QuantDays (“we,” “us,” or “our”) operates the QuantLapse mobile application (“App”). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App. By using the App, you agree to the practices described in this Privacy Policy.
1. Information We Collect
Information You Provide
- Account Information: If you create an account, we collect your email address (for email sign-up) or your name and email (from Apple Sign-In or Google Sign-In OAuth profiles). Account creation is optional; the App is fully functional without an account.
- Photos: Photos you capture using the camera or upload from your device library for use in timelapses.
- Metric Data: Custom metric names, units, values, and configuration you define and enter (e.g., weight, calories, distance).
- Timelapse Data: Timelapse names, color preferences, frequency settings, and timestamps.
Information Collected Automatically
- Subscription Status: Your premium subscription status and entitlement information, managed through RevenueCat.
- Sync Metadata: If you enable cloud sync, we store timestamps and sync identifiers to coordinate data across your devices.
Information We Do NOT Collect
- Location or GPS data
- Device identifiers or fingerprints
- Contacts or address book data
- Analytics, usage telemetry, or behavioral tracking data
- Health or fitness data
- Microphone or audio data
- Browsing history
- Advertising identifiers
2. How We Use Your Information
We use the information we collect solely to:
- Provide the App’s features: Store and display your photos, metrics, timelapses, and generated videos
- Authenticate your account: Verify your identity when you sign in
- Process subscriptions: Manage your premium subscription status and entitlements
- Sync data across devices: If you opt in, securely synchronize your timelapses, photos, and metrics across your devices
- Generate videos: Process your photos into timelapse videos on your device
We do notuse your information for advertising, profiling, behavioral analysis, or any purpose beyond providing the App’s core functionality.
3. Data Storage and Security
Local Storage
All App data is stored locally on your device by default in a SQLite database and local file storage. Photos are stored as files in the App’s private directory. The App is designed as an offline-first application and does not require an internet connection to function.
Cloud Storage (Opt-In Only)
If you create an account and enable cloud sync, your data is synchronized to our cloud infrastructure:
- Photo Storage: Encrypted photos are stored on Cloudflare R2 (S3-compatible object storage).
- Metadata Storage: Encrypted timelapse, metric, and photo metadata is stored in Supabase (PostgreSQL database).
End-to-End Encryption
All data synced to the cloud is encrypted on your device before transmission using AES-256-CBC encryption. The encryption key is derived from your user account and is never transmitted to or stored on our servers. This means:
- We cannot read your photos, metric values, or timelapse data stored on our servers
- Even in the event of a server breach, your data remains encrypted and inaccessible
- Only your authenticated devices can decrypt your synced data
Data in Transit
All communications between the App and our cloud services use HTTPS/TLS encryption.
4. Third-Party Services
We use the following third-party services to operate the App:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Authentication and encrypted metadata storage | Email, name (from OAuth), encrypted metadata, user ID |
| Cloudflare R2 | Encrypted photo storage | Encrypted photo files, user ID |
| RevenueCat | Subscription and purchase management | User ID, subscription status, purchase history |
| Apple Sign-In | Authentication (optional) | Authentication tokens, name, email |
| Google Sign-In | Authentication (optional) | Authentication tokens, name, email |
We do not use any analytics, advertising, or crash reporting third-party services. We do not sell, rent, or share your personal information with third parties for marketing purposes.
5. Data Retention
- Local Data: Remains on your device until you delete it within the App or uninstall the App.
- Cloud Data: Retained as long as your account exists and sync is enabled. When you delete your account, all associated cloud data (encrypted photos and metadata) is permanently deleted from our servers.
- Subscription Data: Purchase and subscription records are maintained by Apple, Google, and RevenueCat according to their respective retention policies.
6. Your Rights and Choices
Access and Control
- Use Without an Account: You can use the App entirely offline without creating an account. No data leaves your device.
- Opt-In Sync: Cloud synchronization is disabled by default. You choose whether to enable it.
- Export Your Data: You can export your timelapse data as CSV files at any time.
- Delete Your Data: You can delete individual timelapses, photos, and metrics within the App. You can delete your account to remove all cloud-synced data.
Permissions
| Permission | Purpose | Required? |
|---|---|---|
| Camera | Capture photos for timelapses | Only if taking photos (not uploading) |
| Photo Library (Read) | Upload existing photos to timelapses | Only if uploading photos |
| Photo Library (Write) | Save generated timelapse videos | Only if saving videos |
No other device permissions (location, contacts, microphone, notifications, etc.) are requested.
Rights Under Privacy Laws
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Delete your personal information
- Port your data to another service (via CSV export)
- Withdraw consent for data processing (by disabling sync or deleting your account)
- Object to certain processing of your personal information
To exercise any of these rights, contact us at the email address below.
7. California Residents (CCPA)
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and disclose
- Request deletion of your personal information
- Opt out of the sale of your personal information — we do not sell your personal information
- Not be discriminated against for exercising your privacy rights
8. European Economic Area Residents (GDPR)
If you are located in the EEA, our legal bases for processing your personal information are:
- Contract Performance:Processing necessary to provide the App’s services (account management, data sync)
- Consent: Processing based on your explicit opt-in (cloud sync, account creation)
- Legitimate Interest: Processing necessary for security and fraud prevention
You have the right to lodge a complaint with your local data protection authority.
9. Children’s Privacy
The App is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us and we will delete such information.
10. Data Breach Notification
In the event of a data breach that affects your personal information, we will notify affected users within 72 hours of becoming aware of the breach, as required by applicable law. Due to our end-to-end encryption, the risk of meaningful data exposure in a breach is significantly reduced.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy within the App or by other reasonable means. The “Last Updated” date at the top will reflect the most recent revision. Your continued use of the App after changes are posted constitutes your acceptance of the revised policy.
12. Contact Us
If you have any questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about your data, please contact us at: