PURPOSE OF THE POLICY: This Policy describes how Quirktastic Inc. (“us,” “we” or “Quirktastic”) collects, uses, discloses, and otherwise processes the personal data you provide while using the Quirktastic application on iOS, Android, or the Quirktastic website (collectively referred to as the “Service”).
NOTICE CONCERNING CHILDREN: We require users of the Service to be at least 18 years of age. We do not intend for anyone under the age of 18 to use any of the features or services we offer from the Service and we do not knowingly collect personal data from anyone under the age of 18. If you suspect that a user is under the age of 18, please use the report profile mechanism available through the Service.
WHO WE ARE
For the purpose of applicable data protection legislation, the data controller of your personal data is Quirktastic Inc. of 2140 South DuPont Highway, Camden, Kent County, Delaware 19934.
PURPOSES OF PROCESSING
As used in this Policy, “personal data” is as defined in the General Data Protection Regulation 2018 and any successor legislation, which includes any information which, either alone or in combination with other information we hold about you, identifies you as an individual, including, for example, your name, postal address, email address and telephone number. We need certain personal data in order to provide you with access to our Service. To process your personal data as outlined below, we rely on the following legal bases:
Contractual Performance: The primary reason we process your personal data is to perform the contract that you have with us. For example, as you use our Service, we use your personal data to create and maintain your account, to make it visible to other users and to recommend other users to you.
Legitimate Interests: We may also use your personal data where we have legitimate interests to do so. For instance, we review users’ actions while using our Service to improve our Service, and we process personal data for administrative, fraud detection and other legal purposes.
Consent: We may also ask for your consent to use your personal data for specific reasons. You may withdraw your consent at any time by contacting us as stated at the end of this Policy.
HOW WE COLLECT AND USE DATA
INFORMATION YOU PROVIDE: In using the Service, you are required to provide personal data to verify that you are the specific person you say you are. This personal data can include, but is not limited to, your phone number or Facebook profile. Your profile consists of your first and last name, as well as other data you provide, including gender, pictures, videos, captions, answers to prompts, your neighborhood, your height, ethnicity, religious beliefs, political beliefs, lifestyle choices, family details, education, workplace, job title and hometown. When setting up or editing your profile, we have indicated which types of data is optional to provide (as opposed to mandatory), as well as which types of data is shared with other recommended matches (as opposed to exclusively with Quirktastic). Your ‘Preferences’ allow us to match you with relevant people. You may choose to share this personal data with other members, which includes but is not limited to gender, age, location, height, ethnicity, religion, children, family plans, education, politics, and lifestyle choices. Some of the personal data you choose to provide us with may be considered “special” or “sensitive” in certain jurisdictions, such as your racial or ethnic origins, sexual orientation, political beliefs, and religious beliefs (“Sensitive Personal Data”). By choosing to provide this personal data, you consent to our processing of that data.
We collect and analyze feedback that you provide in surveys, focus groups, and during Quirktastic-sponsored events. This information is used to provide the Quirktastic team with insights to improve the Service.
We collect contact information in order to send you communications regarding our service, which you have the option of unsubscribing from. Though, we hope you don’t choose this option — we love staying in touch!
INFORMATION COLLECTED AUTOMATICALLY: When you use the Service we may collect some personal data about you automatically. This personal data includes but is not limited to: app version and build number, attribution campaign and source, authentication state, push token, device OS and version, device model, latitude and longitude, signup date, payment date, and first subscription date. If you sign up through Facebook, this personal data also includes: DOB, email, Facebook ID, first and last name, and gender. If you sign up through your phone number, this includes your phone number. This personal data allows us to diagnose bugs (for example, determining that you are using an old or outdated version of Quirktastic) as well as detect fraud. This personal data also allows us to send alerts or communications in the form of push notifications, if you choose to opt into them.
ACTIVITY WITHIN THE SERVICE: When you use the Service, we may collect personal data as you take actions within the Service, such as your interaction with other Quirktastic users and your habits and behavior in using the Service. This may include but is not limited to passing, liking, commenting, messaging, blocks and abuse reports. Collecting this information allows us to optimize the Service for our users by refining our recommendation algorithm, diagnosing bugs or issues, developing new features, and monitoring for behavior that violates our Terms of Service. This information is also used for financial reporting.
SOCIAL NETWORKS: Our Service allows you to register with and/or connect using social networking platforms, like Facebook. We may collect personal data that you elect to allow us access to through their APIs. This data includes photos, videos, workplace, education, hometown, contact information and friend connections. Data from social networks may enhance your experience, but this data is not required in order to use our service. We will comply with these services’ respective terms and policies with regard to how we use your data.
OTHER USERS: Other users may provide personal data about you as they use the Service (for example, if they contact us about you). We don’t necessarily process this information and we do not retain this information.
PARTNERS: We may collect personal data about you from our partners. For example, data that is received from Quirktastic ads displayed on a partner’s website(s) or information that these partners may pass along regarding a campaign’s success.
Please note that some web browsers have a “Do Not Track” (“DNT”) function. If a website that responds to a DNT signal receives a DNT signal, the browser can block that website from collecting certain information about the browser’s user. Not all browsers offer a DNT option and DNT signals are not yet uniform. For this reason, many businesses, including ours, do not currently respond to DNT signals.
HOW WE SHARE YOUR INFORMATION
We may share your personal data with other users, with service providers, and with partners who help us operate the Service, in the event of a business transaction and for law enforcement purposes, as set out below:
Other Users: we will share personal data with other users when you voluntarily disclose that information on the Service. For example, we will display your profile to other users when we match you with them.
Service Providers: we may share your personal data with third parties to provide you with the Service (such as analytics services or customer relationship management services). We vet all service providers before we provide them with your personal data to ensure we have appropriate contractual safeguards in place.
Corporate Transactions: If Quirktastic is involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, dissolution, bankruptcy or other change of control or ownership, we may transfer personal data in relation to that transaction.
Required by Law: We may share your personal data in the following circumstances: to comply with a legal process, like a court order, subpoena or search warrant, a government investigation or other legal requirements to help in the prevention or detection of crime (subject to applicable law); or to protect the safety of any person.
Enforce Legal Rights: We may also share your personal data to enforce legal rights, including: to mitigate Quirktastic’s liability in an actual or threatened lawsuit; to protect our legal rights and legal rights of our users, partners or other interested parties; to enforce our agreements with you; and to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.
With Your Consent: We may share your personal data if we have first obtained your consent to do so.
AUTOMATED DECISION-MAKING AND PROFILING
To perform the contract that you have with us, we use automated decision-making and/or profiling in regard to your personal data, including Sensitive Personal Data, to match you with relevant people. We use automated decision-making and profiling to recommend matches to you based on your profile and the people you engage with. We also use automated decision-making and profiling to moderate “bad actors” by flagging user profiles that may contain explicit content. If you choose to opt out of automated decision-making and profiling, we will not be able to provide our Service to you and you will be prompted to delete your account. We do not otherwise use your personal data for the purposes of automated decision-making. However, we may do so in order to fulfill obligations imposed by law, in which case we will inform you of any such processing and provide you with an opportunity to object.
Your data is accessible only on a need-to-know basis by Quirktastic employees and third-party service providers.
DELETING YOUR ACCOUNT AND DATA RETENTION
When you delete your account on Quirktastic, your profile is removed from distribution, which includes the Discover, Likes You, and Match screens. This means anyone you are matched with will no longer have access to your profile or conversation.
We delete all of your personal data from our database within 30 days of the deletion of your account, except as provided in the paragraph below, and unless a longer retention period is required or permitted by law (for example, for regulatory purposes). We may retain anonymous data that allows us to improve our Service by refining our recommendation algorithm, developing new features, and financial reporting. When we use the term “anonymous data,” we are referring to data and information that does not permit you to be identified or identifiable, either alone or when combined with any other information available to a third party.
If you violate our Terms of Service, we keep your IP address, Facebook ID, and phone number (if provided) in order to maintain a blacklist for up to 1 year. If there is an ongoing issue, claim, or dispute, we will keep the personal data until the matter is resolved, as well as other information that we maintain for legitimate business interests for a period of 1 year. Please note that simply deleting the app from your phone does NOT delete your account, as we have no way of knowing if you did this. To delete your account, you navigate to “Settings” within the app and proceed with deletion instructions. Please remember that even though our systems are designed to comply with the above retention periods, we cannot promise that 100% of the data will always be deleted within these timeframes, due to technical constraints.
Quirktastic takes reasonable measures to prevent the unauthorized access or alteration of (and disclosure or destruction of) your personal data, but ultimately, we make no assurances about our ability to prevent any such issues. We may suspend your use of all or part of the Service without notice if we suspect or detect any breach of security. If you believe that your account or personal data is no longer secure, please notify us immediately via the contact information set out below.
CROSS-BORDER DATA TRANSFERS
The sharing of personal data as explained in this Policy may involve the transfer of personal data across borders, for instance to the United States and other jurisdictions, where data protection and privacy regulations may not offer the same level of protection as in other parts of the world. As an example, where the Service allows for users to be located in the European Economic Area (“EEA”), their personal data is transferred to countries outside of the EEA. We use standard contract clauses approved by the European Commission or other suitable safeguard to permit data transfers from the EEA to other countries. Standard contractual clauses are commitments between companies transferring personal data, binding them to protect the privacy and security of your data.
Below, we have outlined some of the tools you have access to, in order to control your personal data:
Tools in the Service: The Service provides certain tools that allow you to access, rectify or delete information that you provided through the Service and which is associated with you.
Device Permissions: Mobile operating systems have permission controls, such as access to camera and location services. You can control these options through your device’s settings. Please note that changing these settings may result in lost functionality within the Service.
Account Deletion: You can delete your account within the Service at any time by navigating to Settings > Account > Delete Account.
Uninstall: If you uninstall the app, you can stop the app from collecting all information. Please note that this will not delete your account and we will retain the unique identifier associated with your device. If you re-install the application on the same mobile device, we will be able to re-associate this identifier to your previous activities.
You should also be aware of your privacy rights:
Opt-out. You may contact us at any time (as set out at the end of this Policy) to opt-out of: (i) direct marketing communications; (ii) automated decision-making and/or profiling; (iii) our collection of Sensitive Personal Data; (iv) any new processing of your personal data that we may carry out beyond the original purpose; or (v) the transfer of your personal data outside the EEA. Please note that your use of the Services may be ineffective upon opting out.
Reviewing your information: Applicable privacy laws may give you the right to review the personal data we maintain about you. To request access to your personal data, please contact us as set out at the end of this Policy.
Updating your information: If you think the information we hold about you is inaccurate or that we are not entitled to use it and would like to request rectification, deletion, or objection to our processing of this personal data, please contact us as set out at the end of this Policy.
Moving your information. Your data is portable – i.e. you to have the flexibility to move your data to other service providers as you wish. To request this movement, please contact us as set out at the end of this Policy.
Accountability: Some countries, including those in the European Union, provide you with a right to file a complaint with the appropriate data protection authority if you have an issue with how we process your personal data.
For your protection, we may ask you to prove your identity before we answer any requests related to the above items. Note that we may reject a request for certain reasons, including if it is unlawful or if fulfilling the request will infringe upon a trade secret or other intellectual property or upon the privacy of another user.
SERVICE AREA BEYOND QUIRKTASTIC’S CONTROL
OTHER USERS: The Service includes user-generated profiles and interactive messaging services. Please remember that any information that is disclosed in these areas may be seen and copied by other users and you should exercise caution when deciding to disclose this personal data.
THIRD-PARTY WEBSITES: The Service may contain links to other websites. If you choose to visit other websites, we are not responsible for the privacy practices or content of those other websites, and it is your responsibility to review the privacy policies of those websites to confirm that you understand and agree with their policies.
RESIDENTS OF CALIFORNIA
If you are a California resident, you can request a notice disclosing the categories of personal data about you that we have shared with third parties for their direct marketing purposes during the preceding calendar year. Note that we do not currently share any information with third parties for their own direct marketing purposes. To request this notice, please submit your request to the contact information set out below. Please allow 30 days for a response. For your protection and the protection of all of our users, we may ask you to provide proof of identity before we can answer such a request.
POLICY UPDATES AND CHANGES
HOW TO CONTACT US