Privacy Policy

Introduction

Quaest ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered learning platform and chatbot service.

By using Quaest, you consent to the data practices described in this policy. If you do not agree with the practices described in this policy, please do not use our service.

Information We Collect

Account Information

When you create an account, we collect:

• Name and email address (via Google OAuth)
• Profile picture (if provided through Google)
• Account creation and last access dates

Chat and Learning Data

To provide our AI-powered learning experience, we collect and store:

• Chat messages and conversations with our AI assistant
• Learning pathway progress and completion data
• Search queries and interaction patterns
• Files and documents you upload for analysis
• Usage analytics and learning insights
• Streak data and engagement metrics

Technical Information

We automatically collect certain technical information:

• IP address and general location data
• Device type, browser information, and user agent
• Session data and authentication tokens
• Performance and error logs
• Rate limiting and usage patterns
• PWA installation status and offline usage patterns
• Mobile app preferences and display settings

Payment Information

For premium subscriptions:

• Payment processing is handled securely by Stripe
• We store subscription status, plan information, and billing periods
• We do not store credit card numbers or payment details directly

Progressive Web App (PWA) and Mobile Features

Quaest can be installed as a Progressive Web App on your device:

Installation and Offline Storage

• App can be installed on mobile devices and desktops for native-like experience
• Basic app functionality works offline after installation
• User preferences and settings are stored locally on your device
• Chat history synchronizes when internet connection is restored

Mobile-Specific Data

• Display preferences (text size, theme settings) stored locally
• Installation timestamp and usage patterns for PWA optimization
• Device-specific performance metrics for mobile experience improvement
• Offline interaction logs to enhance standalone functionality

How We Use Your Information

We use your information to:

• Provide and improve our AI-powered learning platform
• Personalize your learning experience and generate insights
• Maintain chat history and learning progress
• Process payments and manage subscriptions
• Provide customer support and respond to inquiries
• Analyze usage patterns to improve our service
• Ensure platform security and prevent abuse
• Comply with legal obligations and enforce our terms
• Optimize PWA performance and mobile user experience
• Enable offline functionality and data synchronization

Third-Party Services

We integrate with the following third-party services:

Authentication & Payments

• Google OAuth: For secure authentication and account creation
• Stripe: For payment processing and subscription management

AI & Analytics

• Google AI (Gemini): Powers our AI assistant and content generation
• Vercel Analytics: For website performance monitoring

Infrastructure

• Turso (LibSQL): Secure database hosting for your data
• Vercel: Application hosting and deployment

Future Integrations

We plan to integrate with Notion via OAuth to enhance your learning experience. When available, this integration will allow you to sync learning pathways and notes with your Notion workspace. We will obtain explicit consent before accessing your Notion data.

Data Sharing and Disclosure

We do not sell your personal information. We may share your information in these limited circumstances:

• Service Providers: With trusted third parties who help us operate our platform
• Legal Requirements: When required by law or to protect our rights and users
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• Consent: When you explicitly consent to sharing

Data Security

We implement robust security measures to protect your information:

• End-to-end encryption for data transmission
• Secure database storage with access controls
• Regular security audits and monitoring
• Session management with secure tokens
• Rate limiting to prevent abuse

Your Rights and Choices

You have the following rights regarding your personal information:

• Access: Request a copy of your personal information
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Export your data in a machine-readable format
• Opt-out: Discontinue certain data processing activities

To exercise these rights, please contact us at privacy@quaest.app. We will respond to your request within 30 days.

Data Retention

We retain your information for as long as necessary to provide our services:

• Account Data: Until you delete your account
• Chat History: Stored indefinitely for authenticated users, or until deletion request
• Shared Conversations: Automatically deleted after 24 hours from creation
• Analytics Data: Aggregated data may be retained for service improvement
• Payment Data: Retained as required by law and payment processors
• PWA Local Storage: Stored on your device until app is uninstalled or cache cleared

Automatic Data Cleanup

We automatically remove certain data to protect your privacy:

• Shared conversation links expire and are deleted after 24 hours
• Rate limiting logs are cleaned up after 30 days
• Expired authentication sessions are automatically removed
• Temporary error logs are cleared periodically

Children's Privacy

Quaest is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we discover that we have collected information from a child under 13, we will delete it immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that such transfers comply with applicable data protection laws and include appropriate safeguards to protect your information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at: