Quixyr Privacy Policy

Effective Date: October 28, 2025

Welcome to Quixyr, a mobile application designed to connect adults in the LGBTQ+ community for dating and social interactions. At Quixyr, we are committed to protecting your privacy and ensuring transparency about how we collect, use, and share your personal information. This Privacy Policy explains our practices, including how we handle data for personalized advertising and location-based matching, and outlines your rights under applicable laws, such as the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and Brazil’s Lei Geral de Proteção de Dados (LGPD). By using Quixyr, you agree to this Privacy Policy and any future updates, which will be posted at www.quixyr.com/privacy-policy/en.html and notified via email or in-app notice.

1. Who We Are

Quixyr is operated by Quixyr LLC, a company registered in Wyoming, USA, located at Elmhurst, Queens, NY 11373. For users in the EEA or UK, we act as the data controller and have appointed an EU representative under GDPR Article 27, reachable at eu-rep@quixyr.com. You can contact us at support@quixyr.com or via our in-app support feature. For GDPR purposes, our Data Protection Officer (DPO) can be reached at dpo@quixyr.com.

2. Information We Collect

We collect information to provide and improve Quixyr’s services, including matching, messaging, and personalized ads. Below are the categories of information we collect:

Information You Provide:

• Account Data: Email address, user-generated nickname (we do not collect first or last names), age (to verify you are 18 or older, or 19 or older in South Korea per local laws), gender identity, sexual orientation, and profile details (e.g., photos, bio). We may collect your date of birth in the future if required for age verification by applicable laws.
• Content: Messages, chat images, or reported content (e.g., for moderation).
• Preferences: Settings for matching, notifications, or ad personalization.

Automatically Collected Data:

• Device Information: Device ID (e.g., IDFA for iOS, AAID for Android), IP address, operating system, app version.
• Usage Data: Interactions with Quixyr (e.g., swipes, page views), timestamps, and crash reports.
• Geolocation:
  • Fine Geolocation: Precise location (e.g., GPS coordinates within meters) for matching you with nearby users. This is required for Quixyr’s core functionality and cannot be disabled without preventing app use. Collected only with your explicit consent via device prompts. Your last known online location is stored in our database to improve matching accuracy when you return to the app. It is retained until your account is deleted.
  • Approximate Geolocation: City-level or regional location (e.g., derived from IP or coarse GPS) for matching, serving personalized ads, or determining applicable privacy laws (e.g., CCPA). Collected with your consent.

Sensitive Data: Information like sexual orientation, gender identity, or precise geolocation is considered “special category data” under GDPR and LGPD. We collect this only with your explicit consent for core features (e.g., matching) and do not share it for advertising.

No Children’s Data: Quixyr is for adults 18+ globally, and 19+ in South Korea per the Act on Promotion of Information and Communications Network Utilization. We do not knowingly collect data from users under 18 (or 19 in South Korea) and comply with COPPA, LGPD, and equivalent laws.

3. How We Use Your Information

We use your information to provide Quixyr’s services, ensure safety, and serve relevant ads. Our legal bases under GDPR and LGPD include consent (e.g., for ads, geolocation), contract (to deliver services like matching), and legitimate interests (e.g., fraud prevention, analytics). Specific uses include:

• Service Delivery: Matching users based on fine geolocation (required) or approximate geolocation, enabling messaging, and personalizing your experience.
• Advertising: Serving personalized or non-personalized banner ads via partners like Google AdMob, Meta Audience Network, and AppLovin, using device ID or approximate geolocation (with consent). Fine geolocation and sensitive data are never used for ads.
• Safety and Moderation: Detecting and removing illegal or harmful content; retaining reported content for up to 14 days. We use automated tools to filter explicit content for user safety. Profile images are automatically moderated using AWS Rekognition (or other providers in the future) to prevent nudity or naked images in public view.
• Analytics: Improving Quixyr via aggregated usage data (e.g., Firebase Analytics).
• Legal Compliance: Responding to legal requests or protecting user safety.

4. How We Share Your Information

We share limited data with third parties to operate Quixyr and serve ads, always with safeguards:

• Service Providers: We share data with trusted vendors for:
  • Hosting/ Database: Firebase (user data, chats, stored in the EEA region europe-west1) and Wasabi (images, stored in the EEA, eu-central-1 region).
  • Analytics: Firebase Analytics (europe-west1).
  These providers are bound by Data Processing Agreements (DPAs) with Standard Contractual Clauses (SCCs) for GDPR and LGPD compliance.
• Ad Partners: For personalized ads, we share device identifiers (e.g., IDFA, AAID) and approximate geolocation (e.g., city-level) with ad networks like Google AdMob, Meta Audience Network, AppLovin, InMobi, and Smaato. Fine geolocation and sensitive data (e.g., sexual orientation, profile details) are never shared for ads.
• Legal Obligations: We may share data to comply with laws, respond to subpoenas, or protect users (e.g., reporting illegal activity).
• No Resale: We do not “sell” your data for purposes unrelated to Quixyr’s services, except as noted for CCPA “sale/sharing” in advertising.

5. Consent Management for Ads and Geolocation

We use a Consent Management Platform (powered by Google User Messaging Platform) to collect your preferences for data use, including for ads and geolocation:

• On First Use: If you’re in California (CCPA), Brazil (LGPD), or other regulated regions, you’ll see an in-app consent form explaining how we use data:
  • Fine Geolocation (Matching): Required for matching nearby users. If you decline, Quixyr cannot function, and you may choose not to use the app.
  • Approximate Geolocation (Ads/Matching): Used for personalized ads or matching. You can opt for non-personalized ads or limit to matching only.
  • Options: [Accept] [Decline] [Manage Preferences] (toggle purposes like ad personalization or vendors).
• iOS Users: We request AppTrackingTransparency (ATT) permission separately for tracking (e.g., IDFA for ads). A separate device prompt requests fine geolocation for matching.
• Withdrawal:
  • Change ad-related preferences (e.g., approximate geolocation for ads) anytime via the “Manage Do Not Sell/Share” (CCPA) or “Change Privacy Preferences” button in Quixyr’s settings.
  • Withdraw consent for geolocation at any time via your device settings (iOS: Settings → Privacy → Location Services; Android: Settings → Location). Note: disabling fine geolocation will prevent matching functionality.

6. Your Data Protection Rights

You have rights over your data, depending on your location:

GDPR (EEA/UK Users) (applicable upon EU/UK launch):

• Access: Request a copy of your data via the in-app “Download My Data” feature or email.
• Rectification: Correct inaccurate data via the in-app “Edit Profile” feature or email.
• Erasure: Delete your account and data via the in-app “Delete My Account” button.
• Restriction: Limit data processing by contacting us.
• Portability: Receive your data in a structured JSON format via “Download My Data.”
• Objection: Opt out of processing for legitimate interests (e.g., analytics) by contacting us.
• Withdraw Consent: Revoke consent for ads or approximate geolocation via settings. Withdrawing fine geolocation consent prevents matching functionality.
• Contact our DPO at dpo@quixyr.com or EU representative at eu-rep@quixyr.com.

CCPA (California Residents):

• Categories Collected: Identifiers (e.g., email, device ID), geolocation (fine for matching, approximate for ads/matching), protected classifications (e.g., sexual orientation for matching).
• Purposes: Service delivery (e.g., matching), advertising (cross-context behavioral), analytics.
• Shared With: Ad networks (e.g., AdMob, for device ID and approximate geolocation), service providers (e.g., Firebase, Wasabi).
• Rights:
  • Know: Request details on data collected/shared (twice per year, free) via support@quixyr.com or in-app.
  • Delete: Request deletion via the “Delete My Account” button.
  • Opt-Out of Sale/Sharing: Use the in-app “Manage Do Not Sell/Share My Personal Information” toggle to opt out of sharing device ID or approximate geolocation for ads. We honor Global Privacy Control (GPC) signals.
  • Non-Discrimination: Opting out of ad-related sharing won’t affect Quixyr’s core features. Declining fine geolocation prevents matching functionality.
• Submit requests via support@quixyr.com or in-app.

LGPD (Brazil Residents):

• Categories Collected / Purposes / Shared With: Same as CCPA.
• Rights:
  • Confirmation / Access / Correction / Deletion / Portability / Anonymization/Blocking / Information on Sharing / Revoke Consent — via “Download My Data,” “Edit Profile,” “Delete My Account,” or support@quixyr.com.
• Submit requests via support@quixyr.com or in-app.

Global Users: Similar rights may apply under laws like Canada’s PIPEDA. Contact us at support@quixyr.com.

7. International Data Transfers

Your data is stored in:

• Wasabi: Profile and chat images are stored in the EEA (eu-central-1, Amsterdam, Netherlands), ensuring GDPR and LGPD compliance for media storage.
• Firebase: User data and chats are stored in the EEA region europe-west1. For EEA, UK, and Brazil users, transfers to the US are protected by Standard Contractual Clauses (SCCs) in our Data Processing Agreements with Firebase (Google). Contact our DPO at dpo@quixyr.com for details on SCCs.

8. Data Retention

We retain data only as long as necessary:

• Account Data: Kept until you delete your account via “Delete My Account,” then purged within 30 days.
• Ad-Related Data: Device ID and approximate geolocation retained for up to 13 months (per ad network policies) while you consent to personalized ads, then anonymized or deleted.
• Geolocation Data: Fine geolocation retained only during active sessions for matching (with consent) and not stored historically. Approximate geolocation may be retained for up to 13 months for ads.
• Moderation Data: Reported content kept for 14 days for safety/legal purposes.
• Analytics: Aggregated data retained indefinitely; individual data deleted post-session.

9. Security

We use industry-standard measures (e.g., encryption in transit and at rest, access controls) to protect your data in Firebase (EEA) and Wasabi (EEA). However, no system is 100% secure. Report vulnerabilities to security@quixyr.com.

10. Third-Party Links

Quixyr may link to external sites (e.g., ad partner pages). We’re not responsible for their privacy practices. Review their policies before interacting.

11. Children’s Privacy

Quixyr is for adults 18+ globally, and 19+ in South Korea per the Act on Promotion of Information and Communications Network Utilization. We do not collect data from users under 18 (or 19 in South Korea) and comply with COPPA, LGPD, and equivalent laws. Contact support@quixyr.com if concerned.

12. Changes to This Policy

We may update this policy to reflect legal or service changes. We’ll notify you via email or in-app notice (30 days for material changes). By continuing to use Quixyr, you agree to the updated policy. Check www.quixyr.com/privacy-policy/en.html for the latest version.

13. Contact Us

For questions, requests, or complaints:

• Email: support@quixyr.com
• DPO (GDPR): dpo@quixyr.com
• EU Representative (GDPR): eu-rep@quixyr.com

For EEA/UK users, contact your local data protection authority (e.g., CNIL in France, ICO in the UK). California users may contact the California Privacy Protection Agency. Brazil users may contact the Autoridade Nacional de Proteção de Dados (ANPD).

← Back to Home