Last updated: November 3, 2026
My name is Vincent Nallatamby and I'm the founder of Quest. Before you connect anything to Quest, I want you to understand exactly what we do with your data.
I don't like privacy policies. Most of them are written to be vague. This one is written to be understood. It describes what Quest actually does today, not what we wish it did. Where we have limits, we say so.
Quest gets more useful the more it knows about you. That only works if you're comfortable with what you're sharing. If you read this and you're not, please don't use Quest. No hard feelings.
Vincent
Quest is made by New Quest AI Inc., a Delaware company based in San Francisco. This policy covers the Quest iOS app, your iMessage conversation with Quest, our website at new.quest, and everything that runs behind them. We refer to all of this as "Quest".
If you have any questions about this policy, write to founders@newquest.ai.
You sign up in the Quest app with your phone number and first name. We text you a code to verify your number. You then send Quest your first iMessage, which links the conversation to your account. We store your phone number, first name, time zone, conversation identifier, and a session token that keeps you signed in. You don't need a password.
If Quest is full when you sign up, we keep your phone number on a waitlist until we can let you in or you ask us to remove it.
Everything you say to Quest, through iMessage or in the app, and everything Quest says back. This includes voice notes, which we transcribe into text, files and photos you send, and your onboarding conversation, where Quest asks you about yourself.
Quest works by connecting to the apps you already use. Each connection is your choice, and Quest only accesses an app after you connect it.
Today, Quest can connect to:
When you connect an app, Quest reads the data it makes available, including its history. Most connections are read-only. Some also let Quest make changes, which we explain in section 5. Section 4 explains how Quest handles Google apps.
Some apps don't have a permission system. For those, you give Quest an API key or your account login. This applies to Monarch, Pocket Casts, IMAP email, some apps on Quest's phone, and websites you add to its browser. Quest stores those credentials so it can continue using the app on your behalf.
If you connect Apple Health, Quest keeps a copy of your Health history. If you turn on location, Quest records the places you visit. Both are off by default. See section 6 for details.
A Quest mini-app may ask for permission to send you reminders. These are scheduled on your phone. Quest doesn't send push notifications from its servers.
You can send Quest files in chat or upload data exports from other services, such as Google Takeout or a ChatGPT or Claude export. Quest unpacks and reads them. Pictures and videos inside exports are left out.
To get to know you faster, Quest may search the public web for information about you using your name and email, such as your LinkedIn profile, personal website, talks, or press coverage. Quest keeps a list of the public profiles it used so you can see them.
When you use the in-app feedback tool, Quest records your voice and captures screenshots of the screen you were viewing to help your agent understand what you're reacting to. A transcription service converts the audio into text, and the audio isn't kept. The text stays on your Quest computer.
If your feedback is about the app itself, your agent may share a short feature request with our team, written in its own words and without your personal details.
We record how the app and our systems behave, including which features are used, whether connections succeed or fail, crashes, and errors. This usage data and our technical logs don't contain any personal data, apart from your account ID.
When you connect an app, Quest reads the data available through it, including its history, and starts building a picture of you: facts, anecdotes, and hypotheses about your personality and goals. As you connect more apps, Quest cross-checks and refines what it knows. Together, these learnings make up your Memory.
Your Memory is what makes Quest yours. It's never used for anything other than making Quest useful and personal to you.
Quest keeps the following on your own isolated computer or on Quest's phone:
Quest doesn't keep copies of the emails, documents, messages, or records it reads from connected apps. It only keeps what it learned from them, along with a debugging record of what it read. That record is deleted after 7 days. Our team only looks at it with your approval, to investigate a problem with your Quest (see section 12).
There are five exceptions:
Disconnecting an email account, Apple Health, Muse, Instinct, or a messaging app deletes the data Quest kept from it (for WhatsApp and Instinct, once both are disconnected). You can also ask Quest at any time to delete anything it saved at your request (see section 11).
Here's an example. Quest reads an email from my kid's school and learns two things: my son's name and the name of his school. It adds both facts to my Memory. The email itself isn't saved, apart from the 7-day debugging record. My Memory is now a little richer.
Once Quest learns something, it becomes part of your Memory. Quest can't remove a fact based only on where it came from, because it doesn't organize facts by source. You can correct or remove facts yourself (see section 11).
Quest learns about the people you interact with. From your emails, calendar, and chats you share, it can learn their names, how you know them, their birthdays, and details about your relationships. If you connect a messaging app, Quest can also access your contacts, friends, and followers.
This information stays on your Quest computer. Removing someone from the app only hides them. To permanently delete what Quest knows about them, ask Quest to do so.
This section explains exactly how Quest handles data from your Google account. Google requires this level of detail, and we think it's the right level for everyone.
Quest asks for access to Gmail, Google Calendar, and Google Drive separately. Connecting Gmail doesn't give Quest access to your calendar, and connecting Calendar doesn't give it access to your email. You can connect one, several, or none of them. Each Google connection also gives Quest your Google email address, which it uses to identify the account in the app.
You can also give Quest your Google login so its browser can sign in to websites with Google or import your YouTube history and your Google Maps saved places and reviews. This login gives access to your whole Google account, just as it would in your own browser. Quest only uses it for what you ask. If you sign in to TikTok with Google, Quest's phone also uses your Google login, which adds your Google account to the phone.
| Service | Permission Quest requests | What Quest does with it |
|---|---|---|
| Gmail | gmail.readonly, gmail.modify, gmail.settings.basic. Only reading is required. | Reads your email. Quest keeps only a searchable index of senders, recipients, subject lines, labels, short preview lines, whether you read or replied, how long you usually take to reply, and a category assigned to each thread by Quest's AI. When a task requires it, Quest reads the full body of a specific message and learns from it. It doesn't store email bodies or attachments, except in a debugging record that is deleted after 7 days (see section 12). When you ask, Quest can also archive, label, draft, and trash email; create and remove filters (for example, to block a sender); and send email from your account. Quest shows you every email before sending it and only sends it after you approve. |
| Google Calendar | calendar (read and write) | Reads your events. Quest can also create, move, or delete events when you ask, or as part of a routine you've set up. It asks before changing your calendar unless you've told it not to. |
| Google Drive | drive.readonly, drive.activity.readonly, documents.readonly, spreadsheets.readonly | Reads your files, documents, spreadsheets, and the activity feed showing what changed. Read-only. |
| All of the above | openid, userinfo.email | Reads your Google email address to identify the connected account. |
Quest's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
You can revoke Quest's access to your Google account at any time at myaccount.google.com/permissions. See section 11 for what happens when you disconnect.
Quest is an agent. Some connected apps let it take action, not just read data. Today, those are:
Quest is designed to ask before making changes in a connected app. It only sends an email or message when you've asked it to, and you know who it's going to and what it says, unless you've asked Quest to manage the conversation.
If you connect Apple Health, Quest reads everything Apple Health allows an app to read, going back through your full history, and keeps a copy on your Quest computer.
This includes:
Quest uses this data only to answer your questions and understand your health and habits. It's never shared with anyone except the service providers listed in section 9, when you ask Quest a question that requires it. Health data is never sold or used for ads.
Quest continues syncing new Health data in the background while the app is installed. Disconnecting Apple Health in the app stops the sync and deletes the copy Quest kept. What Quest already learned from it stays in your Memory. Nothing Quest does changes the data in Apple Health itself.
Location is off by default. If you turn it on, the Quest app records the places you visit and how long you stay, including in the background. Quest uses map services to turn coordinates into recognizable places, and keeps a history of your visits and a list of places it knows, such as your home, work, or gym.
You can delete any part of your location history or an individual place from the Memory section of the app. Turning location off stops new recording. Places Quest has identified, and what it learned from your movements, stay unless you ask Quest to remove them.
Workout routes from Apple Health are another source of precise location data.
Muse and Instinct are AI assistants that can take action for you, such as buying something, booking a table, or making a call. Quest uses them on Quest's phone: Muse through its app, signed in to your Muse account, and Instinct through your WhatsApp account.
Quest keeps your conversations with these assistants so it can supervise their work. When Quest gives one a task, it sends the request along with the context it needs from your Memory, reads its replies, answers questions, and follows up until the task is complete. Quest also sees the messages you send to these assistants yourself. What you send them is covered by their own privacy policies.
Instinct works through WhatsApp. You link your WhatsApp account to Quest's phone, much like linking WhatsApp Web. WhatsApp then syncs all your chats to Quest's phone. When using Instinct, Quest only reads and sends messages in your Instinct chat. If you also connect WhatsApp itself, Quest can read and send messages in the other chats you choose.
When you disconnect Muse, Quest signs out and deletes everything it synced. Instinct and WhatsApp share your WhatsApp link, so Quest signs out of WhatsApp and deletes your chats once both are disconnected. Your own Muse and WhatsApp accounts aren't affected. Only Quest's phone is signed out.
Some apps and websites can't connect directly to Quest, so Quest uses its own phone and browser in the cloud.
Quest's phone runs only for you, on Blaxel. It signs in to apps like WhatsApp, Instagram and Muse, just as your own phone would, and connects to them through IPRoyal or Oxylabs. These apps store their data on the phone, including your messages. Disconnecting an app erases its data from the phone (for WhatsApp, once Instinct is also disconnected).
Quest's browser runs at Kernel, in a profile dedicated to your account. It signs in to websites you add, using your Google login if you provide one, and keeps their cookies so it stays signed in between tasks.
Deleting your Quest account deletes both.
We use the companies listed below to run Quest. Each may only use your data to provide its service to us. None may use it for their own purposes or to train AI models.
Quest uses AI models from other companies. For each request, it sends the model the parts of your data the task needs: your conversation and whatever is relevant from your Memory or connected apps. The model used depends on the task.
We use several AI model providers through OpenRouter. Our main providers are Anthropic (Claude), OpenAI (GPT), Google (Gemini), and Baseten (open-source models). We have our own account with each provider.
We choose providers based on strict data requirements. They must run models in the United States, never train on your data, and either keep no data or keep requests for no more than 30 days (55 days for Google) for safety and security.
If one of our main providers is busy or unavailable, OpenRouter can send the request to another provider that meets these requirements.
We also use:
None of these companies train on your data. If a request trips a company's abuse detection, it can keep that request longer than these limits. This is standard for any AI product.
When a task needs the web, Quest uses web search and page-reading services (Keenable, Firecrawl and Monid) and Google Maps. They receive the search or the page address, not your Memory. A search can still include details about you, like your name, email, employer or school, for example when Quest looks you up with your permission.
We will share data when the law requires it, or when necessary to protect the safety of our users or the public. If we are ever acquired or merge with another company, your data would move with the company, and this policy would still apply to it until you're told otherwise.
Each Quest user gets their own virtual computer. Your Memory, your files and everything listed in section 3 live there, on a disk that belongs only to your account. There is no shared database of user Memories. If someone broke into one user's computer, that would not by itself give them access to anyone else's.
These computers are run for us by Blaxel, an infrastructure company we chose in large part for its security practices (SOC 2 Type II and ISO 27001). Your computer is backed up regularly, and backups are stored encrypted in Amazon Web Services in the United States. Backups exist so we can recover from a failure. Backups are not used for anything else, and they expire (see section 11).
Your account record (phone number, first name, time zone and session token) lives in a database we run on Amazon Web Services, also in the United States.
Honesty requires two more things. First, no company can guarantee perfect security, and we won't pretend to. Quest could be hacked. What we can do is design it so a single breach can't expose everyone at once, and that's what we've done. Second, Quest is an AI agent that reads content from the outside world, like emails and web pages. We treat that content as untrusted, and Quest is built to not follow instructions found inside it. We test for this. It is an area the whole industry is still learning.
If we ever have a breach that affects your data, we will tell you.
Your Memory is visible in the app. You can read it, comment on it, correct it, and ask Quest to delete any part of it, or all of it, in conversation. Quest can't remove only the facts that came from one specific app, because facts aren't filed by source.
Disconnecting an app makes Quest stop reading from it and removes the credentials from your Quest computer. What Quest already learned stays in your Memory. The event log stays too.
Apple Health, email accounts, Muse and Instinct work differently: disconnecting them also deletes the raw copy, meaning your Health archive, your email index or your synced conversations (sections 4, 6 and 7). Disconnecting a messaging app also erases the data it stored on Quest's phone. Instinct and WhatsApp share your WhatsApp link, so Quest deletes your chats once both are disconnected.
Disconnecting does not yet tell the app itself to revoke Quest's permission, except for the apps on Quest's phone, where Quest signs out. For Messenger, Quest erases the app's data from its phone instead, and Facebook may still list Quest's phone under "Where you're logged in" until you remove it there. To fully close the door, also revoke Quest in the app's own settings, for example at myaccount.google.com/permissions for Google.
You can ask Quest to delete uploaded files and anything it saved at your request.
If you want to change your phone number, contact us first so we can move your account.
Deleting your account, from the app or by writing to us, erases your account record immediately and your Quest computer and its disk within minutes. There is no waiting period and no undo. Backups expire on their own within 90 days and are never restored for a deleted user. Technical logs expire within 30 days.
| Data | Kept for |
|---|---|
| Your Memory, conversations, event log, email index, uploads, Health copy, location history, Muse and Instinct conversations, messaging app data on Quest's phone | As long as you have an account, or until you delete them |
| Backups of your Quest computer | Rolling daily and weekly copies; anything older is deleted within 90 days |
| Debugging record of your agent's activity (section 12) | 7 days |
| Technical logs | 30 days |
| Copies of requests held by AI providers | Up to 30 days (up to 55 for Google), per their terms |
| An account that never finished signing up | Deleted after 14 days |
Something deleted from your Quest computer, by you, by disconnecting an app or by the 7-day cleanup, stays in older backups until they expire, within 90 days.
Depending on where you live, you may have the legal right to access, correct, export or delete your data, or to object to or restrict how we use it. Email founders@newquest.ai and we'll do it. We won't discriminate against you for asking.
We are a small team. To fix bugs, we sometimes need to look at what a user's agent did.
We do not read your data out of curiosity, and we don't use it to build anything except your Quest.
Quest is for adults. You must be 18 or older to use it. We don't knowingly collect data from anyone under 18. If you believe a minor has an account, write to us and we'll delete it.
We are based in the United States, and your data is stored and processed there. If you use Quest from elsewhere, including the European Union, your data is transferred to the US. Where the law requires it, we rely on standard contractual clauses for that transfer.
We'll update this policy when Quest changes. The date at the top always tells you the current version. For a change that matters, for example a new category of data or a new kind of recipient, we'll tell you in the app before it takes effect, not after.
New Quest AI Inc.
San Francisco, California