Privacy Policy

Introduction

Quillo ("we," "our," or "us") operates the Quillo voice notes and AI-powered task mobile application available on iOS (Apple App Store) and Android (Google Play Store). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our mobile application and services.

By downloading, installing, or using our mobile application on iOS or Android devices, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

We collect information necessary to provide our voice capture and AI action extraction service on iOS and Android, including:

• Account Information: Email address, account preferences, and authentication credentials (when using Apple Sign-In on iOS or Google Sign-In on Android)
• Voice and Content Data: Voice recordings (temporarily transmitted to OpenAI's Whisper API for transcription, then to Anthropic's Claude API for AI-powered action extraction, after which recordings are deleted according to your plan), text and pasted content you capture, and the resulting tasks, events, and reminders
• Usage Data: How you use the app, which integrations you connect (e.g., calendar, task apps), and feature usage to improve the service
• Device Information: Device type, operating system version, device identifiers, and app version for functionality and compatibility
• Integration Data: When you connect third-party services (e.g., Google Calendar, Todoist), we receive only what is necessary to create and sync your actions; we do not store your third-party credentials long-term beyond what is required for the integration
• Local Storage Data: Information stored locally on your device using secure storage for app functionality and preferences
• Subscription and Payment Data: For in-app premium subscriptions (Quillo Pro), payment is processed by Apple. We do not receive or store your full payment-card details. We may receive subscription status (e.g., active, expired, trial) and related identifiers from Apple or our subscription provider to provide access to premium features and manage your subscription.

Note: We do not track users across apps and websites owned by other companies. We do not sell your personal information to third parties.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our voice-to-action service on iOS and Android
• Process your voice, text, and pasted content to extract tasks, events, and reminders
• Sync your actions to your connected integrations (calendar, task apps, etc.) at your direction
• Authenticate your account and provide secure access to the app
• Analyze app usage patterns to improve functionality and user experience
• Respond to your inquiries and provide customer support
• Ensure app compatibility with your device and operating system

Data Sharing: We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With your explicit consent
• To comply with legal obligations or respond to lawful requests
• To protect our rights, privacy, safety, or property
• In connection with a business transfer (merger, acquisition, etc.)
• With service providers who process data on our behalf under strict contractual terms, including: OpenAI (audio transcription via Whisper API), Anthropic (AI task extraction via Claude API), cloud hosting providers, and subscription management platforms

Third-Party AI Processing

Quillo uses the following third-party AI services to power its core features. By using Quillo, you acknowledge that your content will be transmitted to these providers as described below:

• OpenAI — Audio Transcription (Whisper API): When you record a voice note, your audio is transmitted to OpenAI's servers in the United States for transcription. OpenAI does not use API inputs or outputs to train its models by default. OpenAI may retain audio-related logs for up to approximately 30 days for abuse monitoring, with audio state stored for up to 1 hour. For more information, see OpenAI's API Data Usage Policies.
• Anthropic — Task Extraction (Claude API): After transcription, the resulting text is transmitted to Anthropic's servers in the United States for AI-powered action extraction. Anthropic does not use API inputs or outputs to train its models. Anthropic retains API data for up to 7 days. For more information, see Anthropic's Privacy Policy.

Neither OpenAI nor Anthropic sells your data to third parties. Both providers maintain industry-standard security practices. Your content is used solely to deliver transcription and task extraction within Quillo.

Important: Do not record or submit content containing legally privileged communications (e.g., attorney-client), HIPAA-covered health information, classified information, or any content you are not authorized to share with third-party cloud AI services.

Permissions and Device Access

Our mobile application may request the following permissions:

• Microphone: Required to record voice notes. You can revoke this permission at any time in your device settings (iOS: Settings → Privacy & Security → Microphone; Android: Settings → Apps → Quillo → Permissions).
• Network Access: Required to process content with our AI services and sync with your integrations.
• Local Storage: Used to store your preferences and data locally for offline access and performance.
• Calendar / Reminders (optional): If you connect integrations, we request access only to create and update events or tasks at your direction.

All permissions are requested with clear explanations, and you can revoke them at any time through your device settings.

Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission using HTTPS/TLS protocols
• Secure local storage using platform-native secure storage mechanisms
• Authentication tokens and session management
• Regular security assessments and updates

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: You can delete your account at any time from within the app (Settings → Delete account) or by contacting us at [email protected]. When you delete your account, we will delete or anonymize your personal information as described in the Data Retention section below.
• Data Portability: Request a copy of your data in a portable format
• Opt-Out: Disconnect integrations or adjust your preferences within the app settings

To exercise these rights, please contact us at [email protected] or visit our Contact page.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Voice recordings are processed and then deleted according to your plan (e.g., after processing for free tier; see in-app details). You can delete your account at any time from within the app (Settings → Delete account) or by contacting us. When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes.

Children's Privacy

Our mobile application is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information.

International Data Transfers

Your information is transferred to and processed in the United States, where Quillo and its key service providers (OpenAI and Anthropic) are based. These countries may have data protection laws that differ from those in your country of residence. By using our mobile application, you consent to the transfer of your information to these countries.

Where required by applicable law (e.g., GDPR for EU/EEA residents), such transfers are conducted under appropriate safeguards including Standard Contractual Clauses (SCCs) or other legally recognized transfer mechanisms. You may request information about these safeguards by contacting us at [email protected].

GDPR — Additional Rights for EU/EEA Users

If you are located in the European Union or European Economic Area, the following additional rights and information apply under the General Data Protection Regulation (GDPR):

• Legal basis for processing: We process your personal data on the basis of (a) contract performance — to provide the services you have requested; (b) consent — for optional features and communications; and (c) legitimate interests — to improve the service, ensure security, and prevent fraud.
• Right to object: You have the right to object to processing based on legitimate interests at any time by contacting us at [email protected].
• International transfers: Your data is processed by OpenAI and Anthropic in the United States. These transfers rely on Standard Contractual Clauses (SCCs) or other appropriate safeguards. Contact us to request information about the specific mechanisms in place.
• Supervisory authority: You have the right to lodge a complaint with your local data protection authority (e.g., your national DPA or the lead supervisory authority in your EU member state).
• Data controller: Quillo acts as the data controller for your personal data. OpenAI and Anthropic act as data processors on our behalf when processing your content.

CCPA — Additional Rights for California Residents

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) grant you the following additional rights:

• Right to Know: You may request details about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for which it is used, and the categories of third parties with whom it is shared.
• Right to Delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to Correct: You may request correction of inaccurate personal information we hold about you.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
• No Sale or Sharing: We do not sell your personal information and do not share it for cross-context behavioral advertising.
• Categories of third parties: We share personal data with AI processing providers (OpenAI, Anthropic), cloud infrastructure providers, and subscription management services, all acting as service providers under written contracts that prohibit them from using your data for their own commercial purposes.

To exercise your CCPA/CPRA rights, contact us at [email protected]. We will respond within 45 days as required by law.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected] or visit our Contact page.