State Privacy Addenda
Version 1.0 — Last updated July 18, 2026
These State Privacy Addenda ("Addenda") supplement the ORYN QUEST — PRIVACY POLICY for residents of U.S. states with comprehensive consumer privacy laws other than California, including Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and states with similar laws. California residents should read the ORYN QUEST — CALIFORNIA PRIVACY ADDENDUM.
ORYN Quest, Inc. ("ORYN Quest," "we," "our," or "us") currently operates first in the Los Angeles area, and some state laws may not yet apply to us at our present scale or resident counts. We extend the rights below to residents of these states regardless, as a matter of practice, while reserving statutory defenses where a law does not in fact apply.
ARTICLE 1 — YOUR RIGHTS
Subject to verification and legal limits, residents of covered states may:
1.1 Confirm and Access — confirm whether we process your personal data and access it.
1.2 Correct — correct inaccuracies in your personal data. Most account and profile information can be corrected directly in account settings.
1.3 Delete — request deletion of personal data provided by or obtained about you, subject to the legal and safety carve-outs described in the ORYN QUEST — DATA RETENTION POLICY.
1.4 Portability — obtain a copy of personal data you provided to us in a portable and readily usable format.
1.5 Opt Out of Targeted Advertising — we do not engage in targeted advertising, so there is no targeted-advertising processing to opt out of. If that ever changes, we will provide a compliant opt-out mechanism before the change takes effect.
1.6 Opt Out of Sale — we do not sell personal data.
1.7 Opt Out of Certain Profiling — we do not use profiling in furtherance of decisions that produce legal or similarly significant effects (such as decisions about lending, housing, insurance underwriting, education enrollment, or employment). Our interest profiles power activity recommendations only, and you may switch off that personalization entirely in account settings.
1.8 Controller
For purposes of these laws, the controller of personal data processed through the Platform is ORYN Quest, Inc., a Delaware corporation reachable at support@orynquest.com.
1.9 State-Specific Notes
- (a) Virginia (VCDPA), Colorado (CPA), and Connecticut (CTDPA): all of the rights in Sections 1.1 through 1.7 apply, together with the sensitive-data consent practices in Article 2 and the appeal process in Section 4.4.
- (b) Utah (UCPA): Utah's law provides access, deletion, portability, and opt-out rights; it does not mandate a correction right or an appeal process, but we extend both to Utah residents anyway as a matter of practice.
- (c) Other states: as additional state privacy laws take effect (including laws in states such as Texas, Oregon, Montana, Delaware, New Jersey, and others), we apply the same rights framework described in this document to their residents to the extent those laws require, and as a courtesy where they do not.
ARTICLE 2 — SENSITIVE DATA AND CHILDREN'S DATA
2.1 Sensitive Data We Process
As described in the ORYN QUEST — PRIVACY POLICY, a Parent may voluntarily record sensitive information in a Child profile (accessibility and support needs, behavior notes) and optional insurance identifiers for insurance-based activities.
2.2 Consent Basis
We process this sensitive data only because, and only after, the Parent deliberately provides it for the stated, purpose-limited uses (activity matching, accommodations, and insurance verification the Parent initiates). That deliberate provision, together with recorded acceptance of the ORYN QUEST — PRIVACY POLICY under the Platform's versioned consent system, constitutes the consent these laws contemplate. A Parent may withdraw consent at any time by removing the information, deleting the Child profile, or deleting the account.
2.3 Data Concerning a Known Child
Where state law treats personal data collected from a known child as sensitive data requiring processing in accordance with COPPA, our practices are described in the ORYN QUEST — CHILDREN'S PRIVACY POLICY: children never have accounts, the kid zone collects nothing, and all child data is provided by the Parent.
2.4 De-identified Data
Where we maintain de-identified data, we maintain it without attempting to re-identify it and require the same of our service providers.
ARTICLE 3 — UNIVERSAL OPT-OUT SIGNALS
Where state law requires recognition of universal opt-out mechanisms (such as Global Privacy Control), we honor them. Because the Platform contains no targeted advertising, no sale of personal data, and no cross-site tracking technology, a browser sending a universal opt-out signal already receives the outcome the signal requests — our default treatment matches the opted-out state for every user.
ARTICLE 4 — HOW TO EXERCISE YOUR RIGHTS; APPEALS
4.1 Submitting a Request
Submit requests by emailing support@orynquest.com with the subject line "STATE PRIVACY REQUEST" (please state your state of residence), through your in-app account settings, or via the deletion instructions at https://orynquest.com/legal/data-deletion.
4.2 Verification
We verify requests against the email address and account information we hold, and may ask you to confirm the request while signed in. Requests concerning a Child's information must come from the verified account-holding Parent or Guardian.
4.3 Timing
We will respond within the time required by your state's law (generally forty-five (45) days, extendable once where the law permits, with notice).
4.4 Appeals
If we decline all or part of your request, you may appeal by replying to our decision or emailing support@orynquest.com with the subject line "PRIVACY APPEAL" within a reasonable period after our decision. We will respond to appeals within the time your state's law requires and will explain the reasons for our decision. If your appeal is denied, we will provide a method for you to contact your state Attorney General or other authority designated by your state's law.
4.5 No Discrimination
We will not discriminate against you for exercising these rights.
4.6 No Fee
We process rights requests free of charge. If requests from a single resident are manifestly unfounded, excessive, or repetitive, applicable law may permit a reasonable fee or refusal; if we ever rely on that provision, we will explain why in writing.
4.7 Portability Format
Where you request a portable copy of your personal data, we will provide it in a commonly used, readily usable format to the extent technically feasible.
ARTICLE 5 — NEVADA RESIDENTS
Under Nevada law (NRS Chapter 603A), Nevada residents may direct operators not to sell certain covered information. ORYN Quest does not sell covered information as defined by Nevada law. Nevada residents may nonetheless submit a verified no-sale request to support@orynquest.com with the subject line "NEVADA PRIVACY REQUEST," and we will honor it if our practices ever change.
ARTICLE 6 — RELATED POLICIES AND CHANGES
6.1 These Addenda should be read together with the ORYN QUEST — PRIVACY POLICY, the ORYN QUEST — CALIFORNIA PRIVACY ADDENDUM, the ORYN QUEST — CHILDREN'S PRIVACY POLICY, and the ORYN QUEST — DATA RETENTION POLICY. Users outside the United States should read the ORYN QUEST — INTERNATIONAL PRIVACY ADDENDUM.
6.2 We may update these Addenda from time to time, including as new state privacy laws take effect. When we do, we will revise the "Last Updated" date and version above, and material changes will be presented through the Platform's versioned consent system and, where appropriate, by notice through the Platform or by email.
ARTICLE 7 — CONTACT
ORYN Quest, Inc. Email: support@orynquest.com Website: https://orynquest.com