Effective date: June 26, 2026. Last updated: June 26, 2026.
This Privacy Policy ("Policy") describes how QALM ("QALM", "we", "us", or "our") collects, uses, discloses, and safeguards information about you when you access or use the QALM mobile application and any related services (collectively, the "Service"). This Policy is incorporated into and subject to our Terms of Service. By accessing or using the Service, you acknowledge that you have read and understood this Policy.
Material disclosure regarding how responses are produced. QALM presents a conversational assistant experience. Messages you submit may be accessed, reviewed, and answered by QALM personnel (our team), in addition to automated systems, for the purpose of generating responses and operating the Service. Because human personnel may read your messages, you should not submit sensitive personal information, including but not limited to government identifiers, financial account or payment card numbers, precise geolocation, health or medical information, biometric data, or any information you wish to keep confidential.
This Policy is designed to comply with applicable United States federal and state privacy laws and, where applicable, international laws, including without limitation:
Consistent with the CCPA's statutory categories (Cal. Civ. Code § 1798.140), we may collect:
We do not knowingly collect "sensitive personal information" as defined in Cal. Civ. Code § 1798.140(ae), and we ask that you not submit it.
We collect information directly from you, from your device, and from Apple (for authentication). We use it to: (a) provide and operate the Service, including generating and delivering replies; (b) authenticate you and maintain your account and history; (c) maintain, secure, debug, and improve the Service; (d) communicate service-related notices; and (e) comply with legal obligations and enforce our Terms. For GDPR purposes, our legal bases are performance of a contract (Art. 6(1)(b)), legitimate interests (Art. 6(1)(f)) in operating and securing the Service, consent (Art. 6(1)(a)) where required, and legal obligation (Art. 6(1)(c)).
We do not sell your personal information, and we do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA (Cal. Civ. Code § 1798.140(ad), (ah)). In the preceding 12 months we have not sold or shared personal information. We disclose information only:
If you are a California resident, you have the right to: (a) know/access the categories and specific pieces of personal information we collect (§ 1798.110, § 1798.115); (b) delete personal information (§ 1798.105); (c) correct inaccurate information (§ 1798.106); (d) opt out of the sale or sharing of personal information (§ 1798.120) — note we do neither; (e) limit use of sensitive personal information (§ 1798.121); and (f) be free from discrimination for exercising your rights (§ 1798.125). You may submit a request using the contact details below; we will verify your identity and respond within the timeframes required by law (generally 45 days). You may use an authorized agent.
Residents of Virginia, Colorado, Connecticut, Utah, and other states with comprehensive privacy laws may have rights to access, correct, delete, and obtain a portable copy of personal data, and to appeal a denial of a request. Contact us to exercise these rights.
Where the GDPR applies, you have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21), and the right to lodge a complaint with a supervisory authority. Where processing is based on consent, you may withdraw it at any time.
Some browsers transmit "Do Not Track" signals. There is no industry-standard response; the Service does not track users across third-party websites and therefore does not respond differently to such signals. We do not allow third parties to collect personally identifiable information about your online activities across different sites through the Service.
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13 in violation of COPPA, 15 U.S.C. §§ 6501–6506. If you are between 13 and 18, you may use the Service only with the consent and involvement of a parent or guardian. If we learn that we have collected personal information from a child under 13, we will delete it promptly. Parents may contact us at privacy@qalm.app.
We retain personal information for as long as your account is active or as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may delete individual conversations at any time in the app, and you may delete your account, after which we delete or de-identify your personal information within a commercially reasonable period unless retention is required by law.
We implement administrative, technical, and organizational safeguards designed to protect personal information, including encryption in transit (TLS), hashing of passwords, and access controls. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
We operate using infrastructure that may process and store data in the United States and other countries. Where required, transfers from the EEA/UK rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
Authentication via Sign in with Apple is governed by Apple's policies. We receive only the limited information you authorize Apple to share. We use Apple-provided identifiers solely to authenticate you and operate your account.
We may update this Policy from time to time. Material changes will be indicated by updating the "Last updated" date and, where appropriate, by additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated Policy.
For privacy questions or to exercise your rights, contact our privacy team at privacy@qalm.app.