Privacy Policy

1. Information We Collect

1.1 Information You Provide Directly

• Account Information: When you create an account, we collect information via Google OAuth (or other supported sign-in methods), including your name, email address, and profile picture, as authorized by you through the OAuth provider.
• Profile & Relationship Information: Information you choose to add to your profile, such as relationship status or partner-linking details.
• User Content: Diary entries, journal reflections, responses to deck questions, notes, and any other content you create, upload, or submit within the App ("User Content").
• Communications: Information you provide when you contact us for support, feedback, or other inquiries.
• Purchase Information: If you subscribe to a paid tier or make an in-app purchase, purchase confirmation data is provided to us by Apple App Store or Google Play (see Section 4 — we do not receive or store your full payment card details).

1.2 Information Collected Automatically

• Device & Usage Data: Device type, operating system, unique device identifiers, app version, language settings, crash logs, and general usage/interaction data (e.g., which decks you open, session length, feature usage).
• Analytics Data: We use analytics tools (such as PostHog) to understand aggregate usage patterns and improve the App. This may include event data such as screens viewed, buttons tapped, and session frequency.
• Approximate Location: We may infer general (non-precise) location (such as country or region) from your IP address or device settings for language/currency defaults and legal compliance. We do not collect precise GPS location.

1.3 Information From Third Parties

• Google OAuth: When you sign in with Google, we receive basic profile information (name, email, profile image) as permitted by your Google account settings and your consent at the time of sign-in.
• Apple App Store / Google Play: Transaction identifiers, subscription status, and purchase-related metadata necessary to validate and manage your purchases and entitlements.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate you via Google OAuth;
• Provide, operate, maintain, and improve the App's features, including decks, the shared memory diary, and relationship action tasks;
• Process and validate subscriptions and in-app purchases through Apple App Store and Google Play;
• Enable partner-linking features where both users consent to share designated content with one another;
• Send administrative communications (e.g., purchase confirmations, security alerts, policy updates);
• Monitor, analyze, and improve App performance, stability, and user experience through analytics;
• Detect, investigate, and prevent fraud, abuse, security incidents, and violations of our Terms of Service;
• Comply with legal obligations and enforce our agreements.

We do not sell your personal information. We do not use your private diary entries, journal reflections, or deck responses to train artificial intelligence or machine learning models.

3. How We Share Your Information

We share information only in the following circumstances:

• Service Providers: With vendors who perform services on our behalf, including Amazon Web Services (AWS) and Supabase for backend hosting, database, and infrastructure services; PostHog for telemetry; and customer support tools. These providers are contractually obligated to protect your information.
• Partner-Linked Content: If you choose to link accounts with a partner within the App, designated shared content (e.g., shared diary entries, completed decks) will be visible to your linked partner. Content you do not choose to share remains private.
• Apple and Google: Transaction data necessary to process payments, validate subscriptions, and manage entitlements is shared with and received from Apple App Store and Google Play.
• Legal Requirements: If required to do so by law, subpoena, or governmental request in Ontario or federal Canadian jurisdictions.
• Business Transfers: In connection with a merger, acquisition, reorganization, or sale of assets, subject to standard confidentiality protections.

4. Payments and In-App Purchases

All payments for subscriptions and in-app purchases are processed entirely by Apple App Store or Google Play, depending on the platform from which you downloaded the App. We do not collect, process, or store your credit card, debit card, or other full payment credentials. We only receive limited transaction metadata (e.g., product purchased, transaction ID, subscription status, renewal date) necessary to unlock and manage subscription entitlements within the App.

5. Data Security

We implement technical and organizational measures designed to protect your information, including:

• Encryption of data in transit (HTTPS/TLS) and at rest (AES-256);
• Access controls limiting who can access personal data within our organization;
• Secure cloud infrastructure via AWS and Supabase.

6. Data Retention

We retain your personal information and User Content for as long as your account remains active. If you delete your account, we will delete or anonymize your personal information and User Content within a commercially reasonable period, except where required to retain certain data to comply with legal obligations.

7. Your Rights and Choices (PIPEDA, GDPR, CCPA)

As a business operated out of Ontario, Canada, our processing of personal data complies with the Personal Information Protection and Electronic Documents Act (PIPEDA). Depending on your jurisdiction, you have the right to:

• Access the personal information we hold about you;
• Correct inaccurate information;
• Delete your account and associated personal information directly within App Settings;
• Export your data in a portable format;
• Withdraw consent or revoke Google OAuth access at myaccount.google.com/permissions.

To exercise any of these rights, you can also reach out to us at support@qalbquest.app.

8. Children's Privacy

The App is not directed to children under 13, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, please contact us at support@qalbquest.app so we can delete it.

9. International Data Transfers

Our service providers (including AWS and Supabase) may process and store data in countries other than your country of residence. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the App or by other reasonable means and update the "Last Updated" date above.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices in Ontario, please contact us at: