Privacy Policy

This policy explains how [Company name TBD] (“we”) handles your information when you use the Qugora desktop app, the qugora.com website and the api.qugora.com service (together, “Qugora”).

The short version

• Audio and the text you speak or type stay on your device by default.
• Memory items are created locally and need your approval one by one. Only approved items sync to our servers, and only if you turn on sync on the Pro plan.
• Telemetry is counts and timings only — never text or audio.
• For Qugora Cloud LLM requests we store nothing but token counts.

1. Data processed only on your device

By default the following stays on your computer and we cannot access it: microphone audio (recognition runs locally); recognized and cleaned-up text and history; correction records and your personal lexicon; memory items that aren’t synced; local app logs.

If you enter your own LLM API key, text is sent directly from your device to that provider under their privacy policy, not through us.

2. Data we collect

2.1 Account

Email address, sign-up time and plan status. Session tokens are stored only as hashes on our servers and expire after 90 days.

2.2 Subscription and payment

Plan, status and renewal dates. Payments are processed by Stripe; we never see or store full card numbers or payment account details.

2.3 Correction telemetry

To measure and improve correction (e.g. “was the first candidate right?”, “how long does a fix take?”) the app reports count-type events: event kind (swipe, candidate pick, re-say, keyboard fallback…), timestamp, candidate rank and count, selection length, timings, the current app’s identifier (e.g. com.tencent.xinWeChat), app version, OS, a random anonymous install ID, and your account ID if signed in.

Telemetry never contains audio or text. It’s on by default and can be turned off any time in Settings.

2.4 Qugora Cloud LLM

When you use Qugora Cloud for cleanup or candidates, the relevant text is forwarded through our service to an upstream model provider. We don’t store request or response content — only token counts, for quotas and billing. [Upstream provider name and its retention policy to be added.]

2.5 Memory sync (Pro, opt-in)

When enabled, only memory items you approved (text, kind, note, source app, timestamps, status) are synced to our servers so they’re available across your devices. You can turn sync off or delete items at any time; deletions sync too.

2.6 Website

qugora.com uses localStorage for your sign-in token and theme preference. No advertising or third-party tracking cookies. The site and API are hosted on Cloudflare, which may process access logs (such as IP addresses) for security and abuse prevention.

3. How we use data

To provide and maintain Qugora (sign-in, sync, quotas, updates); to process subscriptions; to improve correction using aggregate statistics; to prevent fraud and abuse; and to send sign-in codes and essential service notices.

4. What we don’t do

We don’t sell your personal information, don’t train models on your audio, text or memory items, and don’t run or target ads.

5. Service providers

Cloudflare (hosting, database, storage), Stripe (payments), Resend (sign-in emails), and [upstream LLM provider] (Qugora Cloud inference). Each receives only what’s needed for its service.

6. Where data is stored

Our services run on Cloudflare’s global network, so data may be processed outside your country or region. [Cross-border transfer arrangements to be confirmed by counsel.]

7. Retention

Account data: until you delete your account. Sessions: expire after 90 days or on sign-out. Telemetry: deleted or reduced to aggregates after [e.g. 13 months]. Synced memory items: until you delete them, disable sync, or delete your account.

8. Your rights

You can access, correct, export or delete your data, delete your account, or withdraw consent (e.g. disable telemetry or sync). Email hello@qugora.com; we’ll respond within 15 business days.

9. Children

Qugora is built for adults at work and isn’t directed at children under 14. If we learn we’ve collected a child’s data, we’ll delete it.

10. Changes

We’ll notify you on the site or in the app about material changes and update the date above.

11. Contact

[Company name TBD] · hello@qugora.com · [Address]