Privacy Policy

Qiora ("we," "us," or "our") operates the website qiora.app, a service of R&B Distro Inc. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the choices you have.

• Account information — when you sign in with Google, we receive your email address, name, and profile picture from Google. We use Supabase to manage authentication and store account data.
• Birth details — to calculate a chart, you provide a birth date, time, and place, along with gender and calendar type, and optionally a name for the profile. This data is sent to our servers to compute the chart. If you are signed in and save a profile, these details are stored with your account until you delete the profile or your account. If you use the free calculator without an account, the details you enter are processed on our servers and retained as service records (together with approximate access region and device type) that are not linked to any account.
• Payment information — purchases are processed by Stripe. We never receive or store your full card number. We keep records of your transactions and your Qi credit balance and history.
• Email subscription data — if you join our mailing list or opt in to product updates, we store your email address and a record of your consent (what you agreed to, when, and where).
• Usage data — we use Google Analytics to collect basic analytics such as page views, device and browser type, and approximate location (country level), via cookies and similar technologies.

• To calculate your chart and generate your readings.
• To create and manage your account, saved profiles, and purchases.
• To process payments and maintain your Qi balance.
• To send service emails (e.g., payment receipts, important changes to the Service).
• To send product news, new features, and articles — only if you have opted in. You can unsubscribe at any time.
• To respond to your inquiries and support requests.
• To improve the Service, and to keep it secure and prevent abuse or fraud.

We do not sell, rent, or share your personal information with third parties for their own marketing purposes.

Readings are generated using large language model (AI) services. To generate a reading, we share only the chart data needed for that reading with the AI provider, which processes it on our behalf. We do not include your account identity (such as your email address) in this data.

We send marketing emails (product news, new readings, articles) only to people who have opted in — for example, by joining our early-access list or checking the updates box when creating a profile. Every marketing email includes an unsubscribe link, and unsubscribing takes effect immediately. We keep a record of when and how you gave consent, as required by law.

We rely on the following service providers, each bound by their own privacy policies and our data processing agreements where applicable:

• Supabase — authentication and database.
• Google (OAuth, Maps, Analytics) — sign-in, birthplace lookup, and analytics.
• Stripe — payment processing.
• Kit (ConvertKit) — email newsletter delivery.
• Vercel — website hosting.
• AI model providers — generating readings.

• Account data and saved profiles — kept while your account is active; deleted when you delete them or your account.
• Transaction records — kept as long as required by tax and accounting laws.
• Guest calculation records — retained as service records not linked to any account.
• Consent records and email subscriptions — kept while your subscription is active, and as evidence of consent thereafter where required.

All data is transmitted over encrypted connections (HTTPS) and stored with reputable cloud providers using industry-standard security measures and access controls. No method of transmission or storage is 100% secure, but we work to protect your information appropriately.

Our servers and service providers may be located in the United States and other countries. By using the Service, you understand that your information may be processed outside your country of residence, with safeguards consistent with applicable law.

Depending on where you live (including under GDPR and CCPA), you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data ("right to be forgotten").
• Receive a copy of your data (portability).
• Withdraw consent (e.g., unsubscribe from marketing emails) at any time.
• Object to or restrict certain processing.

To exercise these rights, contact us at qiora@qiora.app. We do not discriminate against you for exercising them.

We use cookies and similar technologies for sign-in sessions and analytics. You can control cookies through your browser settings; disabling them may limit sign-in and some features.

Our services are not directed to individuals under 13 (or the higher minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will delete it.

We may update this policy from time to time. Changes will be posted on this page with an updated revision date, and material changes will be highlighted or notified by email where appropriate.

If you have questions about this Privacy Policy or your data, please contact us at qiora@qiora.app.