Privacy Policy
Effective date: August 10, 2025
Quantapus (“we”, “us”, “our”) operates https://quantapus.com. This Privacy Policy explains what we collect, why we collect it, how it’s used, and the choices you have. We build on modern, privacy-respecting services: the app is hosted on Vercel and data is stored in Supabase. Authentication is via Google Sign-In (OAuth). We also use Google Analytics, Microsoft Clarity, and Vercel Analytics / Speed Insights to understand product usage and performance.
1. Data We Collect
- Account & Auth — When you sign in with Google, we receive your basic profile info (name and email). We use this to identify your account. We do not sell or rent this data.
- Progress Data — We store problem completion state and simple progress metrics (e.g., streak counts) tied to your account so you can track your learning over time.
- Usage & Performance — Analytics tools (Google Analytics, Microsoft Clarity, Vercel Analytics, Vercel Speed Insights) collect pseudonymous data such as page views, navigation events, device/browser info, approximate location derived from IP, referrers, Web Vitals (LCP, FID/INP, CLS, etc.), and session replays/heatmaps (for Clarity). These help us debug UX and improve reliability.
- Technical Logs — Our hosts and edge network may keep transient logs (e.g., IP address, user-agent, request URLs) for security and debugging. We do not attempt to associate these logs to your learning data except to mitigate abuse or troubleshoot issues.
2. How We Use Data
- Authenticate you and keep your session active (Google OAuth via Supabase Auth).
- Persist your completed problems, streaks, and related learning state in Supabase.
- Measure product usage and performance (Google Analytics, Vercel Analytics, Vercel Speed Insights).
- Improve UX via anonymized session analysis (Microsoft Clarity) and Web Vitals diagnostics (Speed Insights).
- Maintain security, prevent abuse, and debug issues.
3. Legal Bases
We rely on: (a) consent for analytics/telemetry and sign-in; (b) contract/legitimate interests to provide the Service (store progress, maintain security, fix bugs). You can withdraw consent for analytics by using content blockers or disabling cookies; you can withdraw sign-in consent by logging out or deleting your account.
4. Cookies & Analytics
We use cookies and similar tech for authentication and analytics:
- Google Analytics — usage metrics and events. Privacy
- Microsoft Clarity — anonymized session replays/heatmaps to improve UX. Terms
- Vercel Analytics & Speed Insights — Web Vitals, performance timings, and aggregated traffic metrics collected on our Vercel deployment. Learn more
5. Where Your Data Lives
- Hosting — The app runs on Vercel.
- Database & Auth — Supabase stores your progress (e.g., completed problems, streaks) and manages Google OAuth.
- Analytics — Google Analytics, Microsoft Clarity, and Vercel Analytics/Speed Insights collect pseudonymous usage/performance data.
6. Data Sharing
We do not sell your personal data. We share data only with the processors listed above to run the Service (hosting, database, auth, analytics). Access is role-restricted and logged where supported.
7. Retention
Account and progress data remain until you delete your account or request deletion. Technical logs and analytics are retained according to each provider’s policies. If you want us to remove your account and associated records, see “Your Rights” below.
8. International Transfers
Our providers may process data in multiple regions (including the U.S.). Where applicable, transfers rely on safeguards like Standard Contractual Clauses or equivalent mechanisms maintained by our providers.
9. Security
- Transport security (HTTPS) and modern TLS.
- Provider-level controls from Vercel and Supabase (isolation, access controls, managed patches).
- Least-privilege access to data and operational logs for maintenance and support.
10. Your Rights
Depending on your location, you may have rights to access, correct, export, object to, limit, or delete your data. You can manage most settings in your account page or contact us for specific requests. Deleting your account removes your progress data from Supabase.
Manage your account at https://quantapus.com/account.
11. Open Source & Transparency
Quantapus is open source. You can review our code and file issues here: GitHub Repository.
12. Changes to This Policy
We may update this policy as we ship new features or adopt new providers. We’ll update the “Effective date” at the top and, when changes are material, we’ll provide an in-app notice.
13. Contact
This page is for transparency; it is not legal advice. If you have questions about how your data is handled, please reach out.