Privacy Policy

1. Introduction

Quibly ("we", "us", or "our") operates the Quibly mobile application (iOS and Android) and the website tryquibly.com (collectively, the "Service").

This Privacy Policy explains what data we collect, how we use it, who we share it with, and what rights you have. We are committed to complying with the Brazilian General Data Protection Law (LGPD — Lei n.º 13.709/2018), the European General Data Protection Regulation (GDPR), and the privacy requirements of the Apple App Store and Google Play Store.

By using Quibly, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the Service.

2. Data We Collect

2.1 Account Data (provided by you)

• Email address and password (via Firebase Authentication)
• Display name and profile photo (optional, uploaded by you)

2.2 Study & Usage Data

• Study sessions (duration, start and end timestamps)
• Pomodoro sessions and break intervals
• Daily study streaks (consecutive days)
• Performance statistics (quiz scores, flashcard review results)
• League and ranking participation data
• Study materials uploaded by you (PDFs, notes, slides) — processed by AI to generate flashcards and quizzes

2.3 Technical Data

• Device ID and device type
• App version and operating system
• Push notification tokens (Firebase Cloud Messaging)
• Advertising identifiers (collected by Google AdMob)

2.4 Data We Do NOT Collect

• GPS location
• Contacts or address book
• Browsing history
• Financial or payment data (no in-app purchases at this time)

3. How We Use Your Data

We use the data we collect to:

• Provide the Service: Authenticate your account, generate flashcards and quizzes from your study materials using AI, track your study sessions and streaks, and power leagues and rankings.
• Improve the Service: Analyze usage patterns to improve features, fix bugs, and optimize performance.
• Send Notifications: Deliver study reminders, streak alerts, and league updates via push notifications (you can opt out at any time in your device settings).
• Display Ads: Show personalized advertisements through Google AdMob to support the free tier of the Service.
• Ensure Security: Detect and prevent fraud, abuse, and unauthorized access.

4. AI Processing of Study Materials

When you upload study materials (PDFs, notes, slides, screenshots), our AI processes them to extract key concepts and generate flashcards and quizzes. Here's what you should know:

• Your materials are processed solely to provide you with study tools — never for any other purpose.
• We do not use your uploaded content to train, fine-tune, or improve any AI or machine learning models.
• Your documents are stored securely and are only accessible to you.
• You can delete your materials and all generated content at any time.

5. Third-Party Services

We use the following third-party services to operate Quibly:

Each third-party service has its own privacy policy. We encourage you to review them. We do not sell your personal data to any third party.

6. Advertising (Google AdMob)

Quibly's free tier is supported by ads served through Google AdMob. AdMob may collect and use advertising identifiers and device information to display personalized ads.

You can manage your ad preferences:

• iOS: Settings > Privacy > Tracking — disable tracking for Quibly.
• Android: Settings > Google > Ads — opt out of personalized ads or reset your advertising ID.

For more information, see Google's Privacy Policy.

7. Device Permissions

Quibly may request the following device permissions:

• Camera: Used for proof-of-study photos (study verification). Never accessed in the background.
• Photo Library: Used to select a profile picture. We only access photos you explicitly choose.
• Notifications: Used to send study reminders, streak alerts, and league updates. You can disable these in your device settings at any time.

All permissions are optional. Quibly works without them — but some features may be limited.

8. Cookies & Local Storage

The Quibly mobile app uses AsyncStorage (local device storage) to store preferences, session tokens, and cached data for offline functionality. This data stays on your device and is not transmitted to our servers unless required for the Service to function (e.g., authentication tokens).

The Quibly website (tryquibly.com) may use cookies for authentication and analytics. You can manage cookie preferences through your browser settings.

9. Data Retention

We retain your data as follows:

• Account data: Retained while your account is active. Deleted within 30 days of account deletion request.
• Study materials and generated content: Retained while your account is active. You can delete individual documents at any time.
• Usage and analytics data: Retained in anonymized form for up to 24 months for service improvement.
• Legal obligations: Certain data may be retained longer if required by applicable law.

10. Data Security

We take the security of your data seriously. Our measures include:

• Encryption in transit (TLS/HTTPS) and at rest
• Secure authentication via Firebase with token-based sessions
• Access controls limiting who can access user data internally
• Regular security reviews and updates

While we implement industry-standard security practices, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security but are committed to protecting your data to the best of our ability.

11. Your Rights

Under LGPD and GDPR, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data and account.
• Portability: Request your data in a structured, machine-readable format.
• Restriction: Request that we limit the processing of your data.
• Objection: Object to the processing of your data for specific purposes (e.g., personalized advertising).
• Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at support@tryquibly.com. We will respond within 15 business days (LGPD) or 30 days (GDPR).

12. Children's Privacy

Quibly is designed for users aged 17 and older. We do not knowingly collect personal data from children under 17. If we discover that a user under 17 has provided us with personal data, we will promptly delete it.

If you are a parent or guardian and believe your child has provided personal data to Quibly, please contact us at support@tryquibly.com.

13. International Data Transfers

Your data may be transferred to and processed in countries outside of your residence, including the United States (where Firebase and Google services are hosted). We ensure that such transfers comply with applicable data protection laws through appropriate safeguards, including standard contractual clauses where required.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and notify you through the app or via email for significant changes.

We encourage you to review this policy periodically. Your continued use of the Service after changes constitutes your acceptance of the updated policy.