Privacy policy

1. Controller

Controller: Quinsy UG (haftungsbeschränkt)
Address: Schönhausenstraße 41, 28355 Bremen, Germany
Commercial register: HRB 42890
Represented by: Helmut Albers (managing director)
Email: contact@quinsy.app

2. Categories of personal data

• Account data: email address and authentication identifiers when you sign up or sign in
• Profile and workspace data you provide (e.g. display name, board and library content)
• Content you upload or capture (images, notes, metadata, share-link settings)
• Technical and usage data needed to operate the service (e.g. logs, approximate usage, share view counts)
• Communications you send us (support requests)
• Consent records for Terms and Privacy acceptance (timestamps and policy version ids) when you create an account

3. Purposes and legal bases

We process personal data to:

• Provide and secure the Moody service (contract / Art. 6(1)(b) GDPR where applicable; legitimate interests for security and abuse prevention, Art. 6(1)(f))
• Authenticate users and sync boards (contract)
• Respond to support requests (contract / legitimate interests)
• Comply with legal obligations (Art. 6(1)(c))
• Where we rely on consent (e.g. optional marketing), Art. 6(1)(a) — you may withdraw consent at any time

We do not sell personal data.

4. Fonts / typography

Pre-auth marketing pages (including home, pricing, signup, and legal pages) use self-hosted font files. We do not request Google Font CDNs (fonts.googleapis.com / fonts.gstatic.com) on those pages.

After you sign up, Moody’s own product UI also uses the same self-hosted product faces (currently DM Sans and IBM Plex Mono). If a board, Mood Direction presentation, or brand guide uses additional type families from board DNA or user hints, we may load those families from a third-party font CDN (for example Google Fonts) so specimens render correctly. That optional load happens only in signed-in product surfaces when those features are used — not on pre-auth marketing.

5. Processors and tools

We use service providers that process data on our behalf or as independent controllers where noted. Examples of current or planned processors include:

• Authentication and database hosting (e.g. Supabase)
• Application hosting, CDN, DNS, and related infrastructure (e.g. Cloudflare and/or a VPS host)
• Transactional email providers for account messages
• AI vision / analysis providers (e.g. Google Gemini) when you use features that send content for tagging or presentation analysis
• Optional font CDN for non-product typefaces in presentation / brand-guide features (see §4)

Processors are bound by data-processing agreements where required. This list may be updated as the launch stack stabilizes.

6. Retention

We keep account and board data for as long as your account is active and as needed to provide the service. After deletion requests or account closure, we delete or anonymize personal data within a reasonable period unless law requires longer retention (e.g. billing or dispute records when paid plans exist).

7. International transfers

Some providers may process data outside the EU/EEA. Where that happens, we rely on appropriate safeguards (e.g. EU Standard Contractual Clauses) or an adequacy decision, as applicable to the provider.

8. Your rights

Under GDPR you may have rights of access, rectification, erasure, restriction, data portability, and objection. You can delete account-associated content from Settings where available, or contact us at contact@quinsy.app. You may lodge a complaint with a supervisory authority (in Germany, typically your state data protection authority or the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit).

9. Contact

Privacy inquiries: Quinsy UG (haftungsbeschränkt), Schönhausenstraße 41, 28355 Bremen, Germany, contact@quinsy.app.