Privacy Policy

Effective date: May 2026  ·  Last updated: May 2026

QuikUp ("we", "us", or "our") operates the QuikUp mobile application and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, with whom we share it, and what rights you have over your data.

By using the Service you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect only the information necessary to provide the Service.

Category	Data	Purpose	Visible to others?
Account	Username, email address, display name (optional)	Authentication and identification	Username and display name yes; email never
Profile photo	JPEG image (150×150 px, ≤ 100 KB)	Avatar shown in the app	Yes
Google account	Email, name, profile picture (at sign-in only)	Google Sign-In authentication	Only if used as avatar or display name
Location	Latitude, longitude, Google Place ID	Map pin on any Qup — user-initiated only, never collected passively	Yes, to Qup participants
Device token	Expo push notification token per device	Delivering push notifications	No
Messages	Chat text within Qups	In-Qup communication	To Qup participants only
Poll votes	Poll choices within Qups	Group decision-making	To Qup participants only
Session	Server-side session ID (PostgreSQL)	Maintaining authenticated sessions	No
Verification codes	6-digit codes, 10-minute TTL	Email verification, password reset, account deletion	No
Purchase records	RevenueCat transaction IDs, entitlement status	Subscription and purchase enforcement	No

We do not collect location passively. Location is only stored when you explicitly pin a map location on a PRO Qup. We do not use tracking pixels, advertising SDKs, or analytics networks.

Aggregate Qup analytics: For PRO Qups, we compute aggregate metrics (view count, participant counts, RSVP breakdown, message count, invite conversion rate) derived from data you already share with us. These metrics are visible only to the event admin. No new personal data is collected — analytics are aggregated from existing event data.

2. How We Use Your Information

• To create and manage your account
• To provide the core features of the Service (creating and joining Qups, chat, polls)
• To send transactional emails (verification codes, password resets)
• To send push notifications you have opted into
• To process and verify subscription purchases
• To moderate content and enforce our Terms of Use
• To maintain the security and integrity of the Service

We do not sell your data, use it for advertising, or share it with third parties for their own marketing purposes.

3. Third-Party Services

We use the following third-party processors. Each has its own privacy policy governing its data practices.

Service	Purpose	Data shared
Resend	Transactional email delivery	Your email address and the content of the email (verification code)
RevenueCat	Subscription and in-app purchase management	Your user ID and purchase event data
Expo (Expo Push Notifications)	Delivering push notifications to your device	Your device push token and notification content
Google (OAuth)	Sign in with Google	Google ID token verified server-side; email and name returned by Google
Google (Places API)	Location search and map preview	Search query text; no personal identity shared
Replit	Cloud hosting and infrastructure	All server-side data (as hosting provider)

4. Data Storage and Security

• Passwords are stored as bcrypt hashes and are never stored in plaintext.
• Sessions are stored server-side in a PostgreSQL database; your device only holds a session cookie.
• All data in transit is protected by TLS (HTTPS).
• We apply the principle of least privilege: your email address is never exposed to other users.

5. Data Retention

• Account data: retained until you delete your account.
• Past events (free accounts): non-recurring past events created by a free-tier organizer are automatically deleted 15 days after the event date. Subscribing to PRO Organizer removes the deletion schedule and keeps past events indefinitely. If a subscription expires, a new 15-day deletion window begins from the expiry date.
• Past events (PRO Organizer): kept indefinitely for as long as your account exists.
• Messages: retained for up to 30 days or until the per-event limit (500 messages) is reached, whichever comes first. Deleted when the associated account or event is removed.
• Verification codes: automatically deleted after 10 minutes.
• Push tokens: deleted when you log out or delete your account.
• Sessions: invalidated on logout.
• Poll data: at most 10 closed poll records are kept per event (oldest deleted first).

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: request a copy of the data we hold about you.
• Correction: update your username, display name, or profile photo in the app at any time.
• Deletion: delete your account in-app from Profile → Delete Account. This permanently removes all your data, including events you created, messages, votes, invitations, device tokens, and sessions. Account deletion is verified by a 6-digit email code.
• Opt-out of push notifications: disable via your device's notification settings at any time.
• Data portability: contact us to request an export of your data.

To exercise any right not available in-app, contact us at the address in Section 10.

7. Children's Privacy

The Service is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal data, please contact us.

8. International Transfers

Your data may be processed in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your country of residence. Where required by law, we take appropriate safeguards to protect your data.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy at this URL and, where appropriate, via in-app notice. The "Last updated" date at the top of this page indicates when the policy was last revised. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

10. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

QuikUp
Email: privacy@quikup.app