🔐 Privacy Policy

Welcome to Quba! Your privacy is critically important to us. This Privacy Policy explains how Quba ("we," "us," or "our") collects, uses, stores, and protects your personal information when you use our mobile application (the "App") and related services (collectively, the "Services").

By downloading, installing, or using the App, you acknowledge that you have read and understood this Privacy Policy and agree to the collection, use, and disclosure of your information as described herein. If you do not agree with this Privacy Policy, please do not use the App.

We are committed to protecting your privacy and ensuring you have a positive experience while using our App. This policy outlines our practices regarding data collection, usage, and your rights as a user.

Quba is designed with privacy in mind. We collect minimal information necessary to provide you with a functional and enjoyable experience. All data is stored locally on your device unless otherwise specified.

1. Information You Provide Directly:

• Travel Records: Destination names, travel dates, transportation methods, companion information, and personal notes you create within the App
• Photos and Media: Images you choose to attach to your travel records from your device's photo library or camera
• Location Data: City and country names you manually enter when creating travel records (we do not automatically track your location)
• Preferences and Settings: App configuration choices, display preferences, and feature settings
• Communication Data: Information you provide when contacting our support team, including your email address and message content

2. Automatically Collected Information:

• Device Information: Device model, operating system version, unique device identifiers, and mobile network information
• Usage Data: App features used, interaction patterns, session duration, and crash reports for debugging purposes
• Purchase Information: Transaction details for in-app purchases processed through Apple's payment system (we do not store payment card information)
• Performance Data: App performance metrics, error logs, and diagnostic information to improve functionality

3. Information We Do NOT Collect:

• Real-time GPS location or location tracking
• Contacts from your address book
• Biometric data (fingerprints, facial recognition data)
• Social media account information
• Browsing history or activity outside the App
• Personal identification documents

We use the information we collect for the following purposes:

1. Core App Functionality:

• Store and display your travel records, photos, and notes locally on your device
• Generate interactive world maps showing your travel footprint
• Calculate travel statistics and analytics (countries visited, total trips, etc.)
• Manage your Quba Coins balance and in-app purchase transactions

2. Service Improvement and Development:

• Analyze usage patterns to understand how users interact with features
• Identify and fix bugs, errors, and performance issues
• Develop new features and improve existing functionality
• Conduct internal research and analytics to enhance user experience
• Test new features and optimize App performance

3. Communication and Support:

• Respond to your inquiries, questions, and support requests
• Send important updates about the App, including security alerts and policy changes
• Notify you about new features, updates, or promotional offers (with your consent)
• Provide customer service and technical assistance

4. Legal and Security Purposes:

• Comply with applicable laws, regulations, and legal processes
• Protect against fraud, unauthorized access, and security threats
• Enforce our Terms of Service and other policies
• Protect the rights, property, and safety of Quba, our users, and the public

Local Storage Architecture:

Quba is designed with a "local-first" approach. All your travel records, photos, notes, and preferences are stored directly on your device using secure local storage mechanisms. This means:

• Your data remains on your device and is not automatically uploaded to cloud servers
• You maintain complete control over your information
• Your travel memories are accessible even without an internet connection
• Data is encrypted using iOS's built-in security features

Security Measures:

We implement industry-standard security measures to protect your information:

• Encryption: Data stored on your device is protected by iOS encryption and security features
• Secure Transmission: When communicating with external services (e.g., OpenStreetMap), we use HTTPS encryption
• Access Controls: The App requests only necessary permissions (camera, photo library) and respects iOS privacy controls
• Regular Updates: We regularly update the App to address security vulnerabilities and implement best practices
• No Third-Party Access: We do not provide third parties with access to your locally stored data

Data Backup and Recovery:

• Your data may be included in iOS device backups (iCloud or iTunes) based on your device settings
• You are responsible for managing your device backups
• If you delete the App, all locally stored data will be permanently removed from your device
• We recommend regularly backing up your device to prevent data loss

Quba integrates with certain third-party services to provide full functionality. We carefully select partners who respect user privacy and comply with applicable data protection laws.

1. OpenStreetMap (Map Services):

• Purpose: Provides map tiles and geographic data for the interactive world map feature
• Data Shared: Map tile requests (which may include approximate location based on map view)
• Privacy Policy: OpenStreetMap Foundation Privacy Policy applies
• Data Processing: OpenStreetMap may log IP addresses and tile requests for operational purposes

2. Apple In-App Purchase System:

• Purpose: Processes payments for Quba Coins purchases
• Data Shared: Transaction information, Apple ID, purchase history
• Privacy Policy: Apple's Privacy Policy applies to all payment processing
• Payment Security: We do not have access to your payment card information

3. Analytics and Crash Reporting:

• Purpose: Helps us understand app usage and identify technical issues
• Data Collected: Anonymized usage statistics, crash logs, device information
• Opt-Out: You can disable analytics through iOS privacy settings
• Data Anonymization: All analytics data is aggregated and anonymized

When We May Disclose Information:

We may disclose your information in the following limited circumstances:

• Legal Compliance: When required by law, court order, or government regulation
• Safety and Security: To protect against fraud, security threats, or illegal activity
• Business Transfers: In connection with a merger, acquisition, or sale of assets (with notice to users)
• With Your Consent: When you explicitly authorize us to share specific information

You have significant control over your personal information and how it is used. Depending on your location, you may have the following rights:

1. Access and Portability:

• Access all your data stored in the App at any time through the App interface
• Export your travel records and photos from the App
• Request a copy of information we hold about you (if any is stored on our servers)

2. Correction and Modification:

• Edit, update, or correct your travel records, notes, and preferences at any time
• Modify or remove photos attached to your travel memories
• Update your communication preferences and settings

3. Deletion and Erasure:

• Delete individual travel records, photos, or notes within the App
• Permanently erase all data by deleting the App from your device
• Request deletion of any data stored on our servers (if applicable)

4. Consent Withdrawal:

• Revoke photo library access through iOS Settings > Privacy > Photos
• Revoke camera access through iOS Settings > Privacy > Camera
• Opt out of analytics through iOS Settings > Privacy > Analytics & Improvements
• Unsubscribe from promotional communications (if you opted in)

5. Data Minimization:

• Choose what information to include in your travel records
• Decide whether to attach photos to your memories
• Control which App features you use and what data you generate

Exercising Your Rights:

To exercise any of these rights or if you have questions about your privacy, please contact us at qubaxk7m@outlook.com. We will respond to your request within 30 days.

Protecting children's privacy is especially important to us. Quba is designed to be family-friendly and complies with the Children's Online Privacy Protection Act (COPPA) and similar international regulations.

Age Requirements:

• The App is intended for users aged 13 and older
• Users between 13 and 18 should use the App with parental guidance
• We do not knowingly collect personal information from children under 13

Parental Controls:

• Parents can use iOS Screen Time and Restrictions to manage App usage
• In-app purchases can be restricted through iOS parental controls
• Parents should review this Privacy Policy with their children

If We Discover Child Data:

If we become aware that we have inadvertently collected personal information from a child under 13 without proper parental consent, we will take immediate steps to delete that information from our systems. If you believe we have collected information from a child under 13, please contact us immediately at qubaxk7m@outlook.com.

Local Data Retention:

Since Quba stores data locally on your device, you have complete control over data retention:

• Data remains on your device indefinitely until you choose to delete it
• You can delete individual travel records, photos, or notes at any time
• Deleting the App will permanently remove all locally stored data
• Data included in device backups follows your iOS backup retention settings

Server-Side Data Retention (If Applicable):

For any data temporarily processed on our servers:

• Data is processed transiently and not permanently stored
• Temporary processing data is automatically deleted within 24 hours
• Crash reports and analytics data are retained for up to 90 days
• Support communication records are retained for up to 2 years for customer service purposes

Purchase Records:

• Transaction records for in-app purchases are maintained by Apple, not by us
• We retain minimal purchase verification data for up to 7 years to comply with financial regulations
• Purchase history can be viewed through your Apple ID account

Account Deletion (Future Feature):

If we introduce cloud sync or account features in the future:

• You will have the ability to delete your account and all associated data
• Account deletion will be permanent and irreversible
• We will provide clear instructions for account deletion
• Deletion requests will be processed within 30 days

Quba is available to users worldwide. Due to the nature of our local-first architecture, most of your data never leaves your device. However, certain limited data may be transferred internationally:

Data Transfer Scenarios:

• Map Services: OpenStreetMap requests may be routed through servers in various countries
• Support Communications: Email correspondence may be stored on servers in different jurisdictions
• Analytics Data: Anonymized usage statistics may be processed internationally

Data Protection Safeguards:

When data is transferred internationally, we ensure appropriate safeguards are in place:

• Use of encryption during transmission (HTTPS/TLS)
• Compliance with applicable data protection frameworks (Privacy Shield successor, Standard Contractual Clauses)
• Selection of service providers with strong privacy and security practices
• Minimization of data transferred across borders

European Economic Area (EEA) Users:

If you are located in the EEA, we comply with GDPR requirements for international data transfers:

• We rely on approved transfer mechanisms such as Standard Contractual Clauses
• We ensure adequate protection for your personal data when transferred outside the EEA
• You have the right to obtain information about the safeguards we use for international transfers

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We are committed to keeping you informed about how we protect your privacy.

How We Notify You of Changes:

• Material Changes: For significant changes that affect your rights, we will provide prominent notice through the App or via email (if you have provided one)
• Minor Updates: For non-material changes, we will update the "Last Updated" date at the top of this policy
• In-App Notification: You may receive a notification within the App when the policy is updated
• Review Opportunity: We will provide a reasonable period for you to review changes before they take effect

Your Acceptance of Changes:

• Continued use of the App after policy changes constitutes acceptance of the updated policy
• If you do not agree with the changes, you should discontinue use of the App
• For material changes, we may require explicit consent before continuing to use certain features

Version History:

We maintain a record of significant policy changes. You can request information about previous versions by contacting us at qubaxk7m@outlook.com.

While we implement robust security measures, no system is completely immune to security incidents. In the unlikely event of a data breach that affects your personal information, we are committed to transparency and prompt action.

Our Breach Response Protocol:

• Immediate Investigation: We will promptly investigate any suspected security incident
• Containment: Take immediate steps to contain the breach and prevent further unauthorized access
• Assessment: Evaluate the scope, nature, and potential impact of the breach
• Notification: Notify affected users within 72 hours of discovering the breach (as required by law)
• Remediation: Implement measures to prevent similar incidents in the future
• Regulatory Compliance: Report the breach to relevant authorities as required by applicable laws

What We Will Tell You:

In the event of a breach notification, we will provide:

• Description of what happened and when it was discovered
• Types of information that were involved
• Steps we have taken to address the breach
• Recommended actions you can take to protect yourself
• Contact information for questions and support

How We Will Contact You:

• In-app notification (if the App is still functional)
• Email (if you have provided contact information)
• Public notice on our website or through app store listings (for widespread incidents)

We value your privacy concerns and are committed to addressing any questions or issues you may have about how we handle your personal information.

General Privacy Inquiries:

For questions about this Privacy Policy, our data practices, or to exercise your privacy rights, please contact us:

What to Include in Your Privacy Request:

• Your name and contact information
• Clear description of your request or concern
• Specific information about the data in question (if applicable)
• Any relevant screenshots or documentation
• Preferred method of response

Types of Requests We Handle:

• Access requests (view your data)
• Correction requests (update inaccurate data)
• Deletion requests (remove your data)
• Opt-out requests (marketing communications, analytics)
• Privacy policy questions and clarifications
• Data breach concerns or reports
• Complaints about privacy practices

Regulatory Authorities:

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with your local data protection authority:

• EU/EEA: Your national Data Protection Authority
• United States: Federal Trade Commission (FTC) or your state Attorney General
• California: California Attorney General's Office
• Other Jurisdictions: Your local privacy or consumer protection regulator

Security Vulnerability Reporting:

If you discover a security vulnerability in the App, please report it responsibly to qubaxk7m@outlook.com with the subject line "Security Vulnerability Report." We appreciate responsible disclosure and will work with you to address the issue promptly.

For users in the European Economic Area (EEA), United Kingdom, and Switzerland, we process your personal data based on the following legal grounds as required by the General Data Protection Regulation (GDPR):

1. Contractual Necessity:

Processing is necessary to provide the Services you have requested:

• Storing and displaying your travel records
• Processing in-app purchases
• Generating AI memoirs based on your data
• Providing customer support

2. Legitimate Interests:

Processing is necessary for our legitimate business interests, which do not override your rights:

• Improving and optimizing the App
• Analyzing usage patterns to enhance user experience
• Detecting and preventing fraud and security threats
• Conducting internal research and development

3. Consent:

Where required, we obtain your explicit consent for:

• Accessing your photo library and camera
• Sending promotional communications
• Using cookies or similar tracking technologies (if implemented)
• Processing sensitive personal data (if applicable)

4. Legal Obligations:

Processing is necessary to comply with legal requirements:

• Maintaining transaction records for tax purposes
• Responding to lawful requests from authorities
• Complying with data protection and consumer protection laws

Right to Object:

You have the right to object to processing based on legitimate interests. If you object, we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.

Quba is a native mobile application and does not use traditional web cookies. However, we may use similar technologies to enhance your experience and understand how the App is used.

Technologies We May Use:

1. Local Storage:

• Purpose: Store your travel records, preferences, and app settings on your device
• Data Stored: Travel records, photos, user preferences, Quba Coins balance
• Control: Managed by deleting the App or specific data within the App

2. Device Identifiers:

• Purpose: Identify your device for analytics and crash reporting
• Data Collected: Anonymous device ID, iOS version, device model
• Control: Reset advertising identifier through iOS Settings > Privacy > Advertising

3. Analytics SDKs:

• Purpose: Understand app usage patterns and identify technical issues
• Data Collected: App opens, feature usage, crash logs, performance metrics
• Control: Disable through iOS Settings > Privacy > Analytics & Improvements

4. Session Information:

• Purpose: Maintain app state and provide seamless experience
• Data Stored: Current session data, temporary cache
• Duration: Cleared when you close the App or after a period of inactivity

Third-Party Tracking:

We do not allow third-party advertising networks or social media platforms to track you through the App. We do not display advertisements or integrate social media tracking pixels.

Do Not Track Signals:

As a native mobile app, Quba does not respond to web-based "Do Not Track" signals. However, you can control tracking through iOS privacy settings as described above.

California Privacy Rights (CCPA/CPRA):

California residents have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: Request information about personal information we collect, use, and disclose
• Right to Delete: Request deletion of your personal information
• Right to Opt-Out: Opt out of the "sale" or "sharing" of personal information (we do not sell or share)
• Right to Correct: Request correction of inaccurate personal information
• Right to Limit: Limit use of sensitive personal information
• Non-Discrimination: We will not discriminate against you for exercising your rights

Nevada Privacy Rights:

Nevada residents have the right to opt out of the sale of certain personal information. We do not sell personal information as defined by Nevada law.

Automated Decision-Making:

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects you. AI memoir generation is a creative tool that you control and does not make decisions about you.

Sensitive Personal Information:

We do not intentionally collect sensitive personal information such as:

• Social Security numbers or government-issued IDs
• Financial account information (handled by Apple)
• Precise geolocation data
• Health or medical information
• Biometric data for identification purposes
• Sexual orientation or religious beliefs

If you choose to include such information in your travel notes or photos, you do so voluntarily, and it remains stored locally on your device.

Accessibility:

We are committed to making our Privacy Policy accessible to all users. If you need this policy in an alternative format or have difficulty accessing it, please contact us at qubaxk7m@outlook.com.