Welcome to QwikBroad. This Privacy Policy explains how we collect, use, and protect information when you use our platform, including our website, API, mobile app, and embeddable widget. By using QwikBroad, you agree to the practices described here.
1. Information We Collect
Account Information
When you register, we collect your email address and a hashed password (or an OAuth token if you sign in with Google). Optionally, you may provide a display name, username, bio, and profile photo. This information is used to identify your account and authenticate you.
Channel and Message Content
We store the channels you create, messages you send, and any attachments or images you upload. This content is necessary to operate the notification service.
Uploaded Files
Images and files you upload (for channel icons, profile photos, or message attachments) are stored in Cloudflare R2 object storage. Images may be resized and compressed before storage. We do not analyze image contents beyond what is required for delivery.
Device Information (Mobile App)
When you use the mobile app and enable push notifications, we collect an FCM (Firebase Cloud Messaging) device token. This token is linked to your account solely to route notifications to your device. We do not collect your device model, operating system version, IMEI, advertising ID, or any other device identifiers.
App Permissions
The QwikBroad mobile app requests only the following permissions:
- POST_NOTIFICATIONS — required to deliver push notifications from channels you subscribe to. You may deny or revoke this permission at any time in your device settings; the app will continue to function without it, but you will not receive push notifications.
- INTERNET — required to communicate with the QwikBroad server.
We do not request access to your camera, microphone, contacts, location, call logs, SMS, or any other sensitive device resource.
Usage Data
We may log standard server-side request data (IP address, HTTP method, path, timestamp) for debugging and security purposes. These logs are retained for a limited time and are not shared with third parties.
2. How We Use Your Information
- To provide and operate the QwikBroad service.
- To authenticate your identity and protect your account.
- To deliver notifications to your devices and the embedded widget.
- To allow channel owners to send messages to their subscribers.
- To diagnose errors and maintain system security.
We do not sell your personal information to third parties. We do not use your data for advertising or behavioural profiling.
3. Data Sharing
We share data only in the following circumstances:
- Cloudflare R2 — uploaded files are stored using Cloudflare's object storage infrastructure.
- Firebase (Google) — FCM device tokens are transmitted to Google Firebase solely to deliver push notifications to your device.
- Google OAuth — if you choose to sign in with Google, your Google profile data (name, email, Google ID) is shared with us per Google's OAuth flow.
- Legal requirements — we may disclose data if required by applicable law, court order, or to protect the rights and safety of our users.
We do not share your data with advertisers, analytics providers, or data brokers.
4. Data Retention
We retain your account data for as long as your account is active. When an account is deleted, your profile, owned channels, messages, subscriptions, and FCM tokens are permanently removed from our systems within 30 days. Uploaded files stored in Cloudflare R2 are deleted when the associated message, channel, or account is removed.
5. Account Deletion
You have the right to delete your account and all associated data at any time. To request account deletion:
- In-app / Web: Go to your Profile settings and select "Delete Account".
- By email: Send a deletion request to [email protected] from the email address associated with your account.
Upon deletion, all personal data — including your email, profile, channels, messages, subscriptions, and device tokens — will be permanently erased. This action cannot be undone.
6. Your Rights
You have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you.
- Correction — update or correct inaccurate data via your profile settings or by contacting us.
- Deletion — request that we delete your account and all associated data (see Section 5).
- Portability — request your data in a machine-readable format.
- Objection — object to the processing of your data in certain circumstances.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
7. Security
Passwords are stored as bcrypt hashes and are never stored in plain text. Sessions are managed with signed JWTs. All API communication takes place over HTTPS. Uploaded files are served via our infrastructure and are not directly accessible by the public unless explicitly made so.
While we take reasonable precautions, no system is completely secure. We encourage you to use a strong, unique password for your account.
8. Cookies and Local Storage
We use a single HTTPOnly session cookie to maintain your login state on the web dashboard. The embeddable widget does not set cookies. We do not use tracking, analytics, or advertising cookies.
9. Third-Party Services
QwikBroad relies on the following third-party services:
- Cloudflare R2 — file storage (Cloudflare Privacy Policy)
- Google Firebase (FCM) — push notification delivery (Google Privacy Policy)
- Google OAuth — optional sign-in method (Google Privacy Policy)
10. Children's Privacy
QwikBroad is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us at [email protected] and we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of QwikBroad after changes constitutes acceptance of the updated policy.
12. Contact
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at [email protected].