Safety and privacy

What we do

• No chatbot. No AI talking to your child.

  There is no conversational AI anywhere in QuestSchool. Nothing generates open-ended text or images for your child. Every question your child sees was written by a person and shipped in the build.

• No ads, no trackers, no third-party scripts.

  This website loads no advertising, no analytics, no tracking pixels, no third-party fonts and no external CDN. That is not a promise we make in copy - our build fails if the marketing pages reach for a database, a session, or anything off-site.

• A child's code alone never gets them in.

  Children sign in with a short numeric code, but only on a device a parent has explicitly approved. On any other device that code is useless on its own.

• Grown-up accounts are protected properly.

  Adults sign in with Microsoft, Google, or a password plus an authenticator app. The account that can see your children's data is not protected by a password alone.

• One family cannot see another family's children.

  Every read of a child's record is scoped to the family that owns it, and that isolation is covered by its own test suite that runs on every change.

Why there is no chatbot

Plenty of children’s apps have added a conversational AI. We have not, and it is not on our roadmap. An open-ended text generator talking to a five-year-old is a risk we are not willing to take on your behalf: it can be steered, it can be wrong with total confidence, and neither you nor we can read every word of it in advance.

Every question in QuestSchool was written by a person and shipped in the build. That is a smaller product than one with a chatbot in it. We think it is the right smaller product.

How sign-in actually works

Children sign in with a short PIN, because a six-year-old cannot manage a password. A PIN on its own is weak, so it is never the only thing standing in the way: the PIN works only on a device you have explicitly approved. Someone who guesses your child’s PIN on their own laptop does not get in.

The adults on the account are protected properly, because the adult account is the one that can see everything. You sign in with Microsoft, Google, or an email and password plus a code from an authenticator app.

This website carries no trackers

The page you are reading loads no advertising, no analytics, no tracking pixels, no third-party fonts and no external CDN - only files served from questschool.ai. That is enforced rather than promised: our test suite fails the build if these marketing pages reach for a database, a session or an authentication check, and the browser is instructed to refuse any script that did not come from us.

Where we are not going to overclaim

• We do not hold a COPPA, GDPR or any other compliance certification, and we do not claim one. What we can tell you is exactly how the product behaves, which is what this page does.
• We do not publish testimonials, user counts or efficacy studies, because we do not have any we could stand behind.

If something on this page ever stops being true of the product, the page changes. Read the privacy summary for what we store, or ask us a direct question - we will answer it directly.