This Privacy Policy describes how R2Q2 Group ("we," "us," or "our") collects, uses, and protects information when you use Viziphy and other apps in the R2Q2 Group family. By using our apps you agree to the practices described here.
01
Information We Collect
We collect only what is necessary to provide the service.
Anonymous session identifier. When you first open the app, a unique anonymous session is created automatically — no sign-up required. This identifier is used to track your free-tier usage and entitlement.
Email address. Collected only if you choose to create a named account. Used to authenticate you across R2Q2 Group apps (Viziphy, Thumbwave, and future apps in the family) without requiring separate accounts for each.
Content you submit for drafting. The text or idea you type is sent to an AI provider (see Section 3) to generate carousel content. We do not store your draft input after processing is complete.
BYOK API keys. If you choose to provide your own Anthropic or OpenAI API key, it is encrypted at rest using Supabase Vault before storage. The key is only decrypted in memory at request time, is never logged, and is never sent to any party other than the respective AI provider when processing your request.
Daily generation count. We record how many AI generations you make per day to enforce the free-tier limit of three per day. This counter resets at midnight UTC and is not archived.
Draft quality feedback. If you rate a generated draft (thumbs up or down), we log the rating, the app name, the target platform, and your session identifier. No draft content is stored with the feedback record.
02
How We Use Your Information
To generate AI-drafted carousel and thumbnail content on your behalf.
To enforce the free-tier generation limit and apply your subscription tier.
To authenticate your account across apps in the R2Q2 Group family.
To improve AI draft quality using aggregated, anonymised feedback ratings.
We do not sell, rent, or share your personal information with third parties for marketing or advertising purposes.
03
AI Processing and Third-Party Services
Generating content requires sending your draft input to an external AI provider over HTTPS. By using the drafting feature you acknowledge this transmission.
Your data is stored on Supabase-managed infrastructure. Row-Level Security policies ensure that each user can only access their own records — your data is never readable by another user's session. BYOK API keys are encrypted at rest using Supabase Vault; they are not accessible in plaintext, including by us.
All communications between the app and our backend, and between our backend and AI providers, are transmitted over HTTPS.
05
Data Retention
Account data (email, subscription tier) is retained until you request deletion.
Daily usage counts reset automatically and are not archived.
Feedback ratings are retained to improve the service. They are linked only to a session identifier, not to personal content.
BYOK API keys are deleted immediately when you remove them from the app's settings screen, or upon account deletion.
06
Your Rights
You may request deletion of your account and all associated data at any time by contacting us at contact@r2q2.com. BYOK keys can be removed directly within the app without contacting us.
If you are located in the European Economic Area, the United Kingdom, or California, you may have additional rights — including the right to access, rectify, or port your personal data. Contact us to exercise them.
07
Children's Privacy
Our apps are not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.
08
Changes to This Policy
If we make material changes, we will update the effective date at the top of this page. Continued use of the app after a change is posted constitutes your acceptance of the revised policy.