Privacy Policy

We collect several types of information to provide, maintain, and improve our services:

We use the information we collect for the following purposes:

• Authentication and Account Management: To create, maintain, and secure your account, verify your identity, and enable sign-in functionality.
• Content Personalization: To tailor news insights, event recommendations, and notification topics based on your interests and preferences.
• Service Delivery: To generate AI-powered explanations, insights, and summaries of news events using third-party AI models.
• Notifications and Alerts: To send push notifications about breaking news, high-impact events, and content updates based on your notification preferences.
• Analytics and Improvement: To analyze usage patterns, identify bugs, improve features, and optimize app performance.
• Subscription and Billing: To process payments, manage subscriptions, handle upgrades/downgrades, and provide customer support.
• Security and Fraud Prevention: To detect, prevent, and respond to security incidents, abuse, fraud, and violations of our Terms of Service.
• Legal Compliance: To comply with applicable laws, regulations, legal processes, and enforceable governmental requests.
• Communication: To send service-related emails, product updates, security alerts, and respond to your inquiries.

We retain your personal data for as long as necessary to provide our services and fulfill the purposes outlined in this Privacy Policy:

• Active Accounts: Your account data is retained while your account remains active and for a reasonable period after account deletion to comply with legal obligations and prevent fraud.
• Usage Data: Analytics and usage logs are typically retained for up to 90 days for operational purposes, with aggregated or anonymized data retained longer for statistical analysis.
• Billing Records: Payment and subscription records may be retained for up to 7 years to comply with tax, accounting, and legal requirements.
• Security Logs: Security-related logs may be retained longer to investigate incidents, ensure system integrity, and comply with legal obligations.

When data is no longer needed, we delete or anonymize it. However, some data may persist in backups for a limited period before permanent deletion.

We take the security of your personal data seriously and implement reasonable technical and organizational measures to protect it from unauthorized access, disclosure, alteration, or destruction:

• Encryption: Data is encrypted in transit using TLS/SSL and at rest where supported by our infrastructure providers.
• Access Controls: Access to personal data is restricted to authorized personnel who need it to perform their job functions.
• Authentication Security: Passwords are hashed using industry-standard cryptographic algorithms and never stored in plain text.
• Infrastructure Security: We rely on enterprise-grade cloud providers (Supabase, Vercel) that maintain rigorous security standards and compliance certifications.
• Monitoring: We monitor systems for suspicious activity, vulnerabilities, and potential security incidents.

However, no system is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.

QuantiAI relies on trusted third-party service providers to deliver our services. These providers have access to certain personal data only to perform specific tasks on our behalf and are obligated to protect your information:

These third-party providers have their own privacy policies and terms of service. We encourage you to review them to understand how they handle your data.

We do not sell your personal data to third parties for marketing purposes. We may share your information in the following limited circumstances:

• Service Providers: With third-party vendors (listed above) who help us operate, maintain, and improve our services.
• Legal Compliance: When required by law, regulation, legal process, or enforceable governmental request (e.g., subpoenas, court orders).
• Protection of Rights: To enforce our Terms of Service, investigate potential violations, detect fraud, or protect the safety and security of QuantiAI, our users, or the public.
• Business Transfers: In connection with a merger, acquisition, bankruptcy, or sale of assets, your data may be transferred to the acquiring entity.
• Aggregated or Anonymized Data: We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify you for analytics, research, or marketing purposes.
• With Your Consent: We may share data for other purposes with your explicit consent.

When you access QuantiAI through a web browser, we use cookies and similar tracking technologies to:

• Session Management: Maintain your authenticated session and remember your login status.
• Preferences: Store your settings, language, and display preferences for a consistent experience.
• Analytics: Understand how users interact with our service, identify popular features, and measure performance.
• Security: Detect and prevent fraudulent activity, abuse, and security incidents.

You can control cookies through your browser settings. Note that disabling cookies may limit your ability to use certain features of QuantiAI. Most browsers accept cookies by default, but you can configure your browser to refuse cookies or alert you when cookies are being sent.

Depending on your location and applicable laws (including GDPR, CCPA, and similar regulations), you may have certain rights regarding your personal data:

To exercise any of these rights, please contact us at privacy@quantiai.app. We will respond to your request within a reasonable timeframe as required by applicable law.

QuantiAI is operated from the United States, and our third-party service providers may be located in various countries around the world. By using our service, you acknowledge that your data may be transferred to, stored, and processed in countries outside of your country of residence, including the United States.

These countries may have data protection laws that differ from those in your jurisdiction. We rely on our third-party providers (Supabase, Stripe, Vercel, OpenAI, Apple) to implement appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms, to protect your data during international transfers.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, we take additional steps to ensure your data is protected in accordance with GDPR and other applicable regulations.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you of material changes via email or in-app notification
• Post the updated policy on our website and within the app

Your continued use of QuantiAI after any changes to this Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.