Privacy Policy

1. Information We Collect

We collect: (a) information you provide directly - name, email, date of birth, profile details, interests, posts, messages, and quest activity; (b) information generated through use - matches, reactions, contributions, and engagement signals; and (c) technical data - IP address, device and OS information, and session logs. We collect date of birth solely to verify the minimum age requirement.

2. How We Use Your Information

We use your data to operate and improve the Service, power AI-based matching and discovery, personalise your experience, send relevant notifications, maintain safety and prevent abuse, and comply with legal obligations. Our legal bases (GDPR) are: performance of our contract with you, your consent (e.g. marketing), our legitimate interests (e.g. security), and legal compliance.

3. AI & Embeddings

To power matching and content discovery we generate vector embeddings from your profile and posts. Embeddings are numerical representations stored securely and used within the Service for relevance and matching. We do not sell embeddings or use them for third-party advertising.

4. Sharing Your Information

We do not sell your personal data. We share data with trusted processors who help us run the Service (cloud hosting, AI inference, email delivery, error monitoring, payment processing) under contracts that restrict their use of it. We may disclose data when required by law or to protect the rights and safety of users and the public.

5. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as Standard Contractual Clauses to protect transfers out of the EEA / UK.

6. Data Retention

We retain your data while your account is active and as needed to provide the Service. When you delete your account, we delete or irreversibly anonymise ordinary account data within 30 days. Open safety reports expire 365 days after submission; resolved reports expire 180 days after resolution. On account deletion, we replace the relevant account or target identifier with a keyed pseudonymous reference. We erase the deleted reporter’s submission text and, for reports targeting the deleted account or its content, erase evidence snapshots and free-text notes unless a documented legal hold applies. A legal hold may extend retention only while necessary for a specific legal obligation or dispute, subject to periodic review.

7. Security

We use industry-standard safeguards: TLS in transit, hashed passwords (bcrypt), optional two-factor authentication, access controls, and audit logging of security events. No system is perfectly secure, and we cannot guarantee absolute security.

8. Your GDPR Rights

If you are in the EEA / UK you have the right to access, rectify, erase, restrict, and port your data, and to object to certain processing. You can export your data ("Download my data") and delete your account directly in Settings, or contact us to exercise any right. You may also lodge a complaint with your local supervisory authority.

9. Your California (CCPA/CPRA) Rights

California residents have the right to know what personal information we collect, to request its deletion, to correct inaccurate information, and to opt out of "sale" or "sharing" of personal information. We do not sell personal information. We will not discriminate against you for exercising these rights. Submit requests in Settings or via our support channels.

10. Cookies & Tracking

The mobile app does not use advertising cookies. We use on-device secure storage for authentication tokens and limited first-party analytics to understand feature usage. Any web companion uses only strictly-necessary and first-party analytics cookies, governed by the separate Cookie Policy.

11. Children's Privacy

The Service is not directed to children under 16 and we do not knowingly collect their data. We enforce a minimum signup age. If you believe a minor has registered, contact us and we will remove the account and associated data promptly.

12. Changes to This Policy

We may update this Policy periodically. We will notify you of material changes via in-app notification or email. Continued use after changes take effect constitutes acceptance of the updated Policy.

13. Contact Us

For privacy questions or to exercise your rights, contact privacy@qynta.app or use the in-app support feature. If we have appointed a Data Protection Officer, requests will be routed to them.