Privacy Policy

Qi Haven  ·  Last updated: August 22, 2026

1. Overview

This Privacy Policy explains how Qi Haven ("we", "us") collects, uses, and protects your information when you use our app.

2. Information We Collect

Account information: your email address and authentication data when you register.

Content you submit: photos (such as tongue photos) and self-assessment answers you choose to provide.

Technical data: device and browser information, and app preferences stored on your device.

Payment data: handled directly by our payment provider (Paddle); we never see or store your full card number.

3. How We Use Information

To provide the Service (generate your assessment results, save your progress, manage your subscription).

To communicate with you about your account (for example, subscription and trial reminders).

To maintain, secure, and improve the Service.

Under GDPR, our legal bases are: performance of the contract (providing the Service), legitimate interests (security and improvement), and consent where required.

4. AI Processing of Your Photos

When you use the tongue observation tool, your photo is sent securely to a third-party AI model provider to generate your result, and is processed only for that purpose. We do not use your photos to train AI models or for advertising.

5. Sharing

We share personal data only with service providers that help us operate the Service (hosting, authentication, payment, AI analysis), and only as needed to provide it.

We do not sell your personal data, and we do not share it for third-party advertising.

6. Cookies & Local Storage

We use device-level storage (local storage) to keep you logged in and remember your preferences. No third-party advertising cookies are used.

7. Data Retention

We keep your data while your account is active or as long as needed to provide the Service and comply with law. You may request deletion at any time.

8. Your Rights

If you are in the EU/EEA or UK (GDPR): you may request access, correction, deletion, restriction, or portability of your data, object to certain processing, withdraw consent, and lodge a complaint with your data-protection authority.

If you are in California (CCPA/CPRA): you may request disclosure of the categories of data collected, request deletion, and are not discriminated against for exercising these rights.

To exercise any right, contact us at support@qihaven.com. We respond within 30 days.

9. Children

The Service is not directed at children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us data, contact us and we will delete it.

10. International Transfers

Your data may be processed in countries other than your own. Where required, we rely on appropriate safeguards such as standard contractual clauses.

11. Security

We use reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure.

12. Changes & Contact

We may update this policy; the current version is always available in the app.

Questions: support@qihaven.com