Privacy Policy

1. Information we collect

Your account

• Your email address and password. Passwords are handled by our sign-in provider and stored only in hashed form; we never see them.
• If you sign in with Apple or Google, we receive your email address and, if you choose to share it, your name. Apple lets you hide your email, in which case we receive a relay address instead.
• Your username, your display name, and your time zone, which Quantifies uses to put your posts and stats on the right days.

What you post and do

• Your posts: the text you write, when it happened and for how long, the privacy level you choose, and anything you attach, such as photos, videos, and a place.
• The tags and stats made from your posts: the activities, things, people, and places you mention, and numbers such as mood, energy, distance, money, or estimated calories.
• Timers you run, goals you set, and the stats and insights made for you.
• How you interact with other people: friend requests and friendships, likes, comments, and the posts, comments, and people you report, block, or mute.
• Anything you send us, such as support emails and feature requests.

Features you choose to use

• Location. If you add your current location to a post, the app asks to use your location while the app is open, takes a single reading, and uses your phone’s built-in service (from Apple or Google) to turn it into a place name. We store the place name and the coordinates with that post. We never track your location in the background, and you can always type a place instead.
• Dictation. When you dictate a post, speech recognition runs on your phone and nowhere else. No audio is recorded, stored, or sent to us or anyone else; only the resulting text becomes part of your post.
• Photos and videos. The app uploads only the photos and videos you pick. If you save an exported post to your photo library, the app asks for permission to add to your library; it never reads your library.
• Post by text. If you link a phone number, we store that number and the text messages you send to the Quantifies number, which we receive through our SMS provider.
• Oura ring. If you connect an Oura account, we store the access token Oura issues and your Oura user ID. We read your daily sleep, readiness, and activity summaries: sleep duration and score, readiness score, steps, active calories, heart-rate variability, and resting heart rate. Each day of ring data is saved as a private post that only you can see.
• Notifications. Timer and countdown alerts are scheduled on your phone. Likes, comments, and friend requests are listed inside the app. If you allow notifications, we store a push token for your device and send likes, comments, and friend requests through Expo’s push service and Apple or Google. These notifications contain the other person’s username and the type of activity, not the content of posts or comments. The token is deleted when you sign out or delete your account.

Collected automatically

When the app or website talks to our servers, our hosting providers record standard technical information such as your IP address, device and app version, and the time of each request. We use it to run and secure Quantifies. We don’t use advertising identifiers, analytics or crash-reporting tools, or tracking across other companies’ apps and websites.

On our website

If you join the waitlist at quantifies.app, we collect your email address, the platform you use, and your phone number if you choose to give it. We use them only to tell you about Quantifies’ launch.

2. How we use it

• To run Quantifies: showing your posts, feeds, profile, streaks, and stats, and keeping them in sync across your devices.
• To turn your posts into tags, stats, and insights with AI (see section 4).
• To keep Quantifies safe: reviewing reports, removing content that breaks our Terms, preventing spam and abuse, and securing accounts.
• To answer your questions and provide support.
• To apply usage limits on AI features and to manage paid plans.
• To meet legal obligations.

We don’t sell your personal information, share it for targeted advertising, or use it to show you ads.

If you’re in the European Economic Area or the United Kingdom, we rely on these legal bases: providing the service you signed up for (contract); your consent for location, microphone, photo-library access, notifications, Oura, and post by text, which you can withdraw at any time; our legitimate interests in keeping Quantifies safe, secure, and working well; and compliance with the law.

3. Who can see what

Your profile, meaning your username and display name, is visible to everyone. For each post, you choose who can see it:

• Comments and likes on a post are visible to anyone who can see the post.
• A post’s place name is visible to anyone who can see the post. Its exact coordinates are shown only to you.
• Photos and videos appear with the post they’re attached to. They’re stored at unlisted web addresses, and anyone who has a file’s address can open it, even if the post is private or deleted. Only attach media you’re comfortable with on those terms.
• If our AI flags a post as sensitive, the post is kept private automatically.
• Private and friends-only posts are never shown to other people, but the activities in them are counted, without your name or your post, in community totals, such as how many people logged a run this week. An activity’s stat page shows totals only once at least five people have logged it. Posts flagged as sensitive, and data from your Oura ring, are never counted.
• When you block someone, you stop seeing each other’s posts and profiles.

4. AI processing

Quantifies uses Claude, an AI model made by Anthropic, to turn your posts into tags, categories, and numbers; to flag sensitive posts; to understand the goals you set; and to write insights about your stats.

To do this we send Anthropic the text of your posts (including private ones and posts you send by text message) and the goals you write. Insights are written from summaries of stats, such as counts, durations, and the names of the things you track, never from the text of your posts.

Anthropic processes this information on our behalf, and its commercial terms don’t allow it to train its models on it. AI makes mistakes, so treat tags, estimates, and insights as approximate. You can review and change tags before you publish.

5. Health and wellness information

Some of what you can log or connect can say something about your health: mood, energy, sleep, heart rate, activity, or estimated calories. We collect it only when you log it or connect your Oura ring. We use it only to show you your posts and stats, and we treat it like everything else you post: we never sell it, never use it for advertising, and never share it except as this policy describes. You can delete it at any time.

6. Service providers

These companies help us run Quantifies. They process information on our behalf, only as needed to provide their service to us:

• Supabase: database, sign-in, file storage, and servers, located in the United States
• Anthropic: AI tagging and insights
• Twilio: text messages, if you use post by text
• Expo: delivering app updates and, if you allow notifications, push notifications, which reach your phone through Apple or Google
• Vercel and Resend: our website and waitlist

If you sign in with Apple or Google, connect Oura, or follow a link to another service, such as our feature-request board, that company’s own privacy policy applies to what you share with it.

7. Other disclosures

Apart from the people you choose to share posts with and the providers above, we disclose information only:

• when the law requires it, such as in response to a valid court order;
• to protect the safety, rights, or property of our users, the public, or us, including reporting child sexual abuse material to the National Center for Missing & Exploited Children;
• if Quantifies is transferred to a new owner, in which case this policy continues to apply to your information; or
• with your permission.

8. Keeping and deleting information

• We keep your information for as long as you have an account.
• When you delete a post, it disappears from Quantifies for everyone straight away. Its stored copy is erased when you delete your account.
• You can delete your account in Settings, under Account, then Delete account. That immediately and permanently erases your profile, posts, comments, likes, friendships, stats, goals, linked phone number and text messages, and your Oura connection. The photos and videos you uploaded are erased within 30 days.
• Some copies take longer to go. Our database backups are replaced on a rolling basis within 30 days. Anthropic may keep request data for a limited time under its own retention policy. Tag names made from your posts may remain in Quantifies’ shared tag vocabulary, which isn’t linked to you. We may keep reports about other people, and records we’re required to keep for legal or safety reasons, for as long as they’re needed.
• Disconnecting Oura deletes the access token. Ring data already saved stays as your private posts until you delete them or your account.
• Waitlist details are kept until launch or until you ask us to remove them, whichever comes first.

9. Your choices and rights

• Change who can see any post, or delete it, at any time.
• Change your username, email address, and password in Settings.
• Turn off location, microphone, photo-library access, and notifications at any time in your phone’s settings.
• Disconnect Oura or unlink your phone number in Settings.
• Delete your account in Settings.
• Email hello@quantifies.app to ask for a copy of your information, to correct it, or to delete it. We’ll respond within 30 days and may need to confirm the request comes from you.

Depending on where you live, including the European Economic Area, the United Kingdom, California, and other US states, the law may give you rights to access, correct, delete, or receive a portable copy of your information; to object to or restrict how we use it; and to withdraw consent. We honor these requests from everyone, wherever you live, and we won’t treat you differently for making one. You can also complain to your local data protection authority.

10. Where information is processed

Quantifies is run from the United States, and our servers are there too. If you use Quantifies from another country, your information is transferred to and processed in the United States, whose data protection laws may differ from yours.

11. Children

Quantifies isn’t for children under 13, and we don’t knowingly collect information from them. If you believe a child under 13 has given us information, email hello@quantifies.app and we’ll delete it.

12. Security

We protect your information with encryption in transit, access controls on our database and file storage, and by keeping service credentials on our servers rather than in the app. No system is perfectly secure, so we can’t guarantee that information will never be accessed without permission. If a breach affects your information, we’ll notify you as the law requires.

13. Changes to this policy

If we change this policy, we’ll post the new version here and update the effective date. If a change is significant, we’ll tell you in the app or by email before it takes effect.

14. Contact

Quantifies is operated by Lucy Chen. For questions or requests about your privacy, email hello@quantifies.app.