Privacy Policy

Last updated: June 25, 2026. Effective: June 25, 2026.

This Privacy Policy explains how Qualia ("we", "us") collects, uses, and shares information when you use the Qualia application (the "Service"). If you have questions, contact us at qualiaaiteam@gmail.com.

1. Who can use Qualia

Qualia is intended for users aged 13 and older. If you are under 16 and in the European Economic Area or the United Kingdom, you may need a parent or guardian's consent for us to process your personal data, as required by local law. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us personal data, contact us and we will delete it.

2. Information we collect

• Account information: your email address, display name, and avatar (if provided), managed through our authentication provider.
• Guided session content: the problems you enter, your responses, hints you request, confidence ratings, reflections, and the reasoning summaries generated for you.
• Chat content: the messages you send, the assistant replies, and any files you upload.
• Usage data: counts of AI requests and basic activity needed to enforce rate limits and operate the Service.
• Technical data: standard server logs (such as IP address and request metadata) processed by our hosting and infrastructure providers for security and reliability.

3. How we use your information

• To provide the Service and generate guided sessions and replies.
• To keep you signed in and secure your account.
• To enforce usage limits and prevent abuse.
• To improve the Service and respond to your feedback and support requests.
• To comply with legal obligations.

Where required by law, our legal bases for processing are: performance of our contract with you, your consent, our legitimate interests in operating and securing the Service, and compliance with legal obligations.

4. AI processing

Qualia uses third-party AI models to generate questions, feedback, and chat replies. The text and files you submit are sent to our AI provider (currently Google, via the Gemini API) to produce responses. Please do not enter sensitive personal information you would not want processed this way. AI output can be inaccurate and should not be relied on as professional, medical, legal, or financial advice.

5. Service providers we share data with

We share data with vendors who process it on our behalf under contract. These currently include:

• Supabase (authentication, database, file storage). See Supabase Privacy.
• Google (Gemini AI processing). See Google Privacy.
• Vercel (application hosting and privacy-friendly, cookieless analytics). See Vercel Privacy.
• Tally (optional feedback forms). See Tally Privacy.

We do not sell your personal information, and we do not use it for cross-context behavioral advertising.

6. Cookies and local storage

We use a small number of essential cookies to keep you signed in (managed by our authentication provider). We use your browser's local storage for preferences such as theme, draft answers, and to remember whether you have seen certain prompts. We do not use advertising or cross-site tracking cookies. We use Vercel Analytics to count page views and visits; it is cookieless and does not track you across sites. If you open an embedded feedback form, that third party may set its own cookies.

7. Data retention

We keep your account and content until you delete them or close your account. Uploaded files may be removed automatically after a retention period. Some records may be retained longer where required for legal, security, or accounting purposes.

8. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, or CCPA/CPRA), you may have rights to access, correct, delete, export, or restrict processing of your personal data, and to object or withdraw consent. You can:

• Export your data from your account settings.
• Delete your account and associated data from your account settings.
• Contact us at qualiaaiteam@gmail.com to exercise any other right.

You may also lodge a complaint with your local data protection authority.

9. International transfers

Our providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses for international transfers.

10. Security

We use access controls, encryption in transit, row-level security, and a strict content security policy to protect your data. No system is perfectly secure, but we work to protect your information and will notify you and regulators of incidents as required by law.

11. Changes

We may update this policy. We will post the new version here and update the date above. Significant changes will be communicated where required.

12. Contact

Qualia. Email: qualiaaiteam@gmail.com.