AnswAIr Privacy Policy
AnswAIr is in development and testing. This policy describes what the app does today and will be reviewed before the public launch.
1. Who is responsible
Enrique Sureda (trading as Quimar Digital) is the controller of your data in AnswAIr. You can write to admin@quimardigital.com about any privacy matter.
2. What data we process
- Sign-in with Apple, Google, Facebook or TikTok. We keep the identifier that network gives us to recognise you. If the network sends us your name, email or photo, we delete them on receipt. With TikTok we keep your TikTok @, because it is the name shown in the app.
- Alias. If you sign in with Apple, Google or Facebook, you choose a unique alias that is shown in the app.
- Instagram (optional). If you link your Instagram account, you send a direct message to @answair.app. From that message we use your Instagram identifier for this app, your @ and the linking code. The code expires after 15 minutes and we only keep a hashed version of it. We keep the message identifier so we do not process it twice, but we do not keep its text.
- Terms and age. We keep which version of the terms you accepted, when, and that you declared you meet the minimum age.
- Language. We keep your device language (Spanish or English) to talk to you in it.
- Questions and answers. We keep the questions you post as an influencer and the answers you send as a follower, in the order they arrive. The influencer reads the first answers to their question with the public name of whoever sent each one. The public name and the text of a winning answer are shown to the influencer's followers. We keep when the influencer first read each answer; only whoever sent it sees it. If your answer wins, the influencer can share your public name and your answer outside the app; what they publish on other networks is beyond our control and we cannot delete it. If your answer wins, the influencer can also publish it on their Instagram from the app: on their instruction we send Meta your public name and your answer, and if your Instagram is verified they mention you with your @.
- Publishing on Instagram (influencers, optional). If you connect your professional Instagram account to publish results, Instagram gives us a permission to publish on it. With that permission we only publish what you confirm; we never read your posts, messages or insights. We keep that permission encrypted, the identifier of that Instagram account and its @, and each publication you make from the app: the question, whether it went to the feed or the story, when and how it ended. The image of the announcement is kept on our server only while it is published and is deleted when it ends; if something fails, it is deleted in the next clean-up. You can withdraw the permission whenever you want: in Profile › Disconnect, in Instagram's settings or by deleting your account. What was already published stays on Instagram.
- Links to share (influencers). Each question and each profile has a random code for its link. Whoever has the link of your open question or of your profile sees, also on a web page and without an account, the question, its tone and your public name; never the answers, their number or the winner. That page does not appear in search engines. If someone installs the app from it, Google Play passes the code to the app; on iPhone, the App Store button copies the link and the app only reads it if you tap «Open the question from the link». We do not keep who opens a link.
- Notifications (optional). If you allow notifications, we keep your phone's notifications token, its system (Android or iOS) and the app language, tied to your session, to let you know when an influencer you follow posts a question and when your answer wins.
- Reports. If you report something from the app, we keep who reports, what is reported (the question, the answer or the account), the reason and the date, and later how and when it was resolved. Only the owner of AnswAIr reads them.
- Subscription. If you subscribe, we keep the store (Google Play or the App Store), the product, the purchase reference the store gives us, the state, whether it is a trial, whether it renews and the dates. We do not keep your payment details: the store has them.
We do not ask for an email or password. We do not use your data for advertising and we do not sell it.
3. Purposes and legal basis
- Creating your account, identifying you and showing your @ or alias: necessary to provide the service (Art. 6(1)(b) GDPR).
- Storing and showing questions and answers, and showing the winning answer to the influencer's followers: it is the service you use (Art. 6(1)(b) GDPR).
- Checking your subscription to let you answer: it is necessary to give you the service you pay for (art. 6.1.b GDPR).
- Sending you notifications: with your consent, which you give by allowing them on your phone and can withdraw in its settings (Art. 6(1)(a) GDPR).
- Verifying your Instagram @ and showing it publicly with a verified badge: you choose to do it, with your consent (Art. 6(1)(a) GDPR). You can unlink it at any time.
- Publishing on the influencer's Instagram what they confirm: with their consent, which they give when connecting their account and can withdraw whenever they want (Art. 6(1)(a) GDPR).
- Keeping proof that you accepted the terms: legal obligation to demonstrate consent (Art. 6(1)(c) and 7(1) GDPR).
- Reviewing reports and removing what breaks the terms: our legitimate interest in keeping the app safe for the people who use it (Art. 6(1)(f) GDPR).
4. Who else processes your data
- Supabase hosts the database and server in the European Union (Frankfurt, Germany). The link pages ask it for the question from your browser, so it also receives your IP address and your browser.
- Vercel hosts AnswAIr's web pages (these terms and policy, the deletion page and the link pages). When you open one, it receives what any website receives: your IP address and your browser.
- Google (Firebase Cloud Messaging) delivers the notifications to your phone, through Apple on an iPhone. It receives the notifications token and the text of the notification: the influencer's public name and their question.
- Brevo sends, with servers in the European Union, the email that tells the owner about each new report. It receives what was reported, the reason and the public name of whoever reports and of the author.
- Google (Google Play) and Apple (App Store) charge the subscription and process your payment details under their own policies. They tell us the state of the purchase, never your payment details. When you buy, the app sends the store an internal identifier of your AnswAIr account (not your name or alias) so that the purchase is tied to it, and our server sends the store the purchase reference to check it.
- Meta (Instagram) carries the direct messages you send to @answair.app and, if an influencer publishes a result from the app, receives the image of the announcement and its text to publish them on their account.
- Apple, Google, Meta (Facebook) and TikTok handle the sign-in you choose, under their own policies.
Some of these providers may process data outside the European Economic Area. When they do, they use GDPR safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
5. How long we keep it
- For as long as you have an account. If you delete your account, we delete all its data at once. The backups of our provider disappear on their own within 7 days at most.
- Subscription data is kept while you have an account and is deleted when you delete it.
- Reports are kept until they are resolved and are deleted 12 months after being resolved. If you delete the account, we also delete the reports you made and those about your content or your account.
- If you start signing up but do not accept the terms, we delete what we received within 24 hours.
- Instagram linking codes expire after 15 minutes.
- The permission to publish on Instagram is kept until you disconnect it, withdraw it on Instagram, unlink your Instagram @ or delete your account. The image of the announcement is deleted when the publication ends or, if something fails, in the next clean-up.
- The notifications token is deleted when you sign out on that phone, or when Google tells us it is no longer valid.
6. Minimum age
You must be at least 16 years old to use AnswAIr.
7. Your rights
You can ask to access, correct, delete or port your data, object to or restrict its use, and withdraw your consent at any time. Write to admin@quimardigital.com. If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.
8. How to delete your account and data
From the app: Profile › Delete my account. After you confirm it twice, the account and all its data (your questions, answers, follows, blocks, reports, the stored subscription, your linked Instagram, the permission to publish on Instagram and the notices of your phones) are deleted at once. If your account is suspended, you can do it from the suspended account screen. Deleting the account does not cancel the subscription: cancel it in the store.
By email, if you no longer have the app: write to admin@quimardigital.com with the subject "Delete my account" and include your AnswAIr @ or alias, and send a direct message to @answair.app on Instagram from the Instagram @ linked to your account, to check that it is yours. We will delete it within 30 days and confirm it to you. More details in how to delete your account.
9. Changes
If we change this policy in an important way, we will ask you to accept it again in the app.