Privacy Policy

Quby ("we", "our", or "us") is committed to protecting your personal information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your information when you use the Quby app and related services.

By using Quby, you agree to the collection and use of information as described in this policy.

Information you provide directly:

• Account information: name, email address, profile photo
• Business information: business name, category, address, description
• Payment information: processed securely through Stripe (we do not store card numbers)
• Communications: messages or support requests you send us

Information collected automatically:

• Location data (when you grant permission) to show nearby businesses and enable map features
• Device information: device type, operating system, app version
• Usage data: features used, screens viewed, transaction history
• Camera access (when you grant permission) for QR code scanning

Information from third parties:

• Google Sign-In: name, email, and profile picture from your Google account
• Apple Sign-In: name and email from your Apple ID
• Stripe: payment processing status and transaction metadata

We use the information we collect to:

• Create and manage your account
• Process payments and maintain your wallet balance
• Show nearby businesses and personalize the Discover experience
• Display your transaction history and activity
• Manage loyalty points, rewards, and stamp cards
• Facilitate bill splitting and group expenses
• Send you important service updates and notifications
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Improve and develop new features

We do not sell your personal information. We may share it with:

• Service providers: Supabase (database and authentication), Stripe (payment processing), Google (maps and sign-in), Apple (sign-in). These providers have their own privacy policies governing their use of your data.
• Businesses: When you pay a business, they receive transaction details (amount, timestamp). They do not receive your payment method details.
• Other users: In split/group features, your name and handle are visible to group members.
• Legal requirements: When required by law, court order, or governmental authority.

Quby requests access to your device location to show nearby businesses on the map and calculate distances. Location access is optional — you can use most features without it. We do not store precise location history on our servers.

You can revoke location permission at any time in your device settings.

We request camera access solely for QR code scanning to facilitate payments. We do not store, transmit, or analyze images or video from your camera.

We retain your personal information for as long as your account is active or as needed to provide services. Transaction records may be retained for up to 7 years for financial compliance purposes. You may request deletion of your account and associated data at any time.

We implement industry-standard security measures including:

• Encryption of data in transit (TLS) and at rest
• Secure authentication via Supabase with Row Level Security
• Payment processing handled exclusively by PCI-compliant Stripe
• Regular security reviews and access controls

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but are committed to protecting your information.

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate or incomplete information
• Deletion: Request deletion of your account and data
• Portability: Receive your data in a portable format
• Opt-out: Withdraw consent for optional data uses

To exercise these rights, contact us at privacy@quby.app. We will respond within 30 days.

The Service is not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us personal information, please contact us and we will delete it promptly.

The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies.

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy in the app or by email. Your continued use of the Service after changes constitutes acceptance.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact:

privacy@quby.app