Privacy Policy
Last Updated: March 18, 2026
Quantiya Products
Introduction
Quantiya LLC ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our products and services.
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not use our products.
Quantiya Translate
Real-time multilingual messaging app for iOS and Android.
Information We Collect — Translate
1. Account Information
When you sign in to the App using Apple Sign In or Google Sign In, we collect:
- User Identifier: Unique ID from Apple or Google
- Email Address: If provided by your authentication provider
- Name: If provided by your authentication provider
2. Messaging & Translation Data
To provide messaging and translation services, we process:
- Text Messages: Messages you send are stored on our servers and translated for each recipient
- Voice Messages: Audio recordings you send are uploaded to our servers for storage and transcription
- Language Preferences: Your preferred language for receiving translated messages
3. Contact & Social Data
To enable messaging between users, we store:
- Contact List: Your connections with other users (added via QR code or invite code)
- Conversation Membership: Which conversations (1:1 and group) you participate in
- Push Notification Tokens: Device tokens for delivering push notifications
- Avatar Photos: Profile pictures you upload
4. Usage Information
We collect data about how you use the App:
- Message Count: Number of text and voice messages sent, to enforce subscription quotas
- Subscription Information: Current tier, usage statistics, payment history
- Device Information: OS version, device model (for troubleshooting)
5. Information We Do NOT Collect
- Precise location data
- Phone contacts or address book
- Browsing history or search history
How We Use Your Information — Translate
| Purpose | Data Used |
|---|---|
| Provide messaging & translation | Text messages, voice messages, language preferences |
| Manage your account & contacts | User identifier, email, name, contact list |
| Deliver push notifications | Device push tokens, message metadata |
| Enforce usage quotas | Message count, subscription tier |
| Process subscriptions | Payment information (via Apple App Store or Google Play) |
| Improve our service | Aggregated usage statistics |
Third-Party Services — Translate
We share limited data with the following service providers:
- OpenAI: Message text is sent to OpenAI's API for translation, and voice message audio is sent for transcription. OpenAI's privacy policy applies to their processing.
- Apple App Store: Subscription and payment processing for iOS users.
- Google Play: Subscription and payment processing for Android users.
- AWS (Amazon Web Services): Cloud infrastructure for our backend API, message storage, and voice message file storage. Data is encrypted in transit and at rest.
Data Retention — Translate
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Text messages | Free: 7 days; Pro: permanent (until account deletion) |
| Voice message audio | Free: 7 days; Pro: permanent (until account deletion) |
| Usage statistics | Until account deletion |
| Subscription history | 7 years (for tax/legal compliance) |
| Contact list | Until account deletion or contact removal |
CodeVibe
iOS and Android companion app for controlling AI coding agents remotely.
Information We Collect — CodeVibe
1. Account Information
When you sign in using Apple Sign In or Google Sign In, we collect:
- User Identifier: Unique ID from Apple or Google
- Email Address: If provided by your authentication provider
2. Session & Messaging Data
To provide remote AI agent control, we process:
- Session Metadata: Project path, agent type, session status, timestamps
- Events: Messages exchanged between mobile and desktop (user prompts, agent responses, tool use events, interactive prompts)
- Image Attachments: Screenshots and images you share with your AI agent
- Push Notification Tokens: Device tokens for delivering approval request notifications
3. Encryption Keys
To provide end-to-end encryption, we store:
- Device Public Keys: ECDH P-256 public keys registered for each device
- Encrypted Session Keys: Session encryption keys wrapped for each authorized device
Private keys are stored only on your device (iOS Keychain or macOS Keychain) and are never transmitted to our servers.
4. Usage Information
- Message & Image Count: To enforce subscription quotas
- Active Session Count: To enforce tier limits
- Subscription Information: Current tier, usage statistics
5. Information We Do NOT Collect
- Your source code (all code content is end-to-end encrypted — we cannot read it)
- Precise location data
- Phone contacts or address book
How We Use Your Information — CodeVibe
| Purpose | Data Used |
|---|---|
| Route messages between mobile and desktop | Encrypted event content, session metadata |
| Deliver push notifications for approvals | Device push tokens, event metadata |
| Manage sessions and devices | User identifier, device keys, session state |
| Enforce usage quotas | Message count, image count, session count |
| Process subscriptions | Payment information (via Apple App Store or Google Play Store) |
End-to-End Encryption — CodeVibe
This means:
- We cannot read your code, prompts, or agent responses
- Image attachments are encrypted before upload
- Only devices with authorized keys can decrypt session content
- Even in the event of a server breach, your data remains protected
Third-Party Services & Data Sharing — CodeVibe
AI Coding Agent Services
CodeVibe relays your messages between your mobile device and AI coding agents running on your desktop computer. When you send a prompt from the CodeVibe app, it is transmitted through our secure backend to your desktop, where it is delivered to the AI agent you are using. Depending on which agent you use, your prompts are ultimately processed by the following third-party AI services:
- Claude Code by Anthropic (anthropic.com) — processes prompts sent to Claude Code sessions
- Gemini CLI by Google (google.com) — processes prompts sent to Gemini CLI sessions
- Codex CLI by OpenAI (openai.com) — processes prompts sent to Codex CLI sessions
These AI services process your prompts on your desktop computer through their respective CLI tools. CodeVibe does not send your data directly to these AI providers — your prompts travel through our backend to your desktop, where the locally installed agent forwards them to the AI service. Each AI provider's own privacy policy and terms of service govern how they process your data.
What Data Reaches AI Services
- Text prompts you type or speak in the CodeVibe app
- Images you attach to messages (delivered to your desktop agent)
- File change approval or rejection responses
Other Third-Party Services
- Apple App Store / Google Play Store: Subscription and payment processing.
- AWS (Amazon Web Services): Cloud infrastructure for our backend API (AppSync, DynamoDB, S3, Lambda). Encrypted data is stored in transit and at rest.
- Firebase Cloud Messaging (Google): Push notification delivery for Android devices.
- Apple Push Notification Service (APNs): Push notification delivery for iOS devices.
We do not sell or share your data with advertisers or data brokers.
Data Retention — CodeVibe
| Data Type | Retention Period |
|---|---|
| Account information | Until account deletion |
| Session data & events | Until session ends or account deletion |
| Image attachments | Until session ends or account deletion |
| Device keys | Until device is deregistered or account deletion |
| Subscription history | 7 years (for tax/legal compliance) |
How We Share Your Information
We Do NOT
- Sell your personal information to advertisers or data brokers
- Share your data for marketing purposes
- Provide your information to social media platforms
- Use your data for targeted advertising
Legal Requirements
We may disclose your information if required by law, such as:
- To comply with legal process or government requests
- To protect our rights, privacy, safety, or property
- To enforce our Terms of Service
Data Security
We implement appropriate technical and organizational security measures to protect your information:
- Encryption in Transit: All data transmitted between apps and our servers uses TLS/SSL encryption
- Encryption at Rest: User data stored in our databases is encrypted
- End-to-End Encryption: CodeVibe additionally encrypts all content with AES-256-GCM before transmission
- Secure WebSocket: Real-time messaging uses encrypted WebSocket connections
- Access Controls: Limited employee access to user data on a need-to-know basis
- Secure Authentication: JWT tokens with automatic rotation for API access
Your Privacy Rights
Access and Portability
You can request a copy of your personal data by contacting us at support@quantiya.ai.
Correction
You can update your account information through the app or by contacting support.
Deletion
You can delete your account at any time through the app settings or by visiting quantiya.ai/delete-account.
Note: Deleted accounts are soft-deleted for 30 days. After 30 days, all personal information (except subscription records for legal compliance) is permanently deleted.
California Privacy Rights (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to know if personal information is sold or disclosed
- Right to say no to the sale of personal information (we don't sell data)
- Right to access your personal information
- Right to request deletion of your personal information
- Right to equal service and price
European Privacy Rights (GDPR)
If you are in the European Economic Area (EEA), you have rights under the General Data Protection Regulation (GDPR):
- Right of access
- Right to rectification
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object
- Rights related to automated decision-making
Children's Privacy
Our apps are rated 4+ and do not knowingly collect personal information from children under 13 years of age without parental consent.
If you are a parent or guardian and believe your child has provided us with personal information without your consent, please contact us at support@quantiya.ai, and we will delete that information.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. Our servers are located in multiple regions globally to provide optimal performance and reliability.
We ensure appropriate safeguards are in place for international transfers:
- EU-US Data Privacy Framework compliance (where applicable)
- Standard Contractual Clauses (SCCs) with service providers
- Encryption of data in transit and at rest
Cookies and Tracking
Our apps do not use cookies or tracking technologies. However:
- Our website (quantiya.ai) may use analytics cookies for improving user experience
- Third-party services may use their own tracking technologies according to their privacy policies
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Updating the "Last Updated" date at the top of this policy
- Posting the new Privacy Policy on our website
- Sending a notification through the app (for material changes)
Your continued use of our products after changes are posted constitutes acceptance of those changes.
Contact Us
If you have questions or concerns about this Privacy Policy, please contact us:
We will respond to your inquiry within 30 days.