Privacy Policy

Overview

Quippe is a voice and text journaling product operated by Luminary LLC ("we", "us", "our"). Journal content is encrypted at rest and sent over secure connections. Our backend and service providers process content to provide the features you use. We never sell your personal data.

This policy explains what information we collect, why we collect it, who we share it with, and your rights regarding your data. By using Quippe you agree to this policy.

1. Information We Collect

Account information

You can sign in with Google or email. The web supports email magic links, and the iOS app supports email and password. Supabase manages authentication and account identifiers. Google sign-in also provides your email address and a Google account identifier.

Voice recordings

When you record a voice memo, the audio stream is sent in real time to Speechmatics for transcription. We do not store your raw audio. Only the resulting text transcript is kept.

Journal content

Transcripts and AI-generated summaries are encrypted with AES-256-GCM before storage. Encryption is managed by our backend. Authorized backend processing decrypts content when needed to serve your journal and provide AI features; this is not end-to-end encryption.

Personal context

Onboarding answers become journal entries. Quippe can identify facts from your entries for you to confirm, edit, or reject. When you choose to update your portrait, confirmed facts are used to generate it. This personal context is not used for advertising.

Usage analytics

We use PostHog to collect anonymised usage events (e.g. "recording started", "onboarding completed"). No journal content or personal identifying information is included in these events. You can opt out by enabling "Do Not Track" in your browser.

2. How We Use Your Information

• To provide and improve the journaling service
• To authenticate you and keep your account secure
• To generate personalised AI reflections on your journal entries
• To understand how the product is used in aggregate

We do not use your data for advertising or sell it to third parties. Personal context supports the journaling features you choose to use.

3. Third-Party Services

Quippe relies on the following sub-processors. Each has its own privacy policy:

When your transcript is sent to a model service provider for summary generation, it is decrypted briefly on our backend server in memory. It is not logged or persisted in plaintext beyond that request.

4. Data Retention

We keep your data for as long as your account is active. If you delete your account, associated records, including encrypted journal content, are permanently deleted from our database within 30 days. Backups are purged on a rolling 30-day cycle.

5. Security

Journal content is encrypted with AES-256-GCM before storage. Connections to our services use TLS. Our backend can access plaintext to serve your journal and process features such as summaries, reflections, and portraits. Transcription and AI providers receive the content needed to deliver these features.

6. Your Rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, or to delete your account, contact us at the address below. We will respond within 30 days.

7. Children

Quippe is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child under 13 has created an account, contact us and we will delete it promptly.

8. Changes to This Policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the app. Continued use after changes take effect constitutes acceptance of the revised policy.

9. Contact

Quippe is operated by Luminary LLC. If you have questions about this policy, contact team@quippe.ai.