where we can, we'll tell you first and give you the chance to download your case.
Changes. We may update these terms or our policies. Where a change materially affects you we'll tell you by email or in the app before it takes effect.
We try very hard to keep QUEST available, but we can't guarantee it will never be offline. We're not liable for indirect losses. Nothing in these terms limits any liability that can't be limited by law.
English law applies. The courts of England and Wales have exclusive jurisdiction over any dispute.
AI & how the Companion works
The Companion is an AI that reads what you tell it and replies in plain English. When you send a message (or record a voice note), it's sent through the Lovable AI Gateway, which routes it to Google Gemini (for chat) or OpenAI Whisper (for voice-to-text). Your prompts and voice recordings are not used to train those models.
The Companion sees the recent context of your Journey (recent Timeline entries, upcoming Planner events, documents you've saved) so it can be helpful. It never sees another user's Journey.
Nothing is ever saved automatically. When the Companion proposes to save something to your Timeline, Planner, or as evidence, it always waits for you to tap "Save" first.
Where your information is stored
Your data is hosted at AWS Ireland (eu-west-1). It stays within European Union / UK-adequate.
| Processor | What they do | Where |
|---|---|---|
| Supabase (via Lovable Cloud) | Database, authentication, file storage | AWS eu-west-1 (Ireland) |
| Lovable AI Gateway | Runs the Companion (Google Gemini) and voice transcription (OpenAI Whisper). Prompts are not used to train the models. | EU / US routed |
| Google (Sign-in with Google) | Only if you choose Google to sign in — we receive your email and name | Global |
Download my case
You can download a full, structured copy of everything on your QUEST Journey at any time — Companion conversations, Timeline, Journal, Planner, Documents, imported communications, form drafts and an evidence index. It comes as a single ZIP, formatted for court preparation.
Delete my account
You can ask us to delete your account from inside QUEST. Here's what happens:
- Your account is soft-deleted immediately. You're signed out. Nobody — including you — can use it.
- You have 30 days to change your mind. Sign back in during that window and we'll restore everything exactly as it was.
- After 30 days, everything is permanently erased: your account, your Timeline, your Journal, your documents, your form drafts, your messages. This cannot be reversed.
Your UK GDPR rights
Under UK data protection law you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights around automated decision-making.
Most of these are one tap away inside QUEST — you can see and edit your information, download it, or delete it. For anything else, email privacy@questcompanion.co.uk and we'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.