Quayla · Planet Q Productions

This privacy policy explains what data Quayla collects, why, and how you can control it. Quayla is a conversational AI guide operated by Planet Q Productions. We tried to write this in plain English — no dark patterns.

What we collect

• Account info — the email address and password you provide when you sign up. Passwords are hashed with bcrypt; we never see or store the plain password.
• Chat messages — the text and voice messages you exchange with Quayla are stored with your account so Quayla can remember the conversation. You can delete your account (and all its messages) any time by contacting us.
• Microphone audio — when you press the microphone button, we transcribe what you said using OpenAI Whisper and discard the raw audio. The transcript is stored as a normal chat message.
• Billing info — if you buy credits, payment is handled by Stripe. We never touch card numbers; we only receive a transaction ID and the amount you paid.
• Basic analytics — aggregate usage (page views, button clicks, approximate location from IP) via PostHog, so we can improve the experience.
• Device info — on Android, the operating system version and app version for crash reporting. No ad IDs are collected.

What we do NOT collect

• Your contacts, calendar, SMS, photos, or files.
• Your precise location (no GPS access).
• Advertising identifiers. We do not show ads and we do not sell your data.
• Audio recordings — voice is transcribed and the audio is discarded.

Third-party services we use

Quayla sends your chat messages to these vendors to generate replies and voice. Each has their own privacy policy:

• OpenAI — generates Quayla's text responses, transcribes your voice, and synthesises her British-accent voice. See OpenAI privacy.
• Stripe — processes payments for credit packs. See Stripe privacy.
• PostHog — anonymous usage analytics. See PostHog privacy.
• Google Play Services (Android app only) — delivers the app and handles updates. See Google privacy.

How we store & protect your data

Account data is stored in MongoDB on secure cloud infrastructure. All traffic uses HTTPS/TLS. Access to production systems is limited to Planet Q Productions staff under the principal of least privilege.

Your rights

• Access — request a copy of everything we have about you.
• Deletion — request that we permanently delete your account and all messages.
• Correction — ask us to fix any wrong info.
• Opt out of analytics — email us and we'll exclude your account from PostHog.

If you are in the EU, UK, California, or another jurisdiction that grants additional privacy rights (GDPR, UK-GDPR, CCPA), those apply automatically.

Children

Quayla is not directed at children under 13 (under 16 in the EU). If you believe a child has created an account, email us and we'll delete it.

Changes to this policy

If we change this policy we'll update the "Effective" date at the top. Material changes will be announced inside the app.

Contact

Email us: planetqproductions@yahoo.com

Mailing: Planet Q Productions · Email is the fastest way to reach us.