Privacy Policy

Effective November 11, 2026

Quorum is developed by PEDE FLUX TECNOLOGIA LTDA (CNPJ 69.008.345/0001-98), a company based in Brazil (“we”), which is the controller of the personal data described here. This policy explains what the Quorum app for iPhone and Android collects, why, and how you can delete it.

1. What we collect

• An anonymous account. The first time you open the app, it creates a random account identifier with our backend provider. It is not linked to your name, e-mail, phone number or store account.
• Your Quorum+ subscription. If you subscribe to Quorum+ or restore it, the app sends the store’s proof of purchase (the subscription receipt) to our server so it can be checked. We keep the original transaction or order number, the product, the store (Apple or Google), whether it is a real or test-environment subscription, the expiry date of the current period, whether it is set to renew (when the store tells us) and when the record was created or updated, linked to your anonymous account. The app checks the subscription again from time to time to keep the expiry date current. We never see your payment details. If you never subscribe, none of this is collected.
• Your answers. For each question you answer we store your choice (yes, no or unsure), your prediction of how many people will say yes, the region (continent) you chose, and the time. They are stored under a pseudonymous key, not under your account identifier (see section 2).
• Reports. If you report a question, we store which question it was, under the same pseudonymous key, so each person counts once.
• Messages to support. If you write to us, we receive your e-mail address and whatever you include in the message. We use them only to answer you and keep them only as long as needed.
• Technical data. Like any internet service, our backend receives your IP address and basic technical information sent by your device (such as the operating system version) with each request. Our provider keeps them in sign-in session records and short-lived logs, for security and to keep the service running. We don’t use them to identify you or for analytics.

We do not collect your name, e-mail, phone number, contacts, photos, location, advertising identifier or browsing history. The app never asks for location access: on first launch it suggests a continent based on your phone’s region setting, and you can change it at any time.

2. How your votes are stored

Each vote is saved under a key computed from your account identifier and a secret kept only on our server (an HMAC). Nobody can read individual votes through the app’s interface, including other users: the app only receives totals. Results for a continent appear only after it has enough votes. The same key lets the app show you your own history and statistics.

3. Data kept on your device

Your settings (appearance, topics, region, reminder, automatic translation), a copy of your recent answers and translations already made are stored on your device. Uninstalling the app removes them.

The sign-in token of your anonymous account is also stored on your device. On Android, uninstalling the app removes it. On iPhone, it is kept in the system Keychain, which stays after the app is deleted, so if you reinstall the app on the same iPhone you get the same anonymous account back, with its Quorum+ status. On both systems, Settings → Delete account erases it.

4. Automatic translation

When a question is not available in your phone’s language, Quorum can translate it on your device: on iPhone with Apple’s Translation framework, and on Android with Google ML Kit on-device translation. The questions are translated on the device; the text is not sent to us or to a translation service. The first time, your phone may download a language pack from Apple or Google.

On Android, the ML Kit library may also send Google limited technical information (such as device model, system and app version, a per-installation identifier and performance data) so Google can maintain and improve it. This does not include your answers. You can turn translation off at any time in Settings → Translate questions automatically.

5. Reminders

If you turn on the daily reminder, it is scheduled on your device. We don’t use a push notification server and don’t receive any notification token.

6. Why we use this data

• To provide the app you asked for: create your anonymous account, record your votes and show results and your history. Legal basis: performance of our contract with you (the Terms of Use).
• To manage your Quorum+ subscription: check the store’s receipt and keep its status current. Legal basis: performance of the contract, and legal obligations for the tax and billing records, which Apple and Google keep as the sellers.
• To keep it fair and secure: one vote per person per question, and protection against abuse. Legal basis: our legitimate interest.
• To publish aggregate results: anonymous totals may be published or licensed to newspapers, universities and researchers. No individual vote or identifier is ever shared. Legal basis: our legitimate interest.

We don’t show ads, don’t build profiles, don’t track you across other apps or websites, and don’t sell or rent personal data.

7. Who processes data for us

• Supabase: database, sign-in and server functions. Our database is hosted in the United States.
• Apple: App Store payments and subscriptions, and on-device translation on iPhone.
• Google: Google Play payments and subscription checks (Google Play Developer API), and ML Kit on Android.

Each of them handles data under its own privacy policy. We don’t share data with anyone else, unless the law requires it. If you are outside the United States, your data is transferred there to provide the service. Supabase hosts it under its Data Processing Addendum, which includes the Standard Contractual Clauses, as the safeguard for this international transfer.

News links. Tapping a news item on the Today screen opens the original report on a third-party website. That site handles your data under its own privacy policy, not this one.

8. How long we keep data

• Anonymous accounts with no Quorum+ subscription record are deleted automatically after 90 days without use.
• Accounts with a Quorum+ subscription, current or past, are kept until you delete them in the app.
• Votes and reports are kept as part of the totals. After your account is deleted, nothing links them to anyone.
• Technical logs are kept by our provider for a limited time.
• If a store purchase is refunded or revoked, we keep its transaction number, without any link to an account, so that it cannot be used again.

9. Deleting your data

In the app, go to Settings → Delete account. This deletes your anonymous account and the subscription record on our server. Votes already counted stay in the totals, under a pseudonymous key that can no longer be connected to any account, so your personal history is gone for good. Deleting your account does not cancel Quorum+: the subscription stays with your Apple or Google account and keeps renewing until you cancel it in Settings → Apple Account → Subscriptions (iPhone) or Google Play → Payments & subscriptions (Android). Use Restore purchases to reconnect it.

If you no longer have the app, see Support.

10. Your rights

Depending on where you live (for example under the GDPR in Europe, the LGPD in Brazil or privacy laws in the United States), you may have the right to access, correct, delete or receive a copy of your data, and to object to or limit its use. Because we don’t know who you are, the quickest way is through the app. For anything else, write to us; we may need information from the app or your store receipt to find your data. We answer requests within 15 days. You can also complain to the Brazilian data protection authority (ANPD) or to the data protection authority where you live.

11. Children

Quorum is meant for a general audience and is not directed at children under 13 (or the minimum age in your country). The app does not ask for names, contact details or location, and we don’t knowingly collect personal information from children.

12. Security

Data travels over encrypted connections (HTTPS). Access to the database is restricted, and votes can only be reached through server functions that return totals.

This website

This applies only to this website, not to the app. The “Become a tester” page (beta.html) can use Microsoft Clarity, the Meta Pixel and Google tags (Google Analytics / Google Ads) to measure which ads bring testers: pages viewed, clicks on the store buttons, the ad campaign that brought you, approximate location, device and browser. These tools set cookies and their providers process the data under their own policies. They load only if you choose “Accept” in the banner; if you choose “Decline”, nothing is loaded. To change your choice, clear this site’s data in your browser. The home page (index.html) can use Microsoft Clarity in the same way, also only after “Accept”. The other pages of this site use no cookies or analytics.

13. Changes

If we change this policy, we will publish the new version on this page with a new effective date.

14. Contact

PEDE FLUX TECNOLOGIA LTDA (CNPJ 69.008.345/0001-98) · lucasmqar777@gmail.com