Your privacy.

Who to contact

The controller for your data is Razvan Soare. For any privacy question or request, email me@soarerazvan.com.

Razvan Soare operates Quapp as an independent developer. If you need a postal address for a legal request, ask by email and we will provide it.

What Quapp keeps

Your account

Your email address, a hashed password, an account identifier, and the name you choose for your duck. If you sign in with Google, Google supplies the email and name needed to sign you in.

Your pond

Friend connections, friend codes, the nicknames you give friends, the quacks you send and receive with their timestamps and played status, and the achievements you unlock. Friends can see your name, your duck's appearance, and your quacks. Nicknames stay private to you.

Your duck

Your duck's appearance and up to twelve named saved outfits. We also record Duck Studio visits and approximate time spent with the Studio in the foreground, linked to your account, to understand how customisation is used. We record accessories equipped on your saved character to understand item popularity.

Notifications

If you allow notifications, an installation identifier and an Expo push token are linked to your signed-in session so quacks can reach your device. Removing the app, signing out, or deleting the account removes them.

App activity

We record foreground app visits, the days you use the app and its last observed use. We also record notification permission settings per installation and observed changes when you return to the app or respond to its permission prompt. We record profile and friendship actions and symphony practice requests, with their time and success or failure status. These records, together with saved app activity, help us understand usage by account and investigate problems. We do not store passwords, request bodies, or screen recordings in these activity records.

Sessions and security

Each sign-in creates a session that records the IP address and device user agent at sign-in. Sessions expire after 90 days of inactivity. Sign-in attempts are rate limited using the same records. Password recovery codes are stored hashed and expire after five minutes.

Camera and sound

The camera is used only when you choose to scan a friend's QR code, and only to read the code. No photos or video leave your device. Quack sounds are bundled with the app; Quapp never records your microphone.

Why Quapp uses it

To sign you in, connect you with friends who accept your request, deliver and play quacks, save your customizations, show achievements, send notifications you asked for, understand feature usage and investigate account-specific problems, and keep the service secure. Quapp does not use your information for advertising, does not sell it, and does not track you across other apps or websites.

Where data protection law requires a legal basis, we rely on our contract with you to provide the service you signed up for, our legitimate interest in keeping Quapp secure and working, and your consent for optional features such as notifications, which you can withdraw at any time in your device settings.

Service providers

Quapp runs its own API and stores application data in a PostgreSQL database that only the API can reach. A few providers process data on Quapp's behalf:

• Our hosting provider, which runs the Quapp API server and the PostgreSQL database.
• Our email delivery provider, which sends password recovery emails.
• Expo Push Service and Apple Push Notification service for delivering notifications, and Expo for delivering app updates.
• A crash reporting service may receive technical reports when the app crashes. These describe the device, the app version, and what the app was doing, never your quacks or your friends.

These providers act on our instructions and may process data in the European Union and other countries. Where data leaves the region you live in, we rely on the provider's contractual safeguards, such as standard contractual clauses.

Retention and deletion

Your data is kept while your account exists. You can delete your account inside the app: open You, tap Account settings, then Delete account. A recent sign-in may be required. Deletion removes your profile, friendships, quacks, outfits, Studio usage and app activity records, achievements, and notification registrations from the application database and signs you out everywhere.

Queued notifications that were never delivered expire after one hour. Password recovery codes expire after five minutes.

Database backups can hold a copy of deleted data for up to 30 days before they are overwritten. Server logs, which can include IP addresses, are kept for up to 90 days for security and troubleshooting. Support emails are kept for as long as needed to resolve your request. We keep records longer only when the law requires it.

Your choices and rights

You can change your duck's name and appearance, turn quack sounds on or off, manage notification permission in your device settings, mute or remove friends, and delete your account at any time.

Depending on where you live, you may also have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, to withdraw consent, and to complain to your local data protection authority. To exercise a right, email us. We may ask you to confirm that you control the email address on the account, and we respond within one month.

Children

Quapp is not directed at children, and we do not knowingly keep an account or any information belonging to a child. There is no age verification in the app. If you believe a child has created an account, email the address above and we will delete it.

Changes

When our practices change, we update this page and the effective date at the top. For significant changes we will also let you know inside the app or by email before they take effect.