Effective date: [INSERT DATE] · Quiddy LLC, California
The short version: Quiddy is a local-first desktop application. Almost all of your data — conversations, memories, personas, vault documents — stays on your Mac and never leaves your device. The only data that ever reaches our servers is your account information if you sign in, and payment information if you subscribe to Pro.
Quiddy is operated by Quiddy LLC, a company incorporated in the State of California.
If you have questions about this policy, contact us at privacy@quiddy.app.
The following data is stored exclusively on your Mac in ~/Library/Application Support/Quiddy/ and is never transmitted to Quiddy's servers:
You can export or permanently delete all of this data at any time via Settings → Privacy & Data.
If you create a Quiddy account using Google Sign-In, we receive and store:
We use this information solely to identify your account and provide Pro features. We do not sell, rent, or share this information with third parties for marketing purposes.
Payment processing is handled by Stripe, Inc. We do not store your credit card number, CVV, or full payment details. We receive and retain:
Stripe's privacy practices are governed by the Stripe Privacy Policy.
When you use the in-app "Report an Issue" feature, you may optionally include recent error logs. Reports are sent to support@quiddy.app and contain only what you choose to include. Conversation content is never included in reports unless you manually paste it.
If you opt in during setup, anonymous crash reports may be sent to help us diagnose bugs. These reports contain device type, macOS version, and a stack trace. They never contain conversation content, API keys, or personally identifiable information beyond a randomised device ID.
Quiddy is a bring-your-own-key (BYOK) application. When you configure an API key for Anthropic, Google, or OpenAI, that key is stored in the macOS Keychain and never transmitted to Quiddy's servers.
When you send a message, your Mac makes a direct HTTPS request to the LLM provider you have configured (e.g., api.anthropic.com). Quiddy does not see, log, or intercept this traffic. Your conversation data is governed by the privacy policy of the LLM provider you choose:
Local data (conversations, memories, etc.) persists on your device until you delete it. You can delete all local data at any time via Settings → Privacy & Data → Delete all my data.
Account information is retained for as long as your account is active. You may request deletion of your account and associated data by emailing privacy@quiddy.app.
We do not sell your personal information. We may disclose information to:
As a California LLC serving users including California residents, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).
California residents have the right to:
To exercise these rights, email privacy@quiddy.app. We will respond within 45 days as required by California law.
Quiddy is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, contact us at privacy@quiddy.app and we will delete it promptly.
API keys are stored in the macOS Keychain using industry-standard encryption. Account credentials are handled by Google's OAuth 2.0 system. We apply reasonable technical and organisational measures to protect any data we hold. However, no system is completely secure, and we cannot guarantee absolute security.
We may update this policy from time to time. We will notify users of material changes by updating the effective date at the top of this page and, for significant changes, by sending an email to the address associated with your account. Continued use of Quiddy after changes are posted constitutes acceptance of the updated policy.
For privacy-related questions or to exercise your rights: