Privacy at Quindim

Who looks after the data

Quindim is built and run by Rodrigo Barbosa, an individual, who is responsible for the data described here.

What the app keeps

Your account: username, the name you choose to show, your password (stored only as a hash, never readable), your language, a profile picture if you add one, and up to two email addresses if you add them (the account's and a backup) to recover your password and to be told when your password changes or a new device signs in. To recognise a new device we keep, for each browser you signed in on, a random identifier (only its hash), the name the browser reports and two dates — no network address, no location.

What you create: messages, photos, voice notes, dates, notes, letters, game answers, your picks on the menu and your own log of how you are.

What it needs to work: your device's notification address (if you turn notifications on) and the reports you send through Feedback, with a screenshot only if you attach one.

Numbers about accounts, never about the couple: when an account was created, when a partner joined, when a space was opened or closed. The app does not measure how often you go out, what you pick or how you react.

Waitlist (quindim.app)

If you joined the waitlist, we keep only your email address, the language you read the page in, and the dates you signed up and confirmed. Nothing else: no name, no account, no record of where you came from.

It is used for one thing: emailing you when Quindim opens. The address is only added once you click the confirmation link; without that, it deletes itself within 8 days.

Every waitlist email has a link to leave, which deletes your address at once. You can also ask for deletion through the contact at the end of this page.

Sign-up form (quindim.app)

If you fill in the sign-up form, we keep your first name, last name, email address, date of birth, the language of the page and the dates of the request and its confirmation. The date of birth is used to confirm you are 18 or older and stays for the account; it is never put in any email.

The request only counts once you click the link we send to your email; without that, it deletes itself, with everything typed in it, within 8 days. A confirmed request is kept until your account is created, or until you ask for it to be deleted through the contact at the end of this page.

If the email typed already belongs to an account, nothing is kept: the screen answers the same way, and we send that address a notice that it already has an account, with the way to recover the password. So nobody can use the form to find out who has a Quindim account.

Messages to hello@quindim.app

If you write to hello@quindim.app, we keep your address, the name shown on the email, the subject and the text, encrypted, so we can answer. Attachments are not kept.

A copy also reaches the inbox of the person who runs Quindim. The message is deleted a year after it is closed, or sooner if you ask from the same address.

Who sees what

Your partner sees what you send or share. Your picks on the menu (yes, maybe, no), your private notes and your own log are never shown to the other person; the app only shows where you both agree.

Nobody outside your space sees anything, with one exception that exists only if you want it: the board of the Rio Quindim game, in Aventura. If the couple chooses a nickname for the board, other couples see that nickname and the couple's score in the game, and nothing else. With no nickname you are not listed; clearing the nickname takes you off it. And if you tap “Suggest for the deck” on a card you wrote, its text goes to the Quindim team, with no name and no space on it; nothing is published by itself. The app's administrator manages accounts but has no way to read anybody's content or act as anybody.

How it is protected

Messages, photos, voice notes, notes and date texts are stored encrypted (AES-256). This is not end-to-end encryption: the server can decrypt them to show them to you.

Every connection to the app uses HTTPS. The servers are on Google Cloud in the United States, and backups are kept for 30 days.

Who the data is shared with

Google Cloud, which hosts the server and the backups.

Resend, which delivers the app's emails (email confirmation, password recovery, account security notices, the waitlist, sign-up and answers to people who write to hello@): it receives that email's address and text, nothing else.

Cloudflare, which receives the emails sent to hello@quindim.app and passes them on to Quindim without keeping them.

Google Gemini, only when you use the AI helper to write a card: the short description you typed is sent, and nothing is kept afterwards.

Your device's notification service (Google or Apple) receives a discreet notice such as "New message", with no name, text or picture.

Nothing is sold or handed over for advertising.

How long

For as long as the account exists. When you delete your account, what is yours is deleted at once; backups stop holding it within 30 days.

Some things that belong to both of you stay with your partner: the date of an evening you shared (without your note or photo), the cards in your menu and the lists you share.

Your rights

You can download a copy of everything the app keeps about you (Settings → Download your data) and delete your account at any time (see the Delete account page).

In Brazil, the LGPD also gives you access, correction, portability, information on who your data is shared with, and the right to withdraw consent.

In Canada, PIPEDA (and, in Quebec, Law 25) gives you access to and correction of your data and the right to withdraw consent.

In the United States, state privacy laws (such as California's) give you the right to know what is collected, to ask for deletion, and not to have your data sold — and Quindim sells nobody's data.

In Europe, the GDPR gives similar rights. For any request, use the contact at the end of this page; you will hear back within 30 days.

Age

Quindim is for people 18 and over.

Changes

If this policy changes, the date at the top changes with it, and important changes are announced inside the app.

Contact

Use the Feedback tab on the right edge of any screen in the app.