Quell - Privacy Policy
Quell — Privacy Policy
Quell helps you keep no contact and heal after a breakup. What you write here is personal, so the app is built to keep it on your phone.
In a crisis? Quell is a self-help tool, not a medical or emergency service. If you are thinking about harming yourself or you are in danger, contact your local emergency number or a crisis line now.
1. Who we are
Quell ("the app") is developed and operated by Kaya Apps ("we", "us"). Kaya Apps is the data controller for the personal data described in this policy. You can reach us at any time at furkan18688@gmail.com.
This policy explains what the app stores, what leaves your device, who processes it, and how long it is kept. It applies to the Quell iOS app, its widgets, and the servers that support it.
2. The short version
| Account required | No. Quell works without signing up. We never ask for your email address, phone number, or real name. |
|---|---|
| Where your entries live | On your device: your no-contact streak, check-ins, journal, letters you keep, your reasons for leaving, hard days, and conversations with Sage. |
| Backup | Optionally in your own iCloud Drive, which only you can access. We cannot read it. |
| What leaves your device | Only when you talk to Sage (the AI coach): the recent conversation and a short summary of your progress, to write a reply. Plus anonymous usage statistics, crash reports, and subscription status. |
| The person you are distancing from | Quell never contacts anyone, never reads your messages, and has no access to their accounts. |
| Model training | No. Your content is not used to train any AI model. |
| Tracking and ads | None. No advertising, no advertising identifier, no data sold or shared for advertising. |
3. What stays on your device
The following is stored only in the app's private storage on your iPhone (and, if iCloud backup is on, in your own iCloud Drive):
- Your streak: the relationship type you chose, an optional label, the date of last contact, milestones, and slips with their reason.
- Daily check-ins: mood, urge level, whether you made contact, and an optional note.
- Journal entries and letters: letters you keep in the vault stay on your device. Letters you "release to the Void" are deleted immediately, not stored.
- Triggers and settings: "Why I left" reasons, hard days (dates and labels), hard hours, and reminder preferences.
- Safe person: the name and phone number you enter or pick. If you use "Choose from contacts", iOS shows its own picker and Quell receives only the single contact you select; it never reads your address book.
- Sage conversations: local chat logs and your chosen nickname.
- Widgets: widgets read your streak from a shared container on the same device.
Reminders are local notifications scheduled directly by your iPhone; no remote push service is involved. You can delete everything at any time in Me → Privacy & data → Delete all data, or by deleting the app (and its iCloud backup in iOS Settings).
4. Sage, the AI coach
Sage is optional and part of Quell Pro. Before first use, the app asks for your consent; you can withdraw it at any time in Me → Privacy & data.
Data Transmission
When you send Sage a message, the app sends to our server:
- Your recent conversation with Sage (up to the last 12 messages);
- A short context summary (never your name): relationship type, days of no contact, the hardest moments and goals you chose, up to seven of your "why I left" reasons, your last three check-ins (mood and urge only), the coaching style you picked, and the app language.
Privacy note: Sage requests never send your journal entries, unsent letters, safe person contact, daily notes, or hard-day labels.
Processing & Retention
Our server passes this to Google's Gemini API, acting as our processor, to write the reply, and returns it to your phone. We use Google's paid API, under whose terms your content is not used to train or improve Google's models. Google may keep requests for a limited period to detect abuse, as described in its terms.
What our server keeps: It does not store your messages. To deliver a reply reliably if your connection drops, it keeps the reply encrypted for 24 hours, then it expires. It also keeps usage records without message content (time, language, token counts, a random install identifier, and your subscription status) to enforce daily limits, prevent abuse, and manage costs.
Safety: The app checks your message on your device for crisis language (for example, thoughts of self-harm). If it finds any, the message is not sent; Quell displays crisis resources instead.
Sage is an AI. It can make mistakes and is not a therapist, doctor, or emergency service.
5. Analytics, crash reports and device integrity
- Product analytics (Google Firebase Analytics): Tracks which screens and features are used, for example "check-in saved" or "paywall viewed", with aggregated counts and categories (such as urge level bands, contact status, and onboarding choices). It never collects freeform text, raw mood scores, names, or phone numbers. Exception: A message you choose to submit via Me → Support is delivered as an anonymous analytics event (its topic and up to 400 characters of text) so we can review feedback; please do not include personal details in it. Firebase also receives an app instance identifier, device model, OS version, app version, language, and approximate country. Advertising features and IDFA collection are disabled.
- Crash reports (Firebase Crashlytics): Collects technical crash information (device model, OS version, stack traces) to help us resolve bugs.
- Apple App Attest: Before Sage can be used, your device verifies to our server that requests originate from a genuine Quell installation. This uses a key generated in your iPhone's Secure Enclave and contains no personal information.
6. Subscriptions
Purchases and transactions are handled directly by Apple. We never receive or store your payment details. We use Adapty, acting as our processor, to manage subscription entitlements: it receives purchase and renewal events provided by Apple, a random Adapty profile identifier, and basic device information (device model, OS version, app version, language, vendor identifier) to unlock Quell Pro features and monitor trial and renewal rates.
7. Why we process data, and on what legal basis
- To provide the app and Sage: Performance of our agreement with you. Some details you share with Sage (such as emotional states) may be sensitive; we process this only with your explicit consent, which you can withdraw at any time.
- Analytics and crash reports: Our legitimate interest in maintaining and improving application performance.
- Subscriptions: Performance of the purchase contract and fulfillment of statutory accounting obligations.
- Abuse prevention and security: Our legitimate interest in safeguarding service infrastructure.
8. Who we share it with
Only with the service providers below, acting strictly on our instructions:
| Google (Gemini API) | Generates Sage's responses. |
|---|---|
| Google (Firebase) | Provides product analytics and crash reporting. |
| Adapty | Manages subscriptions and unlocks Pro features. |
| Apple | App distribution, payment processing, optional iCloud backups, and App Attest validation. |
| Hosting Provider | Operates the intermediary proxy server between the app and the AI processor. |
We do not sell personal data and do not share it for advertising purposes. We may disclose information if required by applicable law.
9. International transfers
Our service providers may process data outside your country of residence, including in the United States. Where required by law, these transfers rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses (SCCs).
10. How long we keep it
- Data on your device: Stored locally until you delete individual items or uninstall the app.
- Sage replies on our server: Retained encrypted for up to 24 hours to handle retries, then expired. Sage messages are not persistently stored.
- Usage metadata: Retained only as long as necessary for daily rate limits, cost monitoring, and security, then deleted or anonymized.
- Firebase Analytics: Configured to retain data for up to 14 months.
- Crash reports: Retained for up to 90 days in Firebase Crashlytics.
- Subscription records: Retained for the duration of the subscription and as mandated by financial and accounting laws.
11. Your rights
Depending on your location (for example under the GDPR, UK GDPR, KVKK, or California privacy laws), you may have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and consent withdrawal. Most of your records remain exclusively on your device and under your direct control. For any data processed by us or our processors, contact furkan18688@gmail.com. Because we do not require accounts, we may request your Adapty profile ID or purchase receipt to locate relevant technical logs. You also have the right to lodge a complaint with your local data protection authority.
12. Children
Quell is not directed to children under 16, and we do not knowingly collect personal data from them.
13. Security
Data stored on your iPhone is protected by iOS data protection encryption. Network traffic to our servers uses TLS encryption, requests must be authenticated via Apple App Attest, and stored response payloads and keys are encrypted at rest.
14. Changes to this policy
We will update this page when our practices change and revise the date above. For significant changes we will let you know in the app.
15. Contact
Kaya Apps — furkan18688@gmail.com
Comments
Post a Comment