Privacy Policy

Information we collect

When you create an account, we collect the information you provide directly:

• Account information — your email address, name, and authentication credentials used to sign in.
• Profile information — your display name and avatar preferences.
• Checklist content — the checklists, sections, items, and progress data you create and manage within the application.

We do not collect payment information directly. Any future payment processing will be handled by a third-party payment processor.

Note for rental/tenancy use: If you use Quickcheck to track tenant information (names, payment history, contact details), you are responsible for obtaining consent from those individuals before entering their data into the Service, as required under applicable data protection laws.

How we use information

We use the information we collect to:

• Provide, maintain, and improve the Quickcheck service.
• Authenticate your identity and secure your account.
• Sync your checklist data across devices and sessions.
• Communicate with you about service updates, security notices, and support inquiries.

We do not use your personal data for any purpose beyond what is necessary to deliver the Service. Your data is not used for advertising, profiling, training machine learning models, or any automated decision-making.

Legal basis (DPDP Act 2023)

Quickcheck processes your personal data in compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act) of India. Our legal basis for processing is:

• Consent: You provide explicit consent when you create an account and accept these terms. You may withdraw consent at any time by deleting your account.
• Purpose limitation: Your data is processed only for the specific, lawful purpose of providing the Service. It is not used for any other purpose without your separate consent.

As a personal project operating at a non-commercial scale, we are not required to register as a Significant Data Fiduciary under the DPDP Act. We voluntarily adhere to its principles of transparency, purpose limitation, and data security.

Third-party services

Quickcheck uses the following third-party services:

• Supabase — provides authentication, database storage, and serverless infrastructure. Your account credentials and checklist data are stored in Supabase's infrastructure. Supabase is GDPR-compliant and SOC 2 compliant.
• Google Sign-In — if you choose to sign in with Google, we receive your email address and basic profile information from Google. No additional Google services are accessed.
• GitHub Sign-In — if you choose to sign in with GitHub, we receive your email address and basic profile information from GitHub. No additional GitHub services are accessed.

We do not sell, share, or transfer your personal data to any third party for advertising, analytics, or any purpose other than operating the Service. Each third-party service operates under its own privacy policy. We encourage you to review them.

Data retention & deletion

We retain your account information and checklist data for as long as your account is active. If you delete your account, all associated data is permanently removed from our systems within 30 days.

Backup copies may persist in encrypted form for up to 90 days before being fully purged.

To delete your account and all associated data, go to your account settings and use the "Delete account" option. You will receive a one-time password via email to confirm the deletion. Once confirmed, all your data is permanently and irreversibly removed.

Data security

We implement industry-standard security measures to protect your data:

• All data transmitted between your browser and our servers is encrypted using HTTPS/TLS.
• Checklist data is stored in a PostgreSQL database with row-level security, ensuring data isolation between accounts.
• Authentication is handled by Supabase Auth, which uses secure session management and encrypted tokens.
• Passwords are hashed and never stored in plain text.

Your rights (DPDP Act 2023)

Under the DPDP Act 2023, you have the following rights regarding your personal data:

• Right to access: You may request a copy of all personal data we hold about you.
• Right to correction: You may update or correct your personal information through your account settings.
• Right to erasure (right to be forgotten): You may delete your account and all associated data at any time through your account settings. This permanently removes your data from active systems.
• Right to grievance redressal: If you have any concerns about how your data is handled, please contact us. We will respond within a reasonable timeframe as specified under the DPDP Act.

We do not sell your personal information to third parties. We do not use your data for training machine learning models or for any purpose other than providing the service to you.

Grievance officer

In accordance with the DPDP Act 2023 and applicable rules, any concerns or complaints regarding data privacy may be directed to:

Roshan Mallick
Email: roshanmallick2025@gmail.com

We will acknowledge receipt of any grievance within 24 hours and endeavor to resolve it within 30 days.

Contact

If you have questions about this Privacy Policy, please contact us at roshanmallick2025@gmail.com.