Privacy Policy
Summary. Dook Quest has no account or login and does not ask for your name, email, phone number or contacts. Your progress and your step count stay on your iPhone and, if you use iCloud, in the private database of your iCloud, which we cannot access. The game sends usage data without direct identification, which you can turn off. Video ads are optional, and Google only receives the iPhone’s advertising identifier if you allow it.
1. Who is responsible
This policy applies to the Dook Quest app for iPhone, its widgets and its Live Activity, and to this site. The controller of personal data, under Brazil’s General Data Protection Law (Law No. 13,709/2018, “LGPD”), is:
- Company
- PDP Consultoria (Pansonato & De Paula Treinamento e Consultoria Ltda)
- CNPJ (Brazilian company registration number)
- 44.428.682/0001-03
- Address
- Rua Atílio Biondo, 581, Parque Franceschini, Sumaré/SP, CEP 13170-460, Brasil
- Data Protection Officer (encarregado / DPO)
- Ricardo Leonardo Pansonato
- Privacy contact
- ricardo@pdpconsultoria.one (subject: “Privacy”)
2. What data we process, why and on what legal basis
| Data | Who receives it | Purpose | Legal basis (LGPD) |
|---|---|---|---|
| Game usage data: events such as the start and end of a run, collecting, a chapter completed, a skill learned, an offer shown or accepted, the outcome of permission requests (without content), the app version number; technical data that the service adds automatically (such as device model, iOS version, language and region); and a pseudonymized installation identifier, hashed on the device and hashed again, with a “salt”, on the service’s server, which does not contain your name or your email. TelemetryDeck states that it does not store IP addresses. | TelemetryDeck GmbH (Germany), as processor | Understand how the game is used, balance the difficulty and find bugs | Legitimate interest (Art. 7, IX), with the option to turn it off at any time |
| Diagnostics: counts of crashes, hangs and CPU and disk usage provided by iOS (MetricKit), without any of your content | TelemetryDeck GmbH | Stability and performance | Legitimate interest (Art. 7, IX) |
| Purchase events: which product was granted, restored or revoked (only the product code; no amount paid and no payment data) | TelemetryDeck GmbH | Check that purchases are delivered correctly | Performance of a contract (Art. 7, V) and legitimate interest |
| Ad data: IP address (from which approximate location is inferred), technical data about the device and the app, interaction with the ad and, only if you allow it in the iOS prompt, the advertising identifier (IDFA). See section 4. | Google (AdMob and User Messaging Platform) | Show the video you chose, measure, limit repeats and prevent fraud; with your permission, personalize ads | Consent (Art. 7, I) for tracking and personalized advertising; legitimate interest for serving and measuring non-personalized ads |
| Purchases: Apple processes the payment. The app receives the transaction information from Apple (product and transaction codes) to deliver and restore the item. We do not receive your payment data. | Apple (as independent controller for the payment) | Deliver and restore purchases | Performance of a contract (Art. 7, V) |
| Support messages: what you write, your email address and, if you paste it, the text from “Copy diagnostics” (app and iOS versions, device model, game state and a recent log of game events; it does not include device identifiers) | Us, through our email provider | Respond to your request | Performance of a contract and legitimate interest; regular exercise of rights (Art. 7, VI) when necessary |
We do not ask for or receive your name, email address (unless you write to us), contacts, photos, precise location or health data. The game has no chat and no user-generated content. We do not use your data for automated decisions that affect your rights.
Usage summary for refund requests (optional; active once our server is live)
Not active yet: sending starts only once our server is live; until then the app sends nothing, even with the option turned on.
- What it is. When someone asks for a refund, Apple asks the developer how much of the purchase was already used. If you turn the option on, our server answers Apple with that summary, which helps Apple decide. The decision is still Apple’s alone.
- What data. A random purchase code (created by the game, with no name, e-mail or account, and sent to Apple with each purchase), your transaction codes and, for each one, how many Crowns it delivered and how many are still in your kingdom. We do not store your IP address, payment details or game progress. Apple receives only what it asks for: that you consented, whether the purchase was delivered and the percentage used.
- Legal basis. Your consent (Brazilian LGPD, Article 7, I; GDPR Article 6(1)(a) where it applies). The option is off by default: Kingdom Settings > Purchases > “Share a usage summary with Apple on refund requests”. You can turn it off at any time.
- Where and for how long. On our server at Amazon Web Services (AWS, our processor) in the São Paulo region, Brazil, for up to 180 days after the last upload. Apple’s refund notices (without your summary) are kept there for the same period. Apple, which receives the summary, processes it as a controller under its own policy and may process it outside Brazil.
- Deletion. Turning the option off deletes the summary from our server. For what was already sent to Apple, you can request access or deletion at privacy.apple.com.
3. What stays with you only
- Game progress. The save is stored on your iPhone and, if the “Sync with iCloud” option is turned on (it is on by default), also in the private iCloud database of your Apple Account (CloudKit). That database is kept by Apple and only your account can access it; we cannot read it. The save includes the codes of your purchases, so they can be restored, the random purchase code the game sends to Apple with each purchase, and a random code per installation, used only to resolve conflicts between devices.
- Steps (Walk with Sir Dook). Off by default. If you turn it on, the game reads the step count from your iPhone (Motion & Fitness, via CoreMotion) while it is open and stores the daily totals for the last few days in the save. This count is not sent to us or to third parties; if iCloud is on, it goes along with the save to your iCloud. The game does not use the Health app and does not offer health advice.
- Alerts. Notifications are local, scheduled by the iPhone itself. We do not use server-sent notifications.
- Widgets and Live Activity. They show the game state using data on the device itself.
- Game configuration. The app downloads a digitally signed configuration file (the month’s events and balance adjustments) from the public iCloud database. This download does not send any player data beyond what any connection to Apple involves.
4. Ads, tracking and consent
Dook Quest only shows rewarded video ads, which you choose to watch in exchange for a bonus. There are no banners and no forced full-screen ads.
- When Google receives data. Google’s SDK may be started when you open the game (when no consent is required in your region or when you have already answered) and may load a video as soon as a video button appears on the screen, so that it is ready if you tap it. At those moments, Google receives technical data such as your IP address.
- Google consent. Where the law requires it (for example, in the European Economic Area, the United Kingdom and Switzerland), Google shows a consent form before the first video. You can change your choice in Kingdom Settings > Privacy > “Privacy & ads”.
- Tracking (ATT). Before the first video, iOS asks whether you allow the app to track you. If you allow it, Google may use the advertising identifier (IDFA) to personalize and measure ads across other companies’ apps and websites. If you do not allow it, the IDFA is not shared and ads may be less relevant. Our own code does not track you.
- Ad ratings. We ask Google for ads with a content rating up to “PG” (parental guidance). Google is responsible for the content of third-party ads.
To learn how Google uses data from partner apps, see How Google uses information from sites or apps that use our services and the Google Privacy Policy.
5. Who data is shared with
- TelemetryDeck GmbH (Germany): usage analytics processor, which processes data according to our instructions. TelemetryDeck privacy.
- Google (AdMob and User Messaging Platform): ad provider. For part of the processing, Google acts as an independent controller, under its own policy.
- Apple: App Store (payments), iCloud (your save) and iOS. Apple processes this data as a controller, under the Apple Privacy Policy.
- Hosting and email providers, to run this site and respond to support messages.
- Authorities, when there is a legal obligation or a court order, and to defend our rights.
We choose providers that make contractual data protection commitments compatible with this policy (such as Google’s data protection terms and TelemetryDeck’s data processing agreement). We do not sell your personal data. If you allow tracking in iOS, Google may use data for personalized advertising across apps and websites, which some laws (such as California’s, in the US) call “sharing”. You can decline or revoke this at any time (see section 8).
6. International transfers
Some data is processed outside Brazil:
- European Union (Germany and the Netherlands): usage and diagnostics data, at TelemetryDeck. The ANPD recognizes the European Union as having an adequate level of data protection (ANPD Resolution No. 32/2026).
- United States and other countries where Google and Apple maintain infrastructure: ad data, purchases and the iCloud save.
For these transfers, we rely on the mechanisms provided for in Article 33 of the LGPD, such as recognition of an adequate level of protection and the data protection contractual clauses offered by these providers, as well as the necessity of the transfer to perform the contract with you (for example, delivering purchases and storing your save). For users in Europe, the equivalent GDPR mechanisms apply. You can request more information through the contact in section 1.
7. How long we keep data
- Usage and diagnostics data (TelemetryDeck): we use this data for as long as it is useful for the game’s statistics. It is stored at TelemetryDeck, which currently does not set a fixed period for deleting old events (the service indicates an expectation of a few years). Because it is pseudonymized, it does not allow you to be identified directly.
- Ad data: according to Google’s retention rules.
- iCloud save: until you delete it (see Data deletion).
- Support messages: for as long as necessary to resolve the request and comply with legal obligations, or for the period needed to defend legal rights.
- Usage summary for refunds (once the server is live): up to 180 days after the last upload, or until you turn the option off (see section 2).
8. Your choices
- Usage data: Kingdom Settings (gear in the game) > Privacy > turn off “Game usage data”. From then on, the app stops sending usage and diagnostics events.
- Tracking: iPhone Settings > Privacy & Security > Tracking > Dook Quest.
- Google consent (where required by law): Kingdom Settings > Privacy > “Privacy & ads”.
- Ads: watching videos is not required to play. The “Remove Ads” and “Royal Pack” purchases give the video rewards without watching (the Crowns-for-a-video bonus is no longer shown).
- Steps: turn off the Walk in the game or in iPhone Settings > Privacy & Security > Motion & Fitness.
- iCloud: turn off “Sync with iCloud” in Kingdom Settings, or turn off iCloud for the app in iPhone Settings.
- Notifications: Kingdom Settings or iPhone Settings > Notifications > Dook Quest.
- Usage summary for refunds: Kingdom Settings > Purchases > “Share a usage summary with Apple on refund requests” (off by default; turning it off deletes the summary from our server).
9. Your rights
Under the LGPD (Article 18), you can request: confirmation that we process your data; access; correction; anonymization, blocking or deletion of unnecessary data or data processed in breach of the law; portability; deletion of data processed with your consent; information about who we share data with; information about the possibility of not consenting and its consequences; and withdrawal of consent. You can also object to processing based on legitimate interest if it does not comply with the law.
If you are in the European Economic Area, the United Kingdom or Switzerland, you have similar rights under the GDPR, including the right to object and to lodge a complaint with the data protection authority of your country. If you live in California or in another US state with a privacy law, you can request to know, correct and delete data and opt out of the sale or sharing of data (see section 8); we will not treat you differently for exercising these rights.
How to make a request: write to ricardo@pdpconsultoria.one. Because the game has no account, we may need some information to locate your data (for example, the date of a message you sent us). Usage data is pseudonymized: we do not know which person it belongs to and, in general, we cannot separate it from other players’ data. In those cases, we explain what can be done. We will respond within the time limits of the applicable law; under the LGPD, a complete statement is provided within 15 days of the request.
You can also file a petition or complaint with Brazil’s National Data Protection Agency (Agência Nacional de Proteção de Dados, ANPD), at gov.br/anpd, or with consumer protection agencies such as Procon. If you prefer, talk to us first: most issues are resolved quickly.
10. Children and teens
Dook Quest is a game for a general audience and is not directed at children under 13. The age rating appears on the App Store. The game does not ask for age, name or contact details. We aim to process the minimum data and to take into account the best interests of children and teens who play with their parents’ or guardians’ permission.
- Usage data does not directly identify the player and can be turned off.
- Tracking for ads only happens if it is allowed in the iOS prompt. We recommend that parents and guardians do not allow it for children and teens; for child accounts in Family Sharing, iOS may prevent apps from asking to track.
- Purchases depend on the Apple Account and can be controlled with Screen Time and “Ask to Buy”.
If you are a parent or guardian and believe we have received a child’s data (for example, in a support email), write to us and we will delete it. This channel can also be used to report any concern about the safety of children and teens in the game.
11. Security
We take reasonable technical and administrative measures to protect data: connections use encryption (HTTPS), the game configuration is digitally signed, the save is kept in the app’s protected storage on the iPhone and in your account’s iCloud, and we collect the minimum necessary. No system is completely immune to failures. If a security incident occurs that may cause significant risk or harm, we will notify the ANPD and the affected individuals, as required by law.
12. This site
This site does not use cookies, trackers, advertising pixels or analytics tools, and does not load third-party fonts or scripts. The hosting provider may log technical access data (such as IP address, date, time and page requested) for security and operational reasons. Because the site does not track anyone, it does not change its behavior in response to the browser’s “Do Not Track” signals; in the app, tracking depends on your choice in the iOS prompt.
13. Changes to this policy
We may update this policy when the game or the law changes. The date and version are shown at the top of the page. If the change is material, we will also notify you in the game. If a change requires your consent, we will ask for it first.
This is the English translation. The Portuguese (Brazil) version prevails over the translations in case of any discrepancy, unless a mandatory rule of your country provides otherwise.
Version history
- 1.2 (2026-10-05): no changes to this page.
- 1.1 (2026-10-05): the usage data option now has the same name as in the app (“Game usage data”); the European Union is recognized as having an adequate level of protection; you can also complain to consumer protection agencies; correct description of how the usage identifier is hashed; the save also keeps the random purchase code sent to Apple; what the no-ads purchases give instead of videos.
- 1.0 (2026-10-04): first version.