Privacy Policy

This Privacy Policy explains how PixQ Labs ("PixQ," "we," "us," or "our") collects, uses, shares, and protects your personal information when you use the PixQ mobile application and related services (collectively, the "Service"). By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

This Privacy Policy is written to meet the requirements of the Google Play User Data policy, the Google Play Data Safety section, the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), and other applicable data protection laws.

1. Who We Are and How to Contact Us

Data Controller: PixQ Labs
Registered Address: Mumbai, Maharashtra, India
Privacy Point of Contact: supportpixq@gmail.com
General Support: supportpixq@gmail.com
Website: https://pixq.app

You can submit any privacy question, request, or complaint at any time by emailing supportpixq@gmail.com. This address is our designated privacy point of contact and is monitored by a real person. We respond to verified requests within the timeframes required by applicable law (see Section 9).

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, PixQ Labs is the controller of your personal data for the purposes of the GDPR and the UK GDPR.

2. Scope

This Privacy Policy applies to:

• The PixQ mobile application on Android (and, where available, iOS)
• The PixQ website at https://pixq.app
• Any related services, features, content, and customer support we provide

It does not apply to third-party services, websites, or applications that may be linked from within PixQ.

3. Information We Collect

3.1 Information You Provide Directly

• Account information: email address and password (stored as a secure hash, never in plain text)
• Profile information: username, display name, biography, and profile photo
• User content: favorites, collections, download history, and items you save
• Support communications: messages you send us by email or in-app feedback

3.2 Information Collected Automatically

• Device information: model, OS version, language, timezone, screen size, generated device identifier
• App information: app version, build number, crash diagnostics
• Usage data: screens viewed, features used, search queries, session duration
• Network information: IP address, connection type, approximate region from IP
• Log data: request timestamps, endpoint paths, response status codes

3.3 Information Related to Purchases

Transaction metadata only (product ID, purchase date, order ID, subscription status). All payments are processed by Google Play Billing. We never see or store card numbers or bank details.

3.4 Advertising Data

The free version shows ads. Your Android Advertising ID may be collected by our ad provider to serve and measure ads. In the EEA, the UK, and Switzerland, we ask for your consent before showing personalized ads.

3.5 Crash and Diagnostic Data

Crash stack traces, device model, OS version, app version, recent in-app breadcrumbs, and non-personal performance metrics. We filter out data that is not useful for debugging.

3.6 Sensitive Permissions

PixQ does not request or access:

• Precise or background location
• Contacts, calendar, SMS, call logs, or phone state
• Microphone or audio recording
• Your camera or photo library, except the single image you pick as an avatar through the Android system picker
• Accessibility Services, Usage Stats, or Device Admin APIs
• Health, fitness, biometric, or financial data

We request only: Internet, network state, set wallpaper, post notifications (Android 13+), the Android photo picker for avatars, and foreground service (video wallpapers only).

4. How We Use Your Information

• Providing the Service: account, favorites, collections, downloads, settings
• Processing transactions: subscriptions, credits, receipts
• Personalizing your experience: recommendations and home feed
• Showing advertisements: rewarded and interstitial ads in the free version
• Security and fraud prevention
• Customer support
• Improving the Service
• Service communications (not marketing unless you opt in)
• Legal compliance

5. Legal Bases (EEA, UK, Switzerland)

We process your personal data on the following legal bases under the GDPR and UK GDPR:

• Performance of a contract (Art. 6(1)(b)): running the Service and processing purchases
• Consent (Art. 6(1)(a)): personalized advertising and any optional features requiring consent
• Legitimate interests (Art. 6(1)(f)): security, fraud prevention, crash reports, non-personalized analytics
• Legal obligation (Art. 6(1)(c)): tax rules and lawful requests

You have the right to object to processing based on legitimate interests. See Section 9.

6. How We Share Your Information

We do not sell your personal information. We share only with the following service providers, under contract, and only what each needs to do its job:

• Supabase: accounts, profile data, favorites, collections
• Google Play Billing and RevenueCat: purchases and subscription entitlements
• Google AdMob (Google Mobile Ads SDK): advertisements in the free version
• Sentry: crash reports and performance diagnostics

We may also disclose information when required by law, to enforce our Terms, to prevent fraud or abuse, or in connection with a merger, acquisition, or sale of assets. We will notify you before any such transfer.

We do not sell personal information, do not share it with data brokers, and do not allow third parties to use it for their own marketing.

7. International Data Transfers

Your data may be stored and processed in countries other than the one you live in. For transfers out of the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses, adequacy decisions, and supplementary measures such as encryption in transit and at rest. You may request a copy of the safeguards by emailing supportpixq@gmail.com.

8. How Long We Keep Your Data

• Account data: until you delete your account
• Favorites, collections, downloads: until you delete them or your account
• Support messages: up to 3 years after the conversation closes
• Crash reports and diagnostics: up to 90 days
• Security logs: up to 12 months
• Purchase records: 6 to 10 years (tax and accounting law)
• Backups: rolling, overwritten within 30 days

When you delete your account, we erase or irreversibly anonymize your personal data within 30 days, except where a longer retention period is required by law.

9. Your Privacy Rights

9.1 Rights Available to All Users

• Access, correction, deletion, export
• Withdraw consent where we rely on it
• Opt out of marketing communications

9.2 Additional Rights for EEA, UK, and Swiss Users

• Restrict processing
• Object to processing based on legitimate interests
• Data portability
• Lodge a complaint with your local data protection authority

9.3 Additional Rights for California Residents (CCPA/CPRA)

• Right to know, delete, and correct
• Right to opt out of "sale" or "sharing" of personal information. We do not sell your information for money. Using your Android Advertising ID to show personalized ads may be considered "sharing" under California law. You can opt out in-app at Settings > Data & Privacy > Ad Preferences.
• Right to limit use of Sensitive Personal Information (we do not collect any)
• Right of non-discrimination
• Right to appeal: email supportpixq@gmail.com with "Appeal" in the subject

We are not a data broker. We honor the Global Privacy Control (GPC) signal on the PixQ website. We do not knowingly sell or share the personal information of California residents under 16.

9.4 Other Jurisdictions

Residents of Virginia, Colorado, Connecticut, Utah, and other US states with comprehensive privacy laws, as well as residents of Brazil (LGPD), Canada (PIPEDA), Australia, and other jurisdictions, have equivalent rights under their local laws.

9.5 How to Exercise Your Rights

• In the app: Profile > Settings > Data & Privacy, then choose access, export, or delete.
• By email: write to supportpixq@gmail.com with your request and the email address on your account.
• Account deletion without reinstalling the app: visit https://pixq.app/delete-account. The page is public, non-geofenced, and does not require signing in. This is the web deletion URL required by the Google Play User Data policy.

Verification: we confirm access to the email address on your account before acting on a request.

Response time: 30 days for GDPR requests, 45 days for CCPA requests. Extensions up to an additional 30 or 45 days may apply for complex requests.

Fees: none, unless a request is manifestly unfounded, repetitive, or excessive.

Appeals: email supportpixq@gmail.com with "Appeal" in the subject line.

10. Advertising and Consent

The free version shows rewarded ads (optional, you choose to watch them in exchange for credits) and interstitial ads. Subscribers do not see ads.

In the EEA, the UK, and Switzerland, we show a consent form before personalized ads. You can change your choice at any time in Settings > Data & Privacy > Ad Preferences.

We use the Google Mobile Ads SDK (AdMob). Google and other vendors may use cookies, the Android Advertising ID, and similar identifiers to serve ads based on your prior activity in this app and other apps, measure ad performance, cap frequency, and detect ad fraud.

You can reset your Advertising ID at Google Settings > Ads > Reset advertising ID, opt out of Ads Personalization at Google Settings > Ads > Opt out of Ads Personalization, or withdraw app-level consent in Settings > Data & Privacy > Ad Preferences.

Learn more at policies.google.com/technologies/ads and policies.google.com/privacy.

We do not knowingly serve personalized ads to users under 16 in the EEA/UK or under 13 in the United States.

11. Children's Privacy

PixQ is not intended for children.

• United States: you must be at least 13 (COPPA)
• EEA and UK: you must be at least 16, or the minimum age required by the law of your country
• Elsewhere: the minimum age for data-processing consent in your jurisdiction

If you believe a child has provided us with personal information, please contact supportpixq@gmail.com and we will delete the data and the account promptly.

12. Security

• Encryption of data in transit using HTTPS/TLS
• Encryption of sensitive data at rest
• Hashed storage of passwords
• Access controls and least privilege for our team
• Regular review of our security practices
• Isolation of production secrets from source code

No security system is perfect. If we become aware of a security breach affecting your personal data, we will notify you and the relevant authorities as required by law, usually within 72 hours for EEA/UK users.

13. Cookies and Similar Technologies

The PixQ mobile app does not use browser cookies. We use equivalent local-storage technologies on your device to keep you signed in, save preferences, cache wallpapers, store crash diagnostics until they are uploaded, and measure performance. You can clear this at any time by clearing the app's data in your device settings or by uninstalling.

14. Third-Party Links

PixQ may contain links to third-party websites or services, such as our support page or an advertiser's landing page. This Privacy Policy does not apply to those third parties.

15. Automated Decision-Making

We do not make decisions about you that have legal or similarly significant effects based solely on automated processing. Home feed recommendations are based on your in-app activity but do not affect your legal rights or financial obligations.

16. Google Play Data Safety Section

The Data Safety section on our Google Play listing matches this Privacy Policy. In summary:

• Data collected: personal information (email, name), photos (avatar), app activity (interactions, search history), app info and performance (crash logs, diagnostics), device or other IDs (advertising ID), and purchase history
• Data shared: crash data with Sentry; purchase data with Google Play Billing and RevenueCat; advertising data with Google AdMob
• Data is encrypted in transit
• You can request that your data be deleted (see Section 9)

If the Data Safety section and this Privacy Policy ever appear to conflict, this Privacy Policy controls, and we will update the Data Safety section.

17. Changes to This Privacy Policy

When we make material changes we will update the "Last Updated" date, notify you by in-app notice or email at least 14 days before the changes take effect, and ask for your consent where required by law. If you do not agree with an updated Privacy Policy, you may delete your account before it takes effect.

18. Contact Us

Email: supportpixq@gmail.com
Postal address: PixQ Labs, Mumbai, Maharashtra, India
Website: https://pixq.app

If you are in the EEA, the UK, or Switzerland and believe we have not adequately addressed your concerns, you have the right to lodge a complaint with your local data protection authority.