Privacy Policy
This privacy policy applies to the QNotes app for mobile devices, together with any related services operated by Kyurei Studio (collectively, the "Application"). Kyurei Studio is hereby referred to as the "Service Provider".
Information Collection and Use
The Application collects information when you download and use it. This information may include information such as
Your device's Internet Protocol address
The pages of the Application that you visit, the time and date of your visit, the time spent on those pages
The time spent on the Application
your mobile operating system you use
If you subscribe to a premium plan, the Application may upload your notes content — including text, titles, and associated metadata — to the Service Provider's servers to enable cloud synchronisation across devices. This upload occurs only when you are signed in to a premium account and have an active internet connection.
Notes content is stored on servers hosted by Supabase and is used solely to provide the cloud sync feature. It is not used for advertising, profiling, or shared with third parties except as described in this policy or as required by law. Notes created by non-premium users are stored locally on your device only and are not transmitted to the Service Provider's servers.
If your premium subscription expires, your notes content will be retained on the Service Provider's servers for a period of 60 days to allow for resubscription, after which it will be permanently deleted in accordance with the Data Retention Policy below.
You may request deletion of your notes content at any time by contacting the Service Provider at kyurei.studio@gmail.com. Note that deleting notes content from the server will remove it from cloud sync but will not affect notes stored locally on your device.
Intended Use of Notes Content
The Application is designed for presentation scripts, cue cards, and teleprompter use. Users are advised to use the Application only for its intended purpose.
Users must not input the following categories of sensitive information into the Application:
- Health or medical data
- Financial data, including bank account or credit card details
- Government-issued identification numbers (e.g. Identification Card, Passport, Tax ID)
- Passwords or authentication credentials
- Personal data of third parties without their consent
The Service Provider does not require or request this type of information to operate the Application. If you choose to input such information into your notes, you do so at your own risk. The Service Provider accepts no liability for any consequences arising from a user's decision to store sensitive personal information in the Application contrary to this guidance.
Cookies and tracking technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Your Rights
You may request access to, correction of, or deletion of your personal data held by the Service Provider. To exercise these rights, or to withdraw consent where processing is based on consent, contact the Service Provider at kyurei.studio@gmail.com.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at kyurei.studio@gmail.com.
The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.
For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information, including but not limited to Email, Username, Notes Content. The information the Service Provider requests will be retained and used as described in this privacy policy.
Third Party Access
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
Subscription and Purchase Data
If you subscribe to a premium plan, the Application transmits purchase and subscription history to RevenueCat, a third-party subscription management service, to verify your premium status and manage your entitlements. This includes transaction IDs, purchase dates, and subscription status. RevenueCat also collects anonymized analytics on subscription and purchase events (such as trial starts, conversions, and cancellations) to help the Service Provider understand subscription performance. This data is processed by RevenueCat in accordance with their privacy policy.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:
The Service Provider may disclose User Provided and Automatically Collected Information:
as required by law, such as to comply with a subpoena, or similar legal process;
when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at kyurei.studio@gmail.com.
Data Retention Policy
The Service Provider retains personal data based on its necessity for the stated purposes:
User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
Data required for legal compliance: Retained as long as required by applicable law
You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at kyurei.studio@gmail.com. Please note that some User Provided Data may be required for the Application to function properly.
Children
The Application is not intended for children under 16 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 16 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (kyurei.studio@gmail.com) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at kyurei.studio@gmail.com.
This privacy policy is effective as of 2026-07-01
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
European Users – Additional Rights (GDPR)
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the following additional provisions apply to you under the General Data Protection Regulation (GDPR) or equivalent applicable law.
Lawful Basis for Processing
The Service Provider processes your personal data on the following legal bases:
Creating and managing your account
Performance of a contract (Article 6(1)(b))
Cloud sync of notes content (Premium Users)
Performance of a contract (Article 6(1)(b))
Sending transactional emails (OTP, Password Reset)
Performance of a contract (Article 6(1)(b))
Subscription event analytics via RevenueCat
Legitimate interests — understanding subscription performance (Article 6(1)(f))
Marketing communications (where applicable)
Consent (Article 6(1)(a)) — you may withdraw at any time
Your Rights Under GDPR
You have the following rights regarding your personal data:
- Right of Access — request a copy of the personal data the Service Provider holds about you
- Right to Rectification — request correction of inaccurate or incomplete data
- Right to Erasure — request deletion of your personal data, subject to legal retention obligations
- Right to Restriction — request that processing of your data be restricted in certain circumstances
- Right to Data portability — receive your personal data in a structured, machine-readable format
- Right to Object — object to processing based on legitimate interests at any time
- Right to Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior processing
To exercise any of these rights, contact the Service Provider at kyurei.studio@gmail.com. The Service Provider will respond within 30 days of receiving your request.
Data Transfers Outside the EEA
Your personal data may be transferred to and processed in countries outside the EEA, including Singapore (Supabase infrastructure) and the United States (RevenueCat, Resend). Where such transfers occur, the Service Provider relies on appropriate safeguards including Standard Contractual Clauses (SCCs) or the recipient's participation in an approved adequacy framework.
Right to Lodge a Complaint
If you believe the Service Provider has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with your local data protection authority. A list of EEA supervisory authorities is available at https://edpb.europa.eu/about-edpb/about-edpb/members_en.
Contact Us
If you have any questions regarding privacy while using the Application, or have questions about the practices, please contact the Service Provider via email at kyurei.studio@gmail.com.