Privacy policy

Effective [EFFECTIVE DATE: set at launch]

This policy explains what personal information DRAFT Business Name ("we", "us") collects through Quipster, why we collect it, who we share it with, how long we keep it, and the choices and rights you have.

It covers two places:

• Our public website at https://quipster.ai. This site has no accounts, no forms and no cookies.
• The Quipster app at https://app.quipster.ai. This is where you create an account, verify your age, subscribe and view content.

Quipster is for adults only. All characters on Quipster are fictional, and their images are AI-generated.

The short version

• We collect only what we need to run Quipster, bill you, verify your age and keep the service secure.
• We do not sell your personal information. We do not share it for advertising. We do not use advertising pixels or tracking cookies.
• We do not receive or keep images of your ID. Our age verification provider tells us only whether you passed.
• Your card details are held by our payment processor, not by us.
• Using an adult-content service can reveal something private about you, so we treat all information linked to your account as sensitive.
• You can ask to see, correct, download or delete your information by emailing DRAFT-support@quipster.ai.

Summary table

Who we are

Quipster is operated by DRAFT Business Name, DRAFT Street address, DRAFT City, Region, Postal code, DRAFT Country.

Our person in charge of privacy is [PRIVACY OFFICER NAME], [PRIVACY OFFICER TITLE]. You can reach them at DRAFT-support@quipster.ai or by mail at the address above.

Our public website

Our public website shows information about Quipster and its characters. It has no adult content, no accounts, no forms and no cookies.

Hosting and security. The website is hosted on Cloudflare. Like any web host, Cloudflare processes your IP address and basic request details, such as the page requested, your browser type and the time. It needs these to deliver pages to you and to protect the site from attacks and abuse. Cloudflare handles this under its own privacy policy and its terms with us.

Analytics. We use Cloudflare Web Analytics to count visits. It does not use cookies or local storage. It does not fingerprint your browser or device. We see only totals, such as the number of visits to a page and the referring sites. We cannot use it to identify you.

Links to the app and to Instagram. The website links to the Quipster app, where this policy also applies. It also links to our characters' Instagram accounts. Instagram is run by Meta under Meta's own privacy policy. If you follow, message or interact with those accounts, Meta handles that information, and we can see what Instagram shows any account holder, such as your username and any message you send.

Information we collect in the app

Information you give us

• Account details. Your email address and [SIGN-IN METHOD: for example a password, which we store only in hashed form, or a one-time sign-in link]. Your account settings and communication preferences.
• Emails to us. When you email support or send a report, we receive your email address and whatever you include.
• Consents. Your acceptance of our terms, your consent to how we use your information, your consent to automatic renewal, and any optional consent you give, such as to marketing email. For each one we record the date, time, the version of the text shown, the character and price shown where relevant, and your IP address.

Information created when you use Quipster

• Subscriptions and billing. Which characters you subscribe to, the plan, the price and currency, when you were charged, refunds, cancellations, and receipts we sent.
• Activity. Which feeds and stories you open and when. We use this to show you content and to check refund requests. For example, our refund policy considers whether content was viewed after a renewal charge.
• Device and log data. IP address, approximate region (country and province or state) worked out from your IP address, device type, browser type, and error and security logs.

Information from others

• Age verification provider. The result of your age check (pass or fail), the method used, the date, and a reference number. See "Age verification" below.
• Payment processor. Card type, last 4 digits, expiry date, billing country or postal code, whether a payment succeeded, and dispute or chargeback notices.
• People who report content. If someone reports a problem, such as a character that resembles a real person, their report may include information about them or about other people.

What we do not collect

• We do not collect your full card number. [PAYMENT PROCESSOR] does.
• We do not receive or keep images of your ID or photos of your face from age verification.
• We do not collect precise location such as GPS.
• You cannot upload content to Quipster, so we do not hold photos or files from you.

Age verification

Some content in the app is adult content. Before we show it, the law in many places requires us to verify that you are an adult. We verify the age of every user before showing adult content, wherever they live. The check confirms that you meet the age that applies where you live: 18, or the age of majority if that is higher.

Age checks are carried out by [AGE VERIFICATION PROVIDER]. Depending on the method, the provider may ask you to [AGE VERIFICATION METHOD: for example, show a government ID, use a digital ID, or confirm age through a payment or other transaction record]. The provider sends us only:

• whether you passed,
• the method used,
• the date and time, and
• a reference number.

Our contract requires the provider to delete your ID and any images as soon as the check is complete, and not to use them for anything else. The provider's own privacy policy is linked at the start of the check. We do not keep any identifying information from the check beyond the items above.

If your age check fails, you can ask for a person to review it by emailing DRAFT-support@quipster.ai. The review is carried out through [AGE VERIFICATION PROVIDER]. We will never ask you to email us ID documents. We will tell you what information was used and the main reasons for the result.

Payments

[PAYMENT PROCESSOR] processes all payments. When you subscribe, you enter your card details on a form run by [PAYMENT PROCESSOR], and it holds them under its own privacy policy. We receive only the limited details listed above.

Charges appear on your card statement as [STATEMENT DESCRIPTOR]. We keep the descriptor and our email subject lines discreet. The descriptor still has to be clear enough for you to recognise the charge.

To process payments for an adult-content service, [PAYMENT PROCESSOR], its acquiring bank and the card networks (such as Visa and Mastercard) may receive transaction information and may require us to keep records. They use this information under their own policies to process payments, prevent fraud and enforce their rules.

How we use your information

We use personal information only to:

• create and run your account and show you the content you have access to,
• verify your age before showing adult content,
• process subscriptions, charge renewals, issue refunds and handle disputes,
• send service emails. These include the confirmation when you subscribe, a receipt for every charge, a yearly reminder, notice before any price or terms change, cancellation confirmations, and security notices,
• answer support requests and handle reports about content,
• keep records that show you agreed to our terms and to automatic renewal,
• keep Quipster secure, and prevent fraud, abuse and repeated sign-ups by people who are not eligible,
• apply the rules that depend on where you live, such as showing French first in Quebec or calculating sales tax,
• meet our legal, tax and accounting obligations, and protect our legal rights, and
• send marketing email, but only if you separately opt in.

We do not use your personal information to build advertising profiles. We do not profile you to recommend content. If we ever add a feature like that, it will be off unless you turn it on.

AI. Our characters and content are created with AI tools. We do not send your personal information to AI providers. We do not use it to generate content or to train AI models.

Your consent

When you create an account, we ask you to confirm that you have read this policy. We also ask, in a separate box, for your consent to use your account, age-check and subscription information to run Quipster. We ask separately because this information could reveal that you use an adult-content service. The service cannot work without this information. If you withdraw that consent, we will close your account as described under "Deleting your account".

Optional uses, such as marketing email, have their own unticked box. You can withdraw an optional consent at any time without affecting your account.

Cookies and similar technologies

Public website: none.

App: we use only the cookies and browser storage needed to keep you signed in, remember your settings (such as language) and keep the service secure. We do not use advertising cookies, third-party tracking pixels or cross-site tracking.

Because we do not track you across sites, the app treats "Do Not Track" and Global Privacy Control the same as everyone else: no tracking. If you send a Global Privacy Control signal, we also treat it as a request to opt out of any sale or sharing of your information. We do not sell or share it in any case.

Who we share information with

We do not sell your personal information. We do not share it for cross-context behavioural advertising or targeted advertising.

We share personal information only with:

• Service providers that work for us under contract and may use it only to provide their service to us:
  • Cloudflare: hosting, content delivery, security and website analytics
  • [APP HOSTING PROVIDER]: app hosting and storage
  • [PAYMENT PROCESSOR]: payments, refunds and disputes
  • [AGE VERIFICATION PROVIDER]: age checks
  • [EMAIL PROVIDER]: sending and receiving email
• Card networks and banks, through [PAYMENT PROCESSOR], as needed to process payments and resolve disputes.
• Professional advisers, such as lawyers and accountants, under a duty of confidentiality.
• Authorities, when the law requires it, such as a valid court order. We review each request, disclose only what is required and, where the law allows, tell you about it.
• A buyer or successor, if all or part of our business is sold or merged. They must protect your information as this policy describes, and we will tell you before your information becomes subject to a different policy.

We may also share information when needed to protect someone's safety or to investigate fraud or a breach of our terms.

Where your information is processed

We and our service providers store and process information in Canada and the United States. Cloudflare operates a global network, so website traffic may pass through data centres in other countries. Information processed outside your province or country is subject to the laws there, and courts, law enforcement and national security authorities there may be able to access it.

Before we send personal information outside Quebec, we assess the risks and put written agreements in place with the people receiving it.

How long we keep information

We keep personal information only as long as we need it for the purposes in this policy, or as long as the law requires. The summary table at the top lists each type. When we no longer need information, we delete it or anonymise it so it can no longer identify you.

Deleting your account

You can close your account in the app at Account > Settings > Delete account, or by emailing DRAFT-support@quipster.ai. Cancelling a subscription does not close your account. Closing your account cancels all your subscriptions and ends your access straight away, including any time left in a month you paid for. Our refund policy explains this.

When you close your account, we delete or anonymise your information within 30 days. We keep only:

• billing and tax records, for as long as tax law requires,
• consent and cancellation records, for the period shown in the summary table,
• information needed for an open dispute, chargeback, legal claim or investigation, until it is resolved, and
• backups, which are overwritten within [RETENTION PERIOD].

How we protect information

We use safeguards suited to how sensitive this information is. These include encryption in transit, limiting access to staff and providers who need it, [ENCRYPTION AT REST, ACCESS LOGGING AND OTHER MEASURES: confirm against build], and requiring our providers to protect it.

No system is perfectly secure. If a breach of security creates a real risk of significant harm to you, we will tell you and the regulators as the law requires. We keep a record of every breach.

Adults only

Quipster is only for people who are at least 18 and the age of majority where they live. We do not knowingly collect information from anyone younger.

If we learn that a user is under that age, we will close the account, cancel and refund any subscriptions, and delete their information. We may keep a minimal record to stop that person signing up again until they are old enough. If you believe someone underage is using Quipster, email DRAFT-support@quipster.ai.

Reports about content

If you report a character or content, for example because you believe it resembles a real person, email DRAFT-support@quipster.ai. You do not need an account to report. We use the information in your report only to investigate and respond, and we keep it for [RETENTION PERIOD]. We may share a summary of reports and how we handled them with [PAYMENT PROCESSOR] and card networks where their rules require it. We limit the personal information included.

Emails we send

We send service emails about your account and subscriptions. These include confirmations, receipts, a yearly reminder, notices of changes, and security alerts. You cannot opt out of these while you have an account, because they are part of the service and in many cases are required by law.

We send marketing email only if you opt in, and every marketing email has an unsubscribe link.

Your rights

Wherever you live, you can ask us to:

• Access: tell you whether we hold personal information about you and give you a copy.
• Correct: fix information that is inaccurate or incomplete.
• Delete: delete your information, subject to the limits under "Deleting your account".
• Port: give you your information in a structured, commonly used electronic format, or send it to another organisation.
• Withdraw consent: stop an optional use. Withdrawing consent needed to run the service means closing your account.
• Opt out: stop any sale, sharing or targeted advertising. We do none of these, but you can still make the request.
• Explain: tell you how we use your information, who we share it with, and the source of information we did not get from you.

How to make a request

Email DRAFT-support@quipster.ai from the email address on your account, with the subject line "Privacy request". Tell us what you are asking for.

• We will confirm the request comes from you, normally by asking you to confirm through your account or by replying from your account email. We will not ask for ID documents unless there is no other way.
• We will reply within 30 days. If we need more time where the law allows it, we will tell you why within that 30 days.
• Requests are free. We may charge a reasonable fee or refuse only if a request is clearly unfounded or excessive, and we will explain why.
• An authorised agent can make a request for you with your signed permission. We may ask you to confirm directly with us.
• We will not treat you differently, or charge you a different price, because you used your privacy rights.

If we refuse

If we refuse all or part of your request, we will tell you why. You can appeal by replying to our decision with the word "Appeal". A different person will review it, and we will give you a written decision within 45 days. If you are still not satisfied, you can complain to the regulator listed for your region below.

If you live in Canada

The Personal Information Protection and Electronic Documents Act (PIPEDA) applies to how we handle your information. In addition to the rights above:

• You can challenge our compliance by writing to [PRIVACY OFFICER NAME] at DRAFT-support@quipster.ai.
• You can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.
• We ask for your express consent before using information that could reveal you use an adult-content service, and we use it only for the purposes in this policy.

If you live in Quebec

Quebec's Act respecting the protection of personal information in the private sector gives you these additional rights:

• Person in charge. Our person in charge of the protection of personal information is [PRIVACY OFFICER NAME], [PRIVACY OFFICER TITLE], DRAFT-support@quipster.ai.
• Consent. We ask for consent for each purpose separately, in clear and simple terms, and we ask for express consent for sensitive information.
• Privacy by default. Settings that affect your privacy are set to the most private option by default.
• Portability. You can ask for your information in a structured, commonly used technological format.
• Stop dissemination and de-indexing. You can ask us to stop disseminating your information, or to de-index a link to it, where the law allows.
• Automated decisions. If a decision about you is made only by automated means, such as an age check, we will tell you. On request we will tell you what information was used and the main reasons, and a person will review it.
• Transfers outside Quebec. We assess the risks before transferring your information outside Quebec, as described above.
• Complaints. You can complain to the Commission d'accès à l'information du Québec at cai.gouv.qc.ca.

This policy and our terms are available in French. Quebec users see the French version first.

If you live in the United States

We give the rights listed under "Your rights" to all US users, whether or not a state law requires it.

California

Right to know and delete. The California Consumer Privacy Act may not apply to us yet. If and when it does, you have the rights under "Your rights", including the right to know, delete, correct, and opt out of sale or sharing. You also have the right to limit our use of sensitive personal information. We use sensitive personal information only for purposes the law allows without offering that right, such as providing the service you asked for, security and fraud prevention.

In the past 12 months we collected these categories of personal information, from the sources and for the purposes described above:

We have not sold or shared personal information, and we have no actual knowledge of selling or sharing information of anyone under 16.

Shine the Light. We do not disclose personal information to third parties for their own direct marketing.

Complaints. You can contact the California Privacy Protection Agency at cppa.ca.gov or the California Attorney General.

Washington and Nevada

Washington. We do not collect consumer health data, including biometric data, as defined in Washington's My Health My Data Act. If that changes, for example because of the age verification method, we will publish a separate consumer health data policy and ask for your consent first.

Nevada. We do not sell covered information as defined by Nevada law. You can still send an opt-out request to DRAFT-support@quipster.ai.

Other states

If you live in a state with a consumer privacy law, such as Colorado, Connecticut, Delaware, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah or Virginia, you have the rights listed under "Your rights", including the right to appeal. If we deny your appeal, you can contact your state attorney general.

Changes to this policy

If we make a material change to this policy, we will email you and show a notice in the app at least 30 days before it takes effect. If the change affects how we use information you have already given us, we will ask for your consent again where the law requires. The effective date at the top shows when this policy last changed. We keep earlier versions and will send you one on request.

Contact us

Privacy questions and requests: DRAFT-support@quipster.ai

Mail: [PRIVACY OFFICER NAME], [PRIVACY OFFICER TITLE], DRAFT Business Name, DRAFT Street address, DRAFT City, Region, Postal code, DRAFT Country