Privacy policy

This privacy policy applies to the q.buzz app (hereby referred to as "Application") for mobile devices that was created by Q.BUZZ INC (hereby referred to as "Service Provider"). This service is intended for use "AS IS".

The Application collects information when you download and use it. This information may include:

• Your device’s operating system;
• The email address or phone number used for sign-in;
• The pages of the Application that you visit;
• The time and date of your visit;
• The time spent on the Application.

The Application may collect precise information about the location of your mobile device when you specifically instruct it to do so by answering a geotagging question. The Service Provider does not have access to this location data and does not otherwise collect precise information about your device location.

If you use your Google or Apple account to sign into the Application, the Application may collect your:

• Email address — for contact only as described below;
• Name — the default name other users see if you use sharing features;
• Profile picture — the default avatar other users see if you use sharing features;
• Language preference — for adapting language-based Application settings and communication from the Service Provider.

The Service Provider may use the information you provide to contact you from time to time with important information and required notices. We do not send you marketing email unless you have asked us to. We do use account information and usage metadata to measure how the Application is used and how well our own marketing reaches people. We will never use your information for third-party marketing.

For a better experience, while using the Application, the Service Provider may require you to provide us with certain personally identifiable information, including but not limited to email and user ID. The information that the Service Provider request will be retained by them and used as described in this privacy policy.

To understand how the Application is used, and how well the Service Provider’s own marketing reaches people, usage information is transmitted to external analytics services. What is shared with them is:

• identifiers, being your account ID and, where you signed in with an email address, that address. If you signed in with a phone number, the number is not shared with these services in any form;
• measurements of use, such as which features are opened and how often, and diagnostic information about errors and crashes.

This is done solely to evaluate the Application and the Service Provider’s own marketing. Your information is not shared to support anyone else’s advertising, and it is not sold.

The content of your check-ins — your questions, your responses, and any photos or locations you attach to them — is end-to-end encrypted. It is never shared with third parties, and these services cannot read it any more than the Service Provider can.

The Application uses the following third-party services, each of which has its own privacy policy:

• Google Play Services — Used to measure usage and performance and to detect if the app crashes or hangs.
• Firebase Authentication — Handles sign-in. It holds the email address or phone number you sign in with, in order to verify it and issue your sign-in code. It is not used for analytics.
• Google Analytics for Firebase — Used to measure usage and performance.
• LogRocket — Used to measure usage and performance and to diagnose errors and crashes. What you type into the Application, including your questions and responses, is redacted before anything leaves your device.

The Service Provider may disclose User Provided and Automatically Collected Information:

• As required by law, such as to comply with a subpoena or similar legal process;
• When they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
• With their trusted services providers who work on their behalf, do not have an independent use of the information we disclose to them, and have agreed to adhere to the rules set forth in this privacy statement.

What can be disclosed is limited by what the Service Provider is able to read. Account information — your account ID, the email address or phone number used for sign-in, and measurements of how the Application is used — can be produced in readable form. The content of your check-ins cannot. Because it is encrypted with a key the Service Provider does not hold, it can only ever be produced as encrypted data that the Service Provider is unable to decrypt.

You can stop all collection of information by the Application by signing out and uninstalling. You may use the standard uninstall processes as may be available as part of your mobile device or via the mobile application marketplace or network.

The Service Provider retains User Provided data for as long as you use the Application.

If you delete your account, and your record is synced to the cloud, you have 30 days to sign back in and restore it. After that it is deleted. Deleted data may persist in backups held by the Service Provider's cloud infrastructure provider for up to a further 30 days before it is removed permanently, so 60 days is the outside figure.

The data management page explains how to delete individual check-ins or your whole account. You can also contact the Service Provider at help@q.buzz.

The Service Provider does not use the Application to knowingly solicit data from or market to children under the age of 13.

The Application does not address anyone under the age of 13. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age. In the case the Service Provider discover that a child under 13 has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact the Service Provider ( help@q.buzz) so that they will be able to take the necessary actions.

The content of your check-ins — your questions, your responses, and any photos or locations you attach to them — is end-to-end encrypted. It is encrypted on your device, and what is stored on the Service Provider's servers cannot be read by the Service Provider.

A backup of your key is kept so that a new device does not mean starting again. That backup is itself locked, by your recovery phrase or by the secure storage built into your device, and the Service Provider does not hold the means to open it. If you lose both your devices and your recovery phrase, the record cannot be recovered by anyone, including the Service Provider.

Account information is encrypted in transit and in storage, but the Service Provider holds the key to it and can therefore read the stored values. It covers your account ID, the email address or phone number used for sign-in, and measurements of how the Application is used. It is also protected by physical, electronic and procedural safeguards.

The Application's data is stored on Google Cloud infrastructure, operated by Google LLC, in a Firestore database located in the United States. The database is replicated across Google data centers in Iowa, Oklahoma and South Carolina. Data is not stored outside the United States. Sign-in is handled by Firebase Authentication, also operated by Google LLC.

This Privacy Policy may be updated from time to time for any reason. The Service Provider will notify you of any changes to the Privacy Policy by updating this page with the new Privacy Policy. You are advised to consult this Privacy Policy regularly for any changes, as continued use is deemed approval of all changes.

This privacy policy is effective as of August 28, 2026.

By using the Application, you are consenting to the processing of your information as set forth in this Privacy Policy now and as amended by us.

If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at help@q.buzz.