Quiky Privacy Policy

Effective Date: January 6, 2026
Last Updated: January 2026

1. Introduction

Quiky ("we," "us," "our," or "the Platform") is committed to protecting your privacy and ensuring transparency in how we collect, use, process, and safeguard your personal information. This Privacy Policy explains our data practices in plain language and complies with World's Data Protection Act, 2012 (Act 843), the EU General Data Protection Regulation (GDPR) for European users, and applicable international data protection standards.​

By accessing or using Quiky, you agree to the data practices described in this Privacy Policy. If you do not agree with our practices, you may opt out or delete your account in accordance with Section 7 (Your Data Subject Rights).

This Privacy Policy applies to all users, including those in World, the European Union, the United States, and other jurisdictions. Where local laws impose stricter requirements, those requirements take precedence.

2. Information We Collect

2.1 Information You Provide Directly

Account Registration
When you create a Quiky account, we collect:

• Full name

• Email address

• Phone number (optional)

• Date of birth (for age verification and age-appropriate content)

• Username and password

• Profile picture or avatar

• Bio/description

• Geographic location (country/region)

• Device type and operating system

Identity Verification
To comply with World's Data Protection Act and GDPR child safety requirements, we may collect:

• Government-issued photo identification

• Age verification data (via third-party verification services)

• Proof of residence​

Content You Create

• Text posts, messages, comments, and replies

• Images, videos, and multimedia files

• Stream/broadcast data (if using live features)

• Metadata associated with your content (timestamps, editing history)

Communication Data

• Direct messages and chats

• Support inquiries and correspondence

• Feedback, surveys, and complaints

Transactional Information

• Payment method information (processed securely; we do not store full payment card details)

• Subscription tier and billing history

• Purchase history for premium features

2.2 Information Collected Automatically

Device and Browser Data

• IP address

• Device identifier (e.g., IDFA, Android Advertising ID)

• Device type, model, and operating system

• Browser type and version

• Internet Service Provider (ISP)

Usage Data

• Pages or features accessed

• Time spent on platform or features

• Click patterns and navigation behavior

• Search queries

• Content viewed, liked, or saved

• Interactions with other users (follows, comments, shares)

• Error logs and crash reports

• Referral source (how you found Quiky)

Cookies and Tracking Technologies (see Section 13)

• Session cookies (temporary)

• Persistent cookies (longer-term)

• Web beacons and pixels

• Local storage and similar technologies

Location Data (see Section 12)

• Approximate location (country, city level)

• Precise GPS location (only with your explicit consent on mobile devices)

• Location inferred from IP address

2.3 Information from Third Parties

Social Media Integration

• If you link a social media account (optional), we receive your name, email, profile picture, and public profile information from that platform.

Analytics and Service Providers

• We use analytics services (Google Analytics, Mixpanel, etc.) that collect data about your activity.

• Payment processors provide transaction summaries.

• Identity verification services provide confirmation of age/identity.

Law Enforcement and Government Requests

• We may receive information from law enforcement or government agencies pursuant to legal requests, subpoenas, or court orders.​

Other Users

• Other users may mention, tag, or post content about you (we do not prevent this, but you can report it if it violates our Community Guidelines).

3. Legal Basis and Lawfulness of Processing

Under World's Data Protection Act, Section 20, we must have a lawful basis to process your personal information. Our processing is lawful on the following bases:​

Consent: Where your prior consent is required by law (e.g., for direct marketing, processing special personal data, or location tracking), we will obtain explicit, affirmative consent before processing. Consent is voluntary, specific, informed, and can be withdrawn at any time by contacting us (see Section 18).​

4. How We Use Your Information

We use collected information for the following purposes:

Service Delivery and Improvement

• Providing, maintaining, and enhancing Quiky's features and functionality

• Personalizing your experience (feed recommendations, content suggestions)

• Diagnosing technical issues and optimizing platform performance

• Conducting user research and analytics​

Safety and Security

• Detecting and preventing fraud, abuse, and misuse

• Enforcing our Terms and Conditions and Community Guidelines

• Protecting against malicious, deceptive, or illegal activity

• Investigating breaches and responding to security incidents​

Legal Compliance

• Complying with World's Data Protection Act, Cybersecurity Act, and other local laws​

• Responding to lawful requests from government authorities and law enforcement

• Maintaining records for regulatory and legal purposes​

Communications

• Sending service updates, announcements, and policy changes

• Responding to your support requests

• Sending marketing communications (with your consent)

• Notifying you of changes to your account or security concerns

Location-Based Services (if opted in)

• Displaying location-relevant content and communities

• Connecting you with nearby users (if feature is enabled)

• Measuring audience and engagement in specific regions

5. Data Retention

Quiky retains personal information only for as long as necessary to achieve the purpose for which it was collected.​

Data Deletion:
Upon your request or account deletion, we will delete or de-identify your personal information within 30 days, subject to:

• Legal holds or litigation requirements

• Tax and accounting obligations (7 years under World law)

• Regulatory compliance requirements

• Ongoing investigations​

6. Sharing Your Information

Public Content:
Content you choose to post publicly (posts, comments, profile information) is visible to all Quiky users and may be indexed by search engines, shared on social media, or accessed by third-party research tools.

Service Providers:
We share information with third-party service providers who perform functions on our behalf:​

• Cloud hosting providers (Amazon AWS, Google Cloud)

• Analytics providers (Google Analytics, Mixpanel, Amplitude)

• Payment processors (Stripe, PayPal)

• Customer support platforms (Zendesk, Intercom)

• Email service providers (SendGrid, Mailgun)

• Identity verification services (IDology, Jumio)

• Security and fraud prevention services

Data Processing Agreements:
All service providers are bound by written Data Processing Agreements requiring them to:

• Process data only on our instruction

• Implement appropriate security measures

• Comply with World's Data Protection Act and GDPR

• Not disclose data to unauthorized parties​

Legal Requirements and Law Enforcement:
We may disclose information when required by:

• Subpoenas, court orders, or warrants

• Law enforcement agencies (with proper legal process)

• Government regulatory bodies

• To protect the safety, rights, or property of Quiky, users, or the public​

Where legally permissible, we will notify you before disclosing data to government authorities, unless prohibited by law.

Business Transfers:
If Quiky is acquired, merged, or sold, your information may be transferred as part of that transaction. We will notify you of such changes and any material changes to our privacy practices.

Aggregate and De-Identified Information:
We may share aggregated, anonymized, or de-identified information (e.g., "users in World increased 15% this quarter") with partners, researchers, and the public without restriction, as it does not identify you.

No Sale of Personal Data:
Quiky does not sell or rent your personal information to third parties for marketing purposes. This includes not selling to data brokers or advertisers.​

7. Your Data Subject Rights

World's Data Protection Act grants you rights over your personal information. You may exercise these rights by contacting us (see Section 18).​

7.1 Right of Access (Section 32–35, DPA)

You have the right to request and obtain:

• A copy of all personal information we hold about you

• The purposes for processing

• The categories of recipients

• The source of the information (where available)

• Information about the logic/rationale behind automated decisions that significantly affect you

How to Request:
Email [email protected] with "DATA ACCESS REQUEST" in the subject line. Include your username and email address. We will respond within 40 days of receipt.

Format:
Data will be provided in a portable, machine-readable format (CSV, JSON, or PDF) upon request.

7.2 Right of Rectification / Correction (Section 33, DPA)

You have the right to request correction or updating of inaccurate, incomplete, or outdated information we hold about you.

How to Request:
You can update most information directly in your account settings. For data we hold but you cannot access online, email [email protected] with the corrections you seek.

Our Obligation:
We will correct the information and notify any third parties to whom we previously disclosed the inaccurate data (where feasible).​

7.3 Right to Erasure / Deletion (Section 33, DPA)

You have the right to request deletion of your personal information in the following circumstances:

• The data is no longer necessary for the purpose collected

• You withdraw consent and no other legal basis applies

• You object to processing and we have no overriding legitimate interest

• The data was unlawfully processed

• Deletion is required to comply with legal obligations

Limitations:
We may retain information where:

• Retention is required by law (tax, audit, regulatory compliance)

• Legal proceedings or disputes are ongoing

• You have disputes with other users or the platform

• You have an outstanding payment obligation

How to Request:
Email [email protected] with "DELETION REQUEST" in the subject line.

7.4 Right to Object / Restrict Processing (Section 39–40, DPA)

You have the right to:

• Object to direct marketing: Require that your data not be used for promotional communications. Direct marketing to you requires prior written consent. You can withdraw consent at any time via an unsubscribe link in emails or by contacting us.

• Object to processing for specified purposes: Require that we cease processing your data for purposes causing you unwarranted damage or distress.

• Restrict processing: Request that we limit processing to storage only while you contest its lawfulness or request erasure.

Timeline:
We will respond within 21 days of receipt of your objection notice.​

7.5 Right to Data Portability (GDPR Art. 20; World DPA)

You have the right to request and receive a copy of your personal information in a structured, commonly used, machine-readable format (e.g., CSV, JSON) that you can transfer to another service provider.

How to Request:
Email [email protected] with "DATA PORTABILITY REQUEST."

Timeline:
We will provide your data within 30 days of verified request.

7.6 Right Related to Automated Decision-Making (Section 41, DPA)

If we make decisions about you based solely on automated processing (e.g., algorithmic content filtering, account suspension), you have the right to:

• Receive notice that an automated decision has been made

• Request human review of the decision

• Obtain an explanation of the logic/rationale

We do not currently use automated decisions that significantly affect your rights, but if we do in future, you will have these protections.

7.7 Right to Withdraw Consent

If we are processing your information based on consent (e.g., for marketing, location tracking, or sensitive data), you may withdraw that consent at any time by contacting [email protected]. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

7.8 Right to Lodge a Complaint

If you believe we have violated your data protection rights, you have the right to lodge a complaint with the World Data Protection Commission:

You also have the right to pursue legal remedies (compensation) if you suffer damage or distress due to our breach.​

8. International Data Transfers

Quiky operates in multiple countries. Your data may be transferred to, stored in, or processed in countries outside World or your country of residence. Where data is transferred across borders:

For World Data Subjects:​

• We ensure that data transferred internationally complies with the data protection laws of the jurisdiction from which data originates.

• We use Standard Contractual Clauses or other approved mechanisms for international transfers.

• We do not transfer data to jurisdictions with inadequate protection without appropriate safeguards.

For EU Data Subjects (GDPR):​

• We only transfer data to countries with an EU adequacy decision, or use Standard Contractual Clauses, Binding Corporate Rules, or other lawful mechanisms.

• You may request details of our transfer mechanisms by contacting [email protected].

Server Locations:
Quiky's primary servers are located in the United States (AWS). Backups are maintained in Europe (AWS Frankfurt) for redundancy and compliance. Your data may be accessed from any of these locations.

9. Children's Privacy

Quiky is not intentionally directed at children under 13. In World, users under 13 cannot create accounts. Users aged 13–18 are permitted, subject to parental/guardian consent.

For Users Under 18:​

• Parents/guardians must review and consent to this Privacy Policy before a child uses Quiky.

• We do not knowingly collect information from children under 13 without verifiable parental consent.

• We restrict targeted advertising to users under 18.

• We limit data processing of minors to what is necessary for service provision.

If We Learn a Child Under 13 Has Registered:
We will:

1. Verify parental/guardian consent within 30 days

2. If consent is not obtained, delete the child's account and all associated data

Report Child Safety Concerns:
If you discover a child's safety is at risk on Quiky, contact [email protected] immediately.

10. Data Security

Quiky implements industry-standard technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction.​

Security Measures Include:

• End-to-end encryption for direct messages

• TLS/SSL encryption for data in transit

• AES-256 encryption for data at rest

• Access controls and role-based permissions (employees access only data necessary for their role)

• Multi-factor authentication (MFA) for admin accounts

• Regular security audits and penetration testing

• Secure software development practices (SSDLC)

• Incident response plan and breach notification procedures

Your Responsibility:
You are responsible for maintaining the confidentiality of your password and account credentials. Do not share your password with others. Notify us immediately if you suspect unauthorized access to your account.

Limitations:
No method of transmission over the internet or electronic storage is 100% secure. While we implement strong protections, we cannot guarantee absolute security. You use Quiky at your own risk.

11. Cookies and Tracking Technologies

Quiky uses cookies and similar technologies to enhance your experience, measure engagement, and deliver personalized content.

Types of Cookies:

Third-Party Cookies:
We use cookies from:

• Google Analytics (analytics)

• Facebook Pixel (conversion tracking, optional)

• Intercom (customer support)

Your Cookie Choices:

• Browser Settings: You can disable cookies in your browser settings, though this may limit functionality.

• Quiky Settings: Visit Settings > Privacy & Data to manage cookie preferences.

• Opt-Out Links: Google Analytics opt-out available at https://tools.google.com/dlpage/gaoptout.

12. Location Data

We collect location information to:

• Display location-relevant content and communities

• Connect you with nearby users (if enabled)

• Measure geographic audience and regional trends

• Enhance safety and emergency responses

Levels of Location Precision:

• Approximate (country/city): Inferred from IP address, used for content recommendations

• Precise (GPS): Collected only on mobile devices with your explicit opt-in via permission prompt

Opting Out:
You can disable location sharing at any time via:

• Mobile device settings (iOS Privacy > Location Services; Android Privacy > Location)

• Quiky Settings > Location Sharing

Even if you disable sharing, we may still infer approximate location from IP address for service optimization.

13. Marketing and Communications

Email Marketing:
We may send promotional emails, updates, and newsletters if you have opted in or consented. This requires prior written consent under World law (Section 40, DPA).​

• Unsubscribe: Every marketing email includes an unsubscribe link. Click it to opt out immediately.

• Preference Center: Visit Settings > Communications to manage email preferences.

Push Notifications:
If you enable push notifications, we may send service updates, messages, and promotional notifications. You can disable notifications in app settings or device settings.

SMS/Text Messages:
We will not send SMS marketing without your prior explicit consent. You can opt out by replying "STOP" to any message.

14. Breach Notification

In the event of a data breach (unauthorized access or acquisition of your personal information), we will:

1. Notify the World Data Protection Commission as soon as reasonably practicable

2. Notify affected users via email or prominent in-app notification within 48 hours of discovery (or as required by law)​

3. Provide information to help you protect yourself (e.g., steps to take, monitoring recommendations)

4. Conduct an investigation to determine the scope and cause

Breach Notification Content:

• What data was affected

• How many users were affected

• Likely consequences

• Steps we are taking to address the breach

• Contact information for questions

We will delay notification only if law enforcement or the Data Protection Commission requests delay to avoid impeding an investigation.

15. Your Rights Under World's Data Protection Act

This Privacy Policy specifically implements World's Data Protection Act, 2012 (Act 843). Key protections include:​

Data Controller Registration:
Quiky is registered with the World Data Protection Commission as a data controller. Our registration number is [INSERT REGISTRATION NUMBER].

Data Subject Participation:
You have the right to participate in our data protection practices through:

• Exercising the rights outlined in Section 7

• Providing feedback on our privacy practices

• Requesting a Data Protection Impact Assessment (DPIA) if you believe our processing poses high risk

• Filing complaints with the Data Protection Commission

Data Processor Accountability:
Where we engage third parties (data processors) to process your information, we ensure they:

• Process data only on our instruction

• Implement appropriate security measures

• Do not disclose data to third parties without authorization

• Comply with World's Data Protection Act​

16. Compliance and Accountability

Privacy by Design:
Quiky implements privacy protections at every stage of product development, not as an afterthought.​

Data Protection Impact Assessment:
We conduct Data Protection Impact Assessments (DPIAs) for high-risk processing activities (e.g., automated decision-making, large-scale collection of sensitive data) to identify and mitigate privacy risks.

Annual Compliance Review:
We conduct annual reviews of our privacy practices and documentation to ensure ongoing compliance with World's Data Protection Act and international standards.

Data Retention Policy:
We maintain a formal Data Retention Policy that governs how long we keep different categories of information. A summary is provided in Section 5.

Employee Training:
All staff who handle personal information receive annual training on data protection rights, obligations, and security.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our practices. We will:

1. Notify you of significant changes via email or prominent in-app notice

2. Post the updated policy on our website with a new "Last Updated" date

3. Obtain your consent for material changes that increase your data processing

Continued Use = Acceptance:
If you continue using Quiky after updates take effect, you are accepting the revised Privacy Policy. If you disagree with changes, you may delete your account.

18. Data Protection Authority and Contact Information

Questions or Concerns:
If you have questions about this Privacy Policy or our data practices, contact:

Quiky Privacy Team
Email: [email protected]

Response Time:
We respond to data subject requests (access, deletion, portability, etc.) within 40 days of receipt, as required by World's Data Protection Act.​

Final Note

Your privacy is central to Quiky's mission. We are committed to transparency, accountability, and compliance with World's Data Protection Act and international standards. If you have concerns, we encourage you to reach out—your feedback helps us improve.

Thank you for trusting Quiky with your information.