Legal

Privacy Policy

Last updated: February 1, 2026

1. Introduction

Quby (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered creative tools platform at www.quby.app and studio.quby.app.

Please read this Privacy Policy carefully. By using our Service, you consent to the practices described in this policy.

2. Information We Collect

2.1 Information You Provide

  • Account Information: Name, email address, and password when you create an account
  • Payment Information: Billing address and payment details (processed securely by Stripe)
  • User Content: Images, videos, audio files, and text prompts you upload or input
  • Communications: Messages you send to our support team or through feedback forms

2.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type, and unique device identifiers
  • Usage Data: Features used, actions taken, timestamps, and interaction patterns
  • Log Data: IP address, access times, pages viewed, and referring URLs
  • Cookies and Tracking: Information collected through cookies and similar technologies

2.3 Information from Third Parties

We may receive information about you from third-party services you use to sign in (such as Google OAuth) or from payment processors when you make a purchase.

3. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our Service
  • Process your transactions and manage your account
  • Send you technical notices, updates, and support messages
  • Respond to your comments, questions, and requests
  • Monitor and analyze usage patterns to enhance user experience
  • Detect, investigate, and prevent fraudulent or unauthorized activity
  • Train and improve our AI models (see Section 7 for details)
  • Comply with legal obligations and enforce our Terms of Service

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and store information. These include:

  • Essential Cookies: Necessary for the Service to function properly (authentication, security)
  • Analytics Cookies: Help us understand how visitors interact with our website (Vercel Analytics)
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Service.

5. Third-Party Services

We share information with the following third-party service providers:

Stripe

Payment processing

We use Stripe to process payments securely. Stripe collects and processes payment information in accordance with their privacy policy. We do not store your full credit card numbers on our servers.

Supabase

Database and authentication

We use Supabase for data storage, user authentication, and file storage. Your data is stored securely in Supabase's infrastructure with encryption at rest and in transit.

Google (OAuth)

Authentication

If you choose to sign in with Google, we receive your name, email address, and profile picture from Google. We do not have access to your Google password.

Vercel

Hosting and analytics

Our website is hosted on Vercel, which may collect anonymous usage analytics to help us improve performance and user experience.

AI Model Providers

Content processing

We use various AI model providers to process your content. Your inputs may be sent to these providers for processing but are not retained by them beyond the processing session unless otherwise specified.

6. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill the purposes described in this Privacy Policy:

  • Account Data: Retained while your account is active and for up to 30 days after deletion request
  • User Content: Stored until you delete it or request account deletion
  • Usage Logs: Retained for up to 12 months for analytics and security purposes
  • Payment Records: Retained as required by law (typically 7 years for tax purposes)

7. AI Training and Your Content

We are committed to transparency about how we use your content in relation to AI:

  • Your uploaded content is not used to train our AI models without your explicit consent
  • Content processed through our Service is used only to generate your requested output
  • You may opt-in to contribute anonymized data to improve our models through your account settings
  • Generated outputs may be analyzed in aggregate to improve service quality

8. Data Security

We implement appropriate technical and organizational measures to protect your data:

  • Encryption in transit (TLS/SSL) and at rest
  • Regular security assessments and penetration testing
  • Access controls and authentication requirements
  • Secure data centers with physical security measures

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.

9. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal data (subject to legal requirements)
  • Portability: Request transfer of your data in a machine-readable format
  • Objection: Object to certain processing of your data
  • Restriction: Request restriction of processing in certain circumstances

To exercise these rights, please contact us at privacy@quby.app. We will respond to your request within 30 days.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses approved by the European Commission where required.

11. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately at privacy@quby.app.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected, used, shared, or sold
  • Right to delete personal information held by businesses
  • Right to opt-out of sale of personal information
  • Right to non-discrimination for exercising CCPA rights

We do not sell your personal information to third parties.

13. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under GDPR:

  • Legal basis for processing: We process your data based on consent, contract performance, legal obligations, or legitimate interests
  • Right to lodge a complaint with your local data protection authority
  • Right to withdraw consent at any time

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice on our website or sending you an email. Your continued use of the Service after such modifications constitutes acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy Inquiries: privacy@quby.app

General Support: support@quby.app

Data Protection Officer: dpo@quby.app

Website: www.quby.app