Privacy Policy

Last updated: 2026-09-21

1. Introduction & Scope

This Privacy Policy explains what personal data Qooky (“Qooky,” “we,” “us”) collects when you use the Qooky mobile app, why we collect it, and what rights you have over it. It applies to everyone who uses Qooky, wherever you are in the world, including residents of the United Kingdom (UK GDPR), California and other U.S. states (CCPA/CPRA and equivalent state laws), New Zealand (Privacy Act 2020), Canada (PIPEDA), and Australia (Privacy Act 1988).

Qooky is a personal reminder app that helps you avoid leaving things behind when you leave Home or Work, using your location to detect those moments automatically.

2. Who We Are

The data controller responsible for your personal data is:
Indomitable Lion LLC
3833 Powerline Rd Suite 201
Fort Lauderdale, FL 33309
United States
Contact: hello@qookyapp.com

3. Categories of Data We Collect

We collect the following categories of data, and nothing beyond what is listed here:

  • Account data: the email address and password you sign up with (handled by Firebase Authentication — we never see or store your password ourselves), and the unique account ID Firebase assigns you.
  • Home Gateway data: the name (SSID) of the Wi-Fi network you designate as your Home network, read from your device once, at setup, when you tap “Set current Wi-Fi network as Home Gateway” (we do not collect the SSIDs of any other networks your device connects to) — plus the coordinates and radius of your Home location, and — with your separate, explicit permission — your device’s background location, used only to detect when you enter or leave that specific area. See Section 6 for full detail on how this works.
  • Work Gateway location data: the coordinates and radius of the Work location you search for and confirm, and — with your separate, explicit permission — your device’s background location, used only to detect when you enter or leave that specific area. See Section 6 for full detail on how this works.
  • Checklist content: the items on your Home and Work checklists, including any custom items or notes you type in yourself.
  • Activity data: your streak count, how many times you’ve cleared or missed a checklist, the calibration answers you gave during onboarding, and the number of items you’ve been reminded about each week.
  • Subscription data: whether you have an active subscription or trial, which plan, and when it expires — provided to us by our payment partner, RevenueCat. We never receive or store your card number or other payment details; see Section 8.
  • Analytics data: product usage events (for example, which features you tap on) sent to our analytics provider, Mixpanel, which may include a device identifier assigned by Mixpanel’s SDK. We do not send the text of your checklist items or notes to Mixpanel — only event names and counts (for example, that a locked feature card was tapped, not what checklist item you typed).

4. How We Use Your Data

  • To create and secure your account, and let you sign back in.
  • To detect when you’re leaving Home or Work and show you the right checklist at the right time — the entire purpose of the app.
  • To save and sync your checklists, custom items, and notes across sessions.
  • To track your streak and show you how many items you’ve been reminded about.
  • To process your subscription and know which features to unlock.
  • To understand which features are used and improve the app over time.
  • To respond to support requests.

5. Legal Bases for Processing (UK GDPR Article 6)

CategoryLegal basis
Account dataPerformance of a contract (Art. 6(1)(b)) — we can’t provide the service without it
Home Gateway (Wi-Fi SSID)Performance of a contract (Art. 6(1)(b)) — used once, at setup, to identify your Home network
Home Gateway location, incl. backgroundConsent (Art. 6(1)(a)) — you grant this separately via your device’s location permission prompt, and can withdraw it at any time in your device settings
Work Gateway location, incl. backgroundConsent (Art. 6(1)(a)) — you grant this separately via your device’s location permission prompt, and can withdraw it at any time in your device settings
Checklist & activity dataPerformance of a contract (Art. 6(1)(b))
Subscription dataPerformance of a contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) for billing records
Analytics dataLegitimate interest (Art. 6(1)(f)) — understanding and improving the product, balanced against your privacy; you can request that we stop processing this at any time (Section 10)

6. Background Location

Qooky uses your location in the background to remind you about items when you leave Home or Work. That is the exact permission text your device showed you when you enabled it, and it is exactly what we do — nothing more.

Here is precisely how background location works in Qooky, and what it doesn’t do:

  • We only ever process two moments per zone: the instant you enter the Home or Work area you set up, and the instant you leave it. Your device tells the operating system to watch for these geofence transitions; Qooky is not notified of, and does not read, your location at any other time.
  • We do not store a continuous location history. There is no log, trail, or timeline of everywhere you’ve been — only the Home and Work coordinates and radius you chose during setup, which stay fixed until you change them.
  • Those coordinates are stored in your own private Firestore document and are read directly by the background task running on your device. They never leave your device and your own Firestore record — they are never sent to Mixpanel, any advertising network, or any other third party.
  • We never sell, rent, or share your location data with advertisers or data brokers, for any purpose, ever.
  • Your Home network’s Wi-Fi name (SSID) is used only once, at setup, to identify which location is Home — it plays no part in detecting when you leave. Disconnecting from Wi-Fi, at Home or anywhere else, never triggers anything.
  • You can revoke background location access at any time in your device’s Settings app. If you do, Home- and Work-leaving reminders will stop working until you grant it again, but every other part of Qooky continues to work normally.

7. Retention Periods

  • Account, Gateway, and checklist data: retained for as long as your account is active, and deleted per Section 11 once you request deletion.
  • Historical activity records (which items you cleared or missed over time): kept for up to 24 months on a rolling basis to power your streak and weekly summary, then automatically aged out.
  • Subscription/billing records: retained for as long as required by applicable tax and accounting law (typically 6–7 years), even after account deletion — see Section 11.
  • Analytics events: retained by Mixpanel per their own retention settings; see their policy linked in Section 8.

8. Third-Party Sub-Processors

We share the minimum data necessary with the following service providers, each acting as a data processor on our behalf under their own data processing agreement:

ProviderWhat they processTheir policy
Google Firebase (Authentication & Cloud Firestore)Account credentials, all account/Gateway/checklist/activity datafirebase.google.com/support/privacy
RevenueCat, Inc.Subscription/entitlement status, your account ID (no payment card data)revenuecat.com/privacy
Mixpanel, Inc.Product usage events, device identifiermixpanel.com/legal/privacy-policy

Your subscription payment itself is handled entirely by the Apple App Store or Google Play — we never receive your card number, billing address, or other payment instrument details.

9. International Data Transfers

Our sub-processors may process data outside your country, including in the United States. Where we transfer personal data out of the United Kingdom, we rely on the UK International Data Transfer Agreement (IDTA) or other UK-approved safeguards as the legal mechanism for that transfer.

10. Your Rights

If you’re in the UK (UK GDPR)

You have the right to access, correct, delete, restrict, or port your data, to object to processing based on legitimate interest, and to withdraw consent at any time. To exercise any of these, contact us at hello@qookyapp.com. You also have the right to lodge a complaint with your local data protection authority.

If you’re in California or another U.S. state (CCPA/CPRA)

We do not sell or share your personal information, and never have. “Share” here has the meaning given to it under the CCPA (cross-context behavioral advertising) — we do not do this either. You have the right to know what personal information we hold about you, to request its deletion, and to non-discrimination for exercising these rights. We honor the Global Privacy Control (GPC) signal and treat it as a valid opt-out request; because we don’t sell or share data in the first place, honoring it changes nothing about how your data is processed. We do not currently respond to browser Do Not Track signals for the same reason — Qooky is a mobile app, not a tracking website.

If you’re in Canada (PIPEDA)

You have the right to access your personal information, know how it’s been used and disclosed, and challenge its accuracy. Contact us at hello@qookyapp.com to exercise these rights.

If you’re in Australia (Privacy Act 1988)

You have the right to access and correct your personal information under the Australian Privacy Principles (APPs). Contact us at hello@qookyapp.com to exercise these rights, or to make a complaint, which we will handle in line with the APPs.

11. Account Deletion

You have the right to delete your account and the personal data associated with it at any time.

The primary way to delete your account is in the app: go to Settings & Gateways → Danger Zone → Delete Account, confirm your password, and your account and data are deleted immediately. If you’re unable to access the app, you can instead email hello@qookyapp.com with the subject line “Account Deletion Request” from the email address associated with your account.

We will complete your deletion request within 30 days. Deleting your account permanently removes:

  • Your email address and account credentials
  • Your Home Gateway data (Wi-Fi network name, plus location coordinates and radius) and Work Gateway location (coordinates and radius)
  • Your checklists, custom items, and notes
  • Your calibration answers, streak, and activity history

Your subscription and payment records are retained by the Apple App Store, Google Play, and our payments processor RevenueCat, independent of your Qooky account — deleting your Qooky account does not delete those records. They retain this data for as long as required by applicable tax, accounting, and consumer-protection law. Qooky itself does not keep a separate copy of your billing history — once your account is deleted, no subscription or payment data remains in our own systems.

12. Children’s Privacy

Qooky is not directed at children under 16, and we do not knowingly collect personal data from anyone under that age. If you believe a child has provided us with personal data, contact us at hello@qookyapp.com and we will delete it.

13. Data Security & Breach Notification

We rely on our providers’ security infrastructure (Firebase, RevenueCat, Mixpanel) and follow standard practices to protect your data, including access controls that ensure only you can read or write your own account data. No system is completely secure. If a breach occurs that poses a risk to your rights and freedoms, we will notify affected users and the relevant supervisory authority without undue delay, and in any case within the timeframes required by applicable law (72 hours under UK GDPR, where applicable).

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we’ll notify you in the app or by email before they take effect. The date at the top of this page always reflects the most recent version.

15. Contact Us

Questions about this policy or your data? Email us at hello@qookyapp.com, or write to us at 3833 Powerline Rd Suite 201, Fort Lauderdale, FL 33309, United States.