Privacy Policy

Last Updated: March 29, 2026

1. Introduction

Quloq ("we", "our", "us") is a mobile application. This Privacy Policy explains what personal data we collect, why we collect it, how it is used and protected, and your rights regarding that data.

By using Quloq, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the app.

2. Data Controller

The data controller responsible for your personal data is:

3. Information We Collect

3.1 Information You Provide Directly

  • Account Information: Your email address and optional display name, provided when you create an account.
  • Study Content: Questions, answers, study sets, and any text you type into the app.
  • Voice Recordings: Audio recordings you create for questions and answers. These are stored in Firebase Cloud Storage under your user account and are not shared with third parties except as described in Section 5.
  • Images: Photos you attach to study questions, stored in Firebase Cloud Storage.
  • Imported Content: If you use the Google Sheets import feature, the content of the spreadsheet you share with the app is processed to create flashcards.

3.2 Information Collected Automatically

  • Usage Analytics: In-app events such as which features you use, session duration, and study progress. Collected via Firebase Analytics to help us improve the app.
  • Crash Reports: If the app crashes, an anonymous crash report including a stack trace and device information is sent to Firebase Crashlytics. This does not include your study content.
  • Device Information: Device model, operating system version, and app version, collected automatically by Firebase.
  • Subscription Status: Whether you have an active premium subscription. This is stored in our database to gate premium features.
  • Push Notification Tokens: If you enable notifications, a device push token is stored server-side to deliver study reminders and daily snippets.

3.3 Data Stored Locally on Your Device

To provide offline functionality, Quloq stores a local cache of your study content (up to 100 MB) and downloaded audio files on your device. This data is yours and is not transmitted to third parties. It is removed when you delete the app.

4. How We Use Your Information

We use your information for the following purposes:

  • To create and maintain your account and authenticate you securely
  • To store and sync your study sets, progress, and settings across devices
  • To provide text-to-speech audio playback for your study content (via Apple's on-device TTS, or Google Cloud TTS if you enable AI Voice)
  • To evaluate spoken exam answers with AI (via the Anthropic Claude API, if you use Exam Mode)
  • To process Google Sheets imports into flashcards (if you use the import feature)
  • To send study reminders and daily snippet notifications (if you enable them)
  • To track your learning progress and session history
  • To diagnose crashes and improve app stability (via Crashlytics)
  • To understand aggregate usage patterns and improve the app (via Firebase Analytics)
  • To process and verify your in-app subscription through Apple's App Store

5. Third-Party Services

Quloq uses the following third-party services, each of which may receive certain user data. By using the relevant features, you consent to the data flows described below.

5.1 Firebase (Google LLC)

  • Services Used: Firebase Authentication, Firestore (database), Cloud Storage (files), Analytics, Crashlytics, Cloud Functions
  • Data Received: Account info, study content, voice recordings, images, usage events, crash reports, device identifiers
  • Purpose: Core app infrastructure — authentication, data storage, analytics, crash reporting, and server-side processing
  • Privacy Policy: firebase.google.com/support/privacy

5.2 Google Cloud Text-to-Speech

  • Data Received: The text content of your flashcard questions and answers
  • When: Only when you enable "AI Voice" in settings. If disabled, all text-to-speech is processed on-device by Apple's AVSpeechSynthesizer and no text is sent to Google.
  • Purpose: To generate high-quality synthetic audio for your study content
  • Privacy Policy: cloud.google.com/terms/cloud-privacy-notice

5.3 Anthropic (Claude API)

  • Data Received: The text transcription of your spoken exam answer (not the raw audio) along with the corresponding question text
  • When: Only when you use Audio Exam Mode and submit a spoken answer for AI grading
  • Purpose: To evaluate whether your spoken answer is correct and provide feedback
  • Important: Anthropic processes this data per their API usage policy. Transcriptions sent to Claude are not used to train Anthropic's models under their standard API terms.
  • Privacy Policy: anthropic.com/privacy

5.4 Google Sheets API

  • Data Received: The content of any Google Sheets spreadsheet you choose to import
  • When: Only when you use the Google Sheets import feature and authorize access to a specific sheet
  • Purpose: To read your spreadsheet content and convert it into flashcards
  • Privacy Policy: policies.google.com/privacy

5.5 Apple Sign In

  • Data Received: A verified email address (or relay address) and name provided by Apple
  • Purpose: To authenticate you without requiring a separate password
  • Privacy Policy: apple.com/legal/privacy

5.6 Google Sign In

  • Data Received: Your Google account email address and public profile name
  • Purpose: To authenticate you using your existing Google account
  • Privacy Policy: policies.google.com/privacy

5.7 Apple App Store / StoreKit

  • Data Received: Purchase receipts and subscription transaction data
  • Purpose: To process subscription payments and verify purchase entitlements
  • Privacy Policy: apple.com/legal/privacy

6. Lawful Basis for Processing (GDPR)

If you are in the European Economic Area (EEA), we process your data under the following lawful bases as required by GDPR Article 6:

  • Performance of a contract — Account data, study content, and subscription status are processed to provide the service you signed up for.
  • Legitimate interests — Crash reporting and aggregate usage analytics are processed to improve app stability and features. We have assessed that these interests do not override your rights.
  • Consent — AI Voice (Google Cloud TTS) and AI Exam grading (Anthropic Claude) are only activated when you explicitly enable them in settings or use the feature. You can withdraw consent at any time by disabling the feature.
  • Legal obligation — We may retain certain data if required by law.

7. Data Storage and Security

  • All cloud data is stored on Google Cloud Platform (Firebase), hosted in the United States
  • Data transmission between the app and our servers uses HTTPS/TLS encryption
  • Firebase Security Rules restrict all database and storage access so each user can only read and write their own data
  • Authentication is handled by Firebase Authentication using secure industry-standard OAuth 2.0 protocols
  • We do not store payment card details — all payment processing is handled by Apple

8. International Data Transfers

Quloq is operated from the United States. If you are located outside the US (including in the EEA or UK), your data is transferred to and processed in the United States. For EEA/UK users, these transfers are covered by Google's Data Processing Agreement and Standard Contractual Clauses (SCCs) under GDPR Article 46. By using Quloq, you consent to this transfer.

9. Data Retention

  • Active accounts: Data is retained as long as your account exists
  • Deleted accounts: Your Firestore data, Firebase Storage files (images, voice recordings, AI-generated audio), and account record are deleted within 30 days of account deletion
  • Crash logs: Retained in Firebase Crashlytics for up to 90 days
  • Analytics events: Retained for up to 14 months per Google's default Analytics retention
  • Third-party AI processing: Text sent to Google Cloud TTS or Anthropic is processed in real time and not stored by us. Each provider retains server-side logs per their own policies.
  • Local device cache: Cleared when you delete the app

10. Your Rights

10.1 All Users

  • Access: View and edit your study content at any time within the app
  • Correction: Edit any personal data stored in your account
  • Deletion: Delete your account and all associated data through Settings → Delete Account. This permanently removes your Firestore data, Storage files (images, voice recordings), progress records, and your authentication record. This action is irreversible.
  • Opt out of analytics: Disable "Usage Analytics" in Settings to stop Firebase Analytics data collection
  • Opt out of notifications: Disable notifications in Settings or in your device's iOS Settings

10.2 GDPR Rights (EEA and UK Users)

In addition to the above, if you are in the EEA or UK you have the right to:

  • Rectification: Request correction of inaccurate personal data
  • Erasure ("right to be forgotten"): Request deletion of your data. Use the in-app deletion feature or contact us at support@quloq.com.
  • Restriction of processing: Request that we limit how we process your data in certain circumstances
  • Data portability: Request a copy of your personal data in a structured, machine-readable format
  • Object to processing: Object to processing based on legitimate interests (e.g., analytics). Contact us at support@quloq.com.
  • Withdraw consent: Withdraw consent for AI features at any time by disabling them in Settings
  • Lodge a complaint: You have the right to lodge a complaint with your national data protection authority (e.g., the ICO in the UK, CNIL in France, or your local EU supervisory authority).

10.3 California Residents (CCPA)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

  • Right to know: What categories and specific pieces of personal information we collect, the sources, the purposes, and any third parties with whom we share it
  • Right to delete: Request deletion of your personal information (use in-app Delete Account or contact us)
  • Right to correct: Request correction of inaccurate personal information
  • Right to opt out of sale or sharing: We do not sell your personal information. We share aggregate, anonymous analytics data with Firebase Analytics (Google) for app improvement purposes. You can opt out by disabling analytics in Settings.
  • Right to non-discrimination: We will not discriminate against you for exercising your privacy rights

Categories of personal information we collect: Identifiers (email, user ID, device ID), audio/voice content, user-generated content (study sets), internet/device activity (usage events), inferences drawn from usage for personalized study experience.

11. Children's Privacy

Quloq is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If you are under 13, please do not use this app.

If you are a parent or guardian and believe your child under 13 has provided us with personal information, please contact us at support@quloq.com and we will promptly delete it.

Users between 13 and 17 should have parental or guardian consent before using the app. Parents or guardians of minor users may contact us to request access to, correction of, or deletion of their child's data.

12. AI-Generated Content

Quloq uses AI services for certain features:

  • Exam Mode: Your spoken answers are transcribed and evaluated by Anthropic's Claude AI. Evaluations are provided for study assistance only and are not guaranteed to be accurate. Do not rely on AI evaluations for high-stakes academic or professional assessments.
  • AI Voice (TTS): Voices are synthetically generated by Google Cloud Text-to-Speech. Audio quality and pronunciation accuracy are not guaranteed.
  • Smart Import / Scan Notes: AI-assisted extraction of content from documents or photos may produce errors. Always review imported content before use.

13. Notifications

If you grant notification permission, we may send:

  • Daily study reminders at your chosen time
  • Daily Snippet notifications with educational content
  • Progress milestone notifications

Your push notification device token is stored in our Firebase database to deliver these notifications. You can disable notifications at any time in your device's iOS Settings or within the app Settings screen. Disabling notifications removes your token from our servers.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time as the app's features change. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page
  • Post the updated policy at this URL

Continued use of the app after changes are posted constitutes your acceptance of the updated policy. If changes are significant, we may also notify you via an in-app message.

15. Contact Us

For questions, privacy requests, or to exercise your rights, contact us at:

We will respond to all privacy requests within 30 days.

Quloq is committed to transparency. We will never sell your personal information to third parties.