QUEST

Trust Centre

Trust Centre

Your information, treated the way it deserves.

QUEST holds some of the most sensitive information a family can have. This page explains, in plain English, what we do to protect it, how the Companion works, where your data lives, and the choices you have.

Last updated: 17 July 2026

How QUEST protects your information

  • Every account is separated from every other account by strict row-level security in our database. Another user cannot see your Journey, even by accident.
  • Documents you upload are stored in a private bucket and only served to you through short-lived signed links.
  • Passwords are checked against the Have I Been Pwned breach database at sign-up and password change, so you can't reuse a password known to be leaked.
  • All traffic is served over HTTPS. Backups are held in the same UK/EU region as your live data.
  • We minimise data: we don't collect any information about you beyond what's needed to run QUEST for you.

Privacy Policy

Controller. QSP Technologies Ltd (in formation). Registered address to be confirmed on incorporation, United Kingdom. The company is currently being incorporated. This page will be updated with the final registered name, company number and address once Companies House confirms them.

Contact. Privacy questions: privacy@questcompanion.co.uk. Support: support@questcompanion.co.uk.

What we hold. Your account (email, display name, optional username), the Companion conversations you have with us, your Timeline entries, Planner events, Journal notes, imported communications, files you upload, and court-form drafts.

Why we hold it, and our lawful bases.

  • Contract (Art. 6(1)(b)). Creating your account, running the Companion, storing your Timeline, Planner, Journal, documents and form drafts, and taking payment for a membership.
  • Legitimate interests (Art. 6(1)(f)). Keeping QUEST secure, preventing abuse, diagnosing faults and improving the service. We balance this against your privacy and keep the data to a minimum.
  • Legal obligation (Art. 6(1)(c)). Tax and accounting records, and responding to lawful requests.
  • Consent (Art. 6(1)(a)). Non-essential cookies and any optional emails. You can withdraw consent at any time.

Special category data. What you write in QUEST may include health, family, or similar sensitive details about you and your children. We process it only because you have chosen to give it to us to receive the service, and on the basis of your explicit consent (Art. 9(2)(a)), which you can withdraw by deleting the content or your account. Please only include information about other people where you have a genuine reason to.

Children. QUEST is for adults. You must be 18 or over to hold an account. We do not knowingly create accounts for children, though you may of course write about your children in your own records.

How long we keep it. Your content is kept for as long as your account exists. When you ask us to delete your account we soft-delete immediately and permanently erase everything after 30 days. Server and security logs are kept for up to 90 days. Billing records are kept for six years where tax law requires it.

International transfers. Your account, database and documents stay in AWS Ireland (eu-west-1). Companion messages and voice notes are routed through the Lovable AI Gateway, which may process them outside the UK/EEA. Those transfers rely on the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

Automated decision-making. The Companion generates suggestions, but it never makes a decision that has a legal or similarly significant effect on you. Nothing is saved to your Journey unless you tap Save.

Who we share it with. Only the processors listed in "Where your information is stored" below. We do not sell your information. We do not use your information to train AI models.

Your rights. See "Your UK GDPR rights" below.

Terms & Conditions

QUEST is not a law firm and does not give legal advice. The Companion is a supportive, plain-English guide — it will explain things, help you organise information and prepare for what's next, but it is not a solicitor and cannot represent you.

Who can use QUEST. You must be 18 or over and using QUEST for your own family matter. You are responsible for keeping your password safe and for everything done through your account.

You are responsible for the information you put into QUEST. Please don't upload other people's private information without a lawful reason, don't upload material that isn't yours, and don't use QUEST to harass anyone.

Court reporting restrictions. Family proceedings are private. Sharing documents or information from your case outside QUEST may be a contempt of court. QUEST helps you organise material for your own use and for the court, not for publication.

Memberships and payment. Memberships are monthly, in advance, and renew automatically until you cancel. You can cancel at any time from the Membership page and keep access until the end of the period you've paid for. Prices shown include VAT where it applies.

Cancellation and refunds. Under the Consumer Contracts Regulations 2013 you have 14 days to cancel a new membership. Because QUEST starts immediately at your request, you agree that the 14-day right ends once the service has been fully provided, and any refund within that window is reduced in proportion to what you've used. Free trials can be cancelled at any time before they end at no cost.

Complaints. Email support@questcompanion.co.uk and we'll respond within five working days.

Suspension. We may suspend or close an account that is used unlawfully, to harass another person, or in a way that puts other users' data at risk. Where we can, we'll tell you first and give you the chance to download your case.

Changes. We may update these terms or our policies. Where a change materially affects you we'll tell you by email or in the app before it takes effect.

We try very hard to keep QUEST available, but we can't guarantee it will never be offline. We're not liable for indirect losses. Nothing in these terms limits any liability that can't be limited by law.

English law applies. The courts of England and Wales have exclusive jurisdiction over any dispute.

Cookie Policy

QUEST uses as little browser storage as we can get away with. We do not use advertising cookies, we do not use third-party trackers, and we do not profile you. Nothing beyond the strictly necessary items below is stored until you have given consent.

CategoryWhat it doesConsent
Strictly necessaryKeeps you signed in, protects your session and remembers this cookie choice. QUEST cannot work without these, so they can't be turned off.Not required
PreferencesRemembers small comfort settings on this device, such as banners you've dismissed and where you left off. Turning these off just means QUEST asks again.Opt-in
AnalyticsAnonymous usage measurement so we can see which parts of QUEST help and which confuse. We don't use these today, and we won't start without your consent.Opt-in

The strictly necessary items are your Supabase authentication token (kept in this browser so you stay signed in), a short-lived session identifier, and a record of the cookie choice you make below. Rejecting non-essential storage does not limit any part of QUEST.

AI & how the Companion works

The Companion is an AI that reads what you tell it and replies in plain English. When you send a message (or record a voice note), it's sent through the Lovable AI Gateway, which routes it to Google Gemini (for chat) or OpenAI Whisper (for voice-to-text). Your prompts and voice recordings are not used to train those models.

The Companion sees the recent context of your Journey (recent Timeline entries, upcoming Planner events, documents you've saved) so it can be helpful. It never sees another user's Journey.

Nothing is ever saved automatically. When the Companion proposes to save something to your Timeline, Planner, or as evidence, it always waits for you to tap "Save" first.

Where your information is stored

Your data is hosted at AWS Ireland (eu-west-1). It stays within European Union / UK-adequate.

ProcessorWhat they doWhere
Supabase (via Lovable Cloud)Database, authentication, file storageAWS eu-west-1 (Ireland)
Lovable AI GatewayRuns the Companion (Google Gemini) and voice transcription (OpenAI Whisper). Prompts are not used to train the models.EU / US routed
Google (Sign-in with Google)Only if you choose Google to sign in — we receive your email and nameGlobal

Download my case

You can download a full, structured copy of everything on your QUEST Journey at any time — Companion conversations, Timeline, Journal, Planner, Documents, imported communications, form drafts and an evidence index. It comes as a single ZIP, formatted for court preparation.

Open the Download my case page →

Delete my account

You can ask us to delete your account from inside QUEST. Here's what happens:

  1. Your account is soft-deleted immediately. You're signed out. Nobody — including you — can use it.
  2. You have 30 days to change your mind. Sign back in during that window and we'll restore everything exactly as it was.
  3. After 30 days, everything is permanently erased: your account, your Timeline, your Journal, your documents, your form drafts, your messages. This cannot be reversed.

Open the account controls →

Your UK GDPR rights

Under UK data protection law you have the right to be informed, the right of access, the right to rectification, the right to erasure, the right to restrict processing, the right to data portability, the right to object and rights around automated decision-making.

Most of these are one tap away inside QUEST — you can see and edit your information, download it, or delete it. For anything else, email privacy@questcompanion.co.uk and we'll respond within one month.

If you're unhappy with how we've handled your information, you can complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk.