Privacy
Last updated: April 22, 2026
How Quippy collects, uses, and protects your data.
Quippy is an AI conversation & party app: you pick a deck (or describe a custom one) and Quippy generates question cards — conversation starters, would-you-rathers, truth or dares, and more. This Privacy Policy explains what information we collect when you use the Quippy mobile app, why we collect it, who we share it with, and the choices you have. By using Quippy, you agree to the practices described here. If you do not agree, please don't use the app.
Account information: When you sign in with Apple or Google, we receive and store a provider user ID, your email address (if you share it), and your display name (if your provider sends one). We do not receive or store your provider password. Content you submit: any custom-deck prompt you type, and the cards Quippy generates and that you save. Usage data: Your IP address (used for rate limiting, not persisted in your profile) and basic device information for diagnostics. Subscription state: If you subscribe to Quippy Pro, our payments partner RevenueCat tracks your entitlement. We do not receive your payment card details — those are handled by Apple directly.
To deliver the service: generate question cards (including from any custom-deck prompt you enter), and remember your saved cards between sessions. To verify subscriptions: confirm your Quippy Pro entitlement so Pro features unlock. To prevent abuse: rate-limit by IP, detect automated misuse, and protect the service. To support you: respond to your questions when you contact us. To improve Quippy: understand which features are used and where the app fails. We do not sell your data and we do not use the content you submit or the output generated for you to train any model.
We rely on a small set of trusted vendors. Anthropic (card generation): When you generate a deck or a custom deck, we send the request to Anthropic's Claude API. Per Anthropic's commercial terms, Anthropic does not use API inputs/outputs to train its models. RevenueCat (subscriptions): We use RevenueCat to manage subscription state. Apple Sign In and Google Sign In: Those providers handle the authentication flow. Apple App Store (billing): All purchases are processed by the App Store. Quippy never sees or stores your payment card.
Your account data and saved cards are stored in a managed PostgreSQL database hosted in the United States (Railway, Virginia region). Connections are encrypted in transit. On your device, authentication tokens are stored in Apple Keychain.
We keep your account data and saved cards for as long as your account exists. When you delete your account (Profile → Delete account), we cascade-delete your account, saved cards, generated content, and subscription mapping. Some operational logs may be retained for up to 30 days for abuse prevention, after which they are automatically purged.
Depending on where you live (e.g. the EEA, UK, or California), you may have rights to: Access — request a copy of your personal data. Rectification — ask us to correct inaccurate data. Deletion — ask us to delete your data. Portability — receive your data in a machine-readable format. Objection / restriction — object to certain processing. Withdraw consent at any time. Lodge a complaint with your local data protection authority.
Delete your account: open the app, go to Profile → Delete account. This is immediate and irreversible. Export your data or any other request: email hello@getquippy.app from the email tied to your account. We will respond within 30 days.
All traffic uses TLS (HTTPS). Authentication tokens are stored in the Apple Keychain (secure enclave). Refresh tokens are rotated on use; access tokens are short-lived. Access to production data is restricted to a minimum set of authorized engineers. No system is perfectly secure. If you believe your account has been compromised, contact us immediately.
Quippy is not intended for children under 13 (or under 16 in the EEA, UK, and other jurisdictions). We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, email hello@getquippy.app and we will delete it.
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent revision. If we make material changes, we will notify you through an in-app notification or by email before the changes take effect.
Questions, requests, or complaints about this policy or our data practices? Email hello@getquippy.app.
