Privacy Policy

Last updated: 2 May 2026

This Privacy Policy explains how QuickReg ("we", "us") collects, uses, and discloses information about you when you use our mobile application. We are an Australian operator and we comply with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

1. Information we collect

• Account information. Email address and a password hash, managed by our auth provider Supabase.
• Subscription state. Your active plan, renewal date, and entitlement, mirrored from RevenueCat which processes purchases on the Apple App Store and Google Play.
• User-generated content. The questions you ask, the photos you submit for analysis, and any voice recordings you transcribe. These are stored against your account so you can see your history.
• Diagnostic data. Crash reports and basic performance telemetry via Sentry, attached to your user UUID (never your email).
• Approximate location. Inferred from your IP address by our infrastructure providers and our ad SDK; we don't track your precise location.

2. How we use it

• To answer your regulation queries (we send the relevant excerpts and your question to OpenAI for processing).
• To enforce daily query limits, prevent abuse, and bill subscriptions.
• To diagnose crashes and improve the app.
• To serve non-personalised banner ads to free-tier users via Google AdMob.

3. Who we share it with

We share data only with the processors needed to operate the app:

• Supabase — auth, database, storage, edge functions.
• OpenAI — answers your questions, transcribes your voice, analyses photos. OpenAI does not train on API content.
• RevenueCat — subscription receipt validation.
• Sentry — crash reporting.
• Google AdMob — non-personalised banner advertising for free-tier users.

We don't sell your data. We don't share data for cross-app or cross-site tracking.

4. Where it lives

Your data is stored in Supabase's hosted infrastructure (currently Sydney region) and in OpenAI's processing infrastructure (United States). Limited diagnostic data passes through Sentry (United States). RevenueCat is hosted in the United States.

5. How long we keep it

• Account profile: until you delete your account.
• Chat messages: 24 months from creation, then automatically purged.
• Voice transcription events (count only, not the audio): 90 days.
• Webhook / billing event audit trail: 90 days.
• Crash reports: as configured by Sentry's default retention.

6. Your rights

Under the Australian Privacy Principles you can:

• Access a copy of the data we hold — Settings → Your data → Download my data.
• Delete your account and all associated data — Settings → Your data → Delete account.
• Correct inaccurate information — email [email protected].
• Complain to the Office of the Australian Information Commissioner if you believe we've mishandled your data.

7. Children

QuickReg is not directed at children under 16 and we don't knowingly collect data from them.

8. Changes

We may update this Policy from time to time. Material changes will be announced in-app or by email. Continued use after the effective date constitutes acceptance.

9. Contact

Privacy enquiries: [email protected]