QUESTTrust Centre
Your information, treated the way it deserves.
QUEST holds some of the most sensitive information a family can have. This page explains, in plain English, what we do to protect it, how the Companion works, where your data lives, and the choices you have.
Last updated: 17 July 2026
How QUEST protects your information
- Every account is separated from every other account by strict row-level security in our database. Another user cannot see your Journey, even by accident.
- Documents you upload are stored in a private bucket and only served to you through short-lived signed links.
- Passwords are checked against the Have I Been Pwned breach database at sign-up and password change, so you can't reuse a password known to be leaked.
- All traffic is served over HTTPS. Backups are held in the same UK/EU region as your live data.
- We minimise data: we don't collect any information about you beyond what's needed to run QUEST for you.
Privacy Policy
Controller. QSP Technologies Ltd (in formation). Registered address to be confirmed on incorporation, United Kingdom. The company is currently being incorporated. This page will be updated with the final registered name, company number and address once Companies House confirms them.
Contact. Privacy questions: privacy@quest-companion.co.uk. Support: support@quest-companion.co.uk.
What we hold. Your account (email, display name, optional username), the Companion conversations you have with us, your Timeline entries, Planner events, Journal notes, imported communications, files you upload, and court-form drafts.
Why we hold it. To provide QUEST to you (contract), to keep it working and secure (legitimate interest), and to meet any legal obligations we're under.
How long. We keep your information for as long as your account exists. When you ask us to delete your account, we soft-delete immediately and permanently erase everything after 30 days.
Who we share it with. Only the processors listed in "Where your information is stored" below. We do not sell your information. We do not use your information to train AI models.
Your rights. See "Your UK GDPR rights" below.
Terms of Use
QUEST is not a law firm and does not give legal advice. The Companion is a supportive, plain-English guide — it will explain things, help you organise information and prepare for what's next, but it is not a solicitor and cannot represent you.
You are responsible for the information you put into QUEST. Please don't upload other people's private information without a lawful reason, don't upload material that isn't yours, and don't use QUEST to harass anyone.
We try very hard to keep QUEST available, but we can't guarantee it will never be offline. We're not liable for indirect losses. Nothing in these terms limits any liability that can't be limited by law.
English law applies. The courts of England and Wales have exclusive jurisdiction over any dispute.
AI & how the Companion works
The Companion is an AI that reads what you tell it and replies in plain English. When you send a message (or record a voice note), it's sent through the Lovable AI Gateway, which routes it to Google Gemini (for chat) or OpenAI Whisper (for voice-to-text). Your prompts and voice recordings are not used to train those models.
The Companion sees the recent context of your Journey (recent Timeline entries, upcoming Planner events, documents you've saved) so it can be helpful. It never sees another user's Journey.
Nothing is ever saved automatically. When the Companion proposes to save something to your Timeline, Planner, or as evidence, it always waits for you to tap "Save" first.
Where your information is stored
Your data is hosted at AWS Ireland (eu-west-1). It stays within European Union / UK-adequate.
| Processor | What they do | Where |
|---|---|---|
| Supabase (via Lovable Cloud) | Database, authentication, file storage | AWS eu-west-1 (Ireland) |
| Lovable AI Gateway | Runs the Companion (Google Gemini) and voice transcription (OpenAI Whisper). Prompts are not used to train the models. | EU / US routed |
| Google (Sign-in with Google) | Only if you choose Google to sign in — we receive your email and name | Global |
Download my case
You can download a full, structured copy of everything on your QUEST Journey at any time — Companion conversations, Timeline, Journal, Planner, Documents, imported communications, form drafts and an evidence index. It comes as a single ZIP, formatted for court preparation.
Delete my account
You can ask us to delete your account from inside QUEST. Here's what happens:
- Your account is soft-deleted immediately. You're signed out. Nobody — including you — can use it.
- You have 30 days to change your mind. Sign back in during that window and we'll restore everything exactly as it was.
- After 30 days, everything is permanently erased: your account, your Timeline, your Journal, your documents, your form drafts, your messages. This cannot be reversed.
Your UK GDPR rights
Under UK data protection law you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights around automated decision-making.
Most of these are one tap away inside QUEST — you can see and edit your information, download it, or delete it. For anything else, email privacy@quest-companion.co.uk and we'll respond within one month.
If you're unhappy with how we've handled your information, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.