Privacy policy

What we keep, what we don't, and why.

You are sharing rehearsals of conversations that matter to you. We treat that with the respect it deserves.

Updated

Quippy App, Inc. ("Quippy", "we", "us") operates the Quippy mobile app, the website at quippyapp.com, and related features (together, the "Service"). This policy explains what data we collect when you use the Service, what we do with it, and the choices you have. It is part of our terms of service.

We collect only what we need to run the Service:

Information you give us. Your email address when you join the waitlist or create an account, account details like display name, age, gender, profile photo, and authentication tokens, the scenarios you run, the lines you write or speak during practice, the feedback Quippy returns to you, and any messages you send us when you contact support.

Voice input (when you use it). If you practice with your voice, we send the audio to a speech-to-text provider so we can turn it into a transcript. The transcript becomes part of the session record; the raw audio is not stored long-term unless we tell you otherwise.

Device and usage data. Device type, operating system version, app version, language, time zone, IP address, crash reports, and events describing how you move through the app. The full detail we collect for analytics, including session replay, is described in the next section. This helps us keep the app working and improve flows that are confusing.

Website analytics and waitlist data. When you use this website, we collect the full page URLs you visit including their query strings, the referring URL that sent you here, your browser user agent, coarse browser, device, viewport, and language details, campaign parameters, and interaction events such as opening or submitting the waitlist form. If you join the waitlist, we collect the email address you submit and use it to create an identified profile with our analytics provider, so we can connect your waitlist interest to your later activity. Our analytics provider also derives your approximate location from your IP address. The next section describes this in full.

Purchase data. If you subscribe, the Apple App Store handles payment and shares a receipt with us, and a subscription management provider (RevenueCat) validates that receipt so we can grant and manage your access. We do not receive your full payment card details.

Communications. If you email us or reply to a Quippy email, we keep that correspondence so we can follow up and improve support.

We use PostHog, Inc. (PostHog US Cloud, hosted in the United States) as our analytics provider for both the app and this website, including session replay. We have chosen to collect a detailed record of how the Service is used so we can understand it and improve it. This section explains what that record contains.

In the app. We send PostHog a detailed record of how you use the app. This includes which screens and features you use, the profile details you enter such as your age, gender, goals, and progress numbers, and internal identifiers for the content you interact with. Your email, name, and account id are attached to your analytics profile. The record also includes the text of the practice messages you send during a session, the search terms you type, and the answers you give during onboarding. Our analytics provider derives your approximate location, such as your country, region, and city, from your IP address.

Session replay. In both the app and on this website, our analytics provider records how you move through the screens, including what you type and the images shown on screen, so we can see where the experience is confusing. In the app, some views that hold sensitive account information are masked in these recordings.

On this website. We collect the full page URLs you visit including their query strings, the referring URL that sent you here, your browser user agent, and the campaign parameters that brought you to a page. If you join the waitlist, the email address you submit is used to create an identified profile with our analytics provider.

This is more analytics data than many products collect. We treat it as personal data, we do not sell it, and we do not use it for advertising to you. You can ask us to delete it using the options in the Your rights section.

We use what we collect to:

Quippy's scene partners and feedback are produced with help from third-party language model providers. To generate a response, we send the relevant parts of your session (such as the scenario setup and the recent turns of dialogue) to these providers over an encrypted connection.

We choose providers that contractually agree not to train their general-purpose models on the content we send them. Providers may retain inputs and outputs for a short period for abuse monitoring and trust-and-safety review, then delete them. We do not use your session content to train any model that is shared across users, and we do not share your session content with model providers for any purpose other than generating your own scene partner responses.

The conversation content we send to and receive from these providers, which can include your practice messages, the generated replies, and the free text you enter during onboarding, is also logged to our analytics provider (PostHog) so we can review the quality of what the Service produces. See Analytics and session replay for more.

We do not sell your personal information. We do not share your transcripts with advertisers, researchers, or other companies for their own purposes. We do not use your conversations to train models that benefit other users or other companies. Quippy is not a social network: you do not follow other users, and other users cannot see your activity or your content.

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on these legal bases under the GDPR:

We share data only with service providers that help us run the Service, and only to the extent they need it. The categories of providers we use include:

Each provider is bound by a contract that requires them to handle your data only to deliver their service to us, and to follow appropriate security practices.

We may also share data when required by law, to enforce our terms, to protect the safety of users or the public, or as part of a corporate transaction such as a merger or acquisition. If the company that operates Quippy changes hands, we will let users know and your data will continue to be protected under a privacy policy at least as protective as this one.

We keep your data only as long as we need it for the purposes described above:

Your data is stored with our cloud infrastructure provider and is encrypted in transit (using TLS) and at rest. We follow standard security practices for a small product team: principle-of-least-privilege access, audit logging, secret management, regular dependency updates, and prompt response to reported issues. No system is perfectly secure, so we cannot guarantee absolute security, but we treat your data with the care it deserves and will notify you of a breach affecting your data as required by law.

Quippy is operated from the United States. If you use the Service from another country, your data will be transferred to and processed in the United States and in any other country where our service providers operate. Where required, we use appropriate safeguards such as Standard Contractual Clauses for international transfers.

Depending on where you live, you may have the right to access the personal data we hold about you, to correct it if it is wrong, to delete it, to receive a portable copy, to object to or restrict certain processing, and to withdraw consent you have given us. You also have the right to lodge a complaint with your local data protection authority.

You can delete your account inside the app. See how to delete your account for the steps and exactly what gets removed. You can also email hello@quippyapp.com to make any of these requests. We will respond within thirty days, or sooner where the law requires. We may need to verify your identity before acting on a request.

If you live in California, you have the rights described above under the California Consumer Privacy Act, including the right to know what categories of personal information we collect and disclose, the right to delete personal information, the right to correct inaccurate information, and the right to not be discriminated against for exercising these rights.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising as those terms are defined by the CCPA. You can submit requests by emailing hello@quippyapp.com.

Quippy is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has given us their information, please email hello@quippyapp.com and we will delete it.

We send a small number of optional product update emails. Every marketing email has an unsubscribe link, and opting out does not affect transactional messages like receipts and security alerts.

The Quippy app can send push notifications (for example, daily practice nudges). You control these in the app settings or in your device's notification settings.

Our website uses cookies and local storage for two purposes: a small set that is needed to make the site work and remember your preferences, and analytics storage used by PostHog to measure site usage and record how you move through the pages, as described in Analytics and session replay. We do not use third-party advertising cookies. The Quippy app does not use web cookies but uses device identifiers and local storage to keep you signed in, to sync your data, and for the analytics described above.

We may update this policy as the product or the law changes. If an update materially affects how we handle your data, we will let you know inside the app or by email before it takes effect. The "last updated" date at the top of this page always reflects the most recent revision.

Questions about anything on this page, or want to exercise a privacy right? Send a note to hello@quippyapp.com and we will reply within a few days.