Privacy Policy
Last updated: May 5, 2025
1. Overview
QAM.AI ("we", "our", or "us") operates the QAM.AI web application and mobile application (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read it carefully. By using the Service, you consent to the practices described here.
2. Information We Collect
Account information. When you sign in with Google or Apple, we receive your name, email address, and profile picture from those providers. Guest users receive an anonymous session identifier and no personal data is collected.
Usage data. We log the AI model used, approximate token counts for each message, timestamps, and your IP address. We do not store the full content of your conversations on our servers beyond what is necessary to deliver the response.
AI persona settings. If you set a custom name or avatar for your AI assistant, that name is stored in our database and the avatar image is stored locally on your device.
Device & app data. Standard technical data such as device type, operating system, app version, and crash reports may be collected to maintain and improve the Service.
3. How We Use Your Information
- To authenticate you and maintain your session.
- To route your messages to AI providers and return responses.
- To enforce rate limits and prevent abuse.
- To improve the quality and reliability of the Service.
- To comply with legal obligations.
We do not sell your personal information to third parties.
4. Third-Party AI Providers
Your messages are transmitted to third-party AI providers (including Anthropic, OpenAI, and OpenRouter) to generate responses. Each provider operates under their own privacy policy and data-handling practices. We recommend reviewing their policies:
- Anthropic — anthropic.com/privacy
- OpenAI — openai.com/policies/privacy-policy
- OpenRouter — openrouter.ai/privacy
We do not share your account information (name, email) with these providers — only the message content required to generate a response.
5. Google Sign-In
When you sign in with Google, we use the OAuth 2.0 protocol and verify your identity token on our servers. We store only your Google subject ID, name, email, and avatar URL. We do not request access to your Google Drive, Gmail, or any other Google services.
6. Apple Sign-In
When you sign in with Apple, we receive a user identifier and, optionally, your name and email. Apple may relay a private email address. We store only the information Apple provides and use it solely for authentication.
7. Data Retention
Account data is retained for as long as your account is active. Usage logs (model, token counts, timestamps) are retained for up to 90 days for analytics and abuse prevention. You may request deletion of your account and associated data by contacting us at the address below.
8. Cookies and Local Storage
We use a secure HTTP-only cookie to maintain your authentication session. The mobile app stores your session token and AI persona settings in device-local storage (AsyncStorage). We do not use advertising or tracking cookies.
9. Security
We implement industry-standard measures to protect your data, including HTTPS in transit, hashed secrets, and access controls on our database. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.
10. Children's Privacy
The Service is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
11. Your Rights
Depending on your jurisdiction, you may have the right to access, correct, or delete personal data we hold about you, or to object to or restrict certain processing. To exercise these rights, contact us at the address below.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, by in-app notice. Your continued use of the Service after changes become effective constitutes acceptance of the revised policy.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at:
QAMAI Labs
Email: [email protected]