Qiva privacy policy

Effective date: October 16, 2026
Last updated: October 16, 2026

Qiva ("Qiva," "we," "us") is a public journal for private thoughts. You write entries, optionally tie them to a place or a film, and read what other people have written. This policy explains what we collect, why, who we share it with, and the choices you have.

Qiva is operated by Wallizada LLC. Questions about this policy or your data: hello@qiva.me.

Qiva was previously called the veil. Your account, entries, and rights carry over unchanged under this policy.

1. The short version

• Entries you post are public. Anyone using Qiva can read them, along with your handle.
• Real names you write can be cast. Qiva can swap a person's name for a stand-in word before an entry posts. The real name is stored encrypted, and only you can see it.
• We check every entry before it posts for threats, targeted attacks, other people's personal information, and illegal content. An automated system does the first check.
• We do not sell your data, and we do not show ads.
• Your location is optional. It is used to show distances and nearby places. It is never published with your entries.
• You can delete your account and everything in it from Settings at any time.

2. Information we collect

a. Information you give us

• Account details. Your email address. If you sign in with Apple or Google, we receive the identifier and email address those services release to us (Apple lets you hide your real email).
• Your handle and the color you choose for it. Your handle is public.
• Entries. The text you write, an optional genre, an optional place or film, and an optional voice memo. Entries you post are public.
• Voice memos. The audio you record. If you turn on Mask, the pitch of your voice is changed on your device before upload. Before upload, we also clear the recording's date fields.
• Replies, felts, follows, and messages. Replies are public. Felts (likes) are counted publicly. When you feel an entry, its writer is notified with your handle; nobody else sees who felt it. Direct messages are visible only to the people in the conversation, and to our moderators if a message is reported.
• Your cast. When a real person's name appears in your writing, Qiva may replace it with a stand-in word. The real name is encrypted, and the encryption key is kept outside our database. Only you can reveal your cast's real names, from the Cast screen.
• Reports and blocks you make, and messages you send us.
• Membership. If you subscribe, Apple handles the payment. We receive a record of the subscription from Apple, never your payment card.

b. Information collected when you use Qiva

• Location, only if you allow it, and only while the app is open. Qiva uses your location to show how far places are, to suggest nearby places, and to name your city and neighborhood in the feed filter. Your coordinates are sent with those requests so the server can work out distances. They are not attached to your entries and are not shown to anyone. Qiva never uses location in the background.
• Your time zone, so streaks and Insights count days in your own time.
• Usage events. While you are signed in, Qiva records which screens you open and which controls you use, with a random session id and the app's build number. These events contain no entry text, no message text, and no location.
• Push token. If you allow notifications, we store your device's push token so we can deliver them.
• Technical data needed to run and secure the service, such as your app version and server logs.

c. What stays on your device

• Dictation. On iOS 26 and later, dictation runs entirely on your device. The audio is not sent to us.
• Face ID. If you turn on the app lock, Face ID runs on your device. We never receive biometric data.
• Drafts you save are kept on your device only.

3. How we use information

We use the information above to:

• create your account and sign you in;
• publish your entries, replies, and handle, and run the feed, search, and place pages;
• check entries and replies for harmful content before they post (section 4);
• cast names you write, if Qiva finds any;
• generate your writer's line and your Insights (section 4);
• send the notifications you allow;
• handle reports, blocks, and support requests, and keep the community safe;
• understand how the app is used so we can improve it;
• prevent abuse and comply with the law.

Legal bases (EEA and UK). We process data to provide the service you asked for (our contract with you), with your consent where we ask for it (location and notifications, which you can withdraw in your device settings), and for our legitimate interests in keeping Qiva safe and working.

4. Automated processing

Some features use an AI model provided by OpenAI. We send it only what the feature needs:

• Safety checks. Every entry, reply, and edit is checked before it posts for four things: a targeted attack on a real person or group, a threat, somebody else's personal information, and illegal content. If a check finds a problem, the entry does not post and you see why. If a check cannot finish in time, the entry waits privately and is checked again shortly after. If that later check finds a problem, the entry is held and you are told.
• Casting. Possible names in your writing are checked so that ordinary words are not mistaken for people.
• Your writer's line. A one-line description on your page, written from your public entries. You can turn it off in Settings.
• Insights. A private reading of your own writing, visible only to you.
• Place names. Names suggested for new places are checked before they are added.

OpenAI processes this data on our behalf and does not use it to train its models under the terms of our agreement. These automated decisions can be appealed by writing to hello@qiva.me.

5. Who can see what

Who wrote an entry is not hidden from us. Our moderation tools show an entry and the reason it was reported or held. They do not show who wrote it. Two named people at Qiva can look up the writer of an entry when it is needed for safety or the law. Each lookup requires a written reason and is recorded in a log that the person running it cannot change. Anyone who administers our database could reach that information without the log. We would rather tell you this plainly than promise something we could not stand behind.

6. How we share information

We do not sell or rent your personal information. We share it only with:

• Service providers who run parts of Qiva for us, under contract:
  • Supabase: database, sign-in, storage, and servers.
  • OpenAI: the automated processing in section 4.
  • Resend: sending sign-in codes by email.
  • Apple and Google: sign-in if you choose them, and app distribution. Apple also handles subscription payments and delivers push notifications on iPhone.
  • Expo: push notification delivery.
  • Wikidata: when you search for a film, your search words are sent to Wikidata to find it. Nothing about you is sent.
• Other people using Qiva, as described in section 5.
• Legal and safety recipients, when we believe in good faith that the law requires it or that it is necessary to protect someone's safety or the integrity of the service.
• A successor, if Qiva is part of a merger, acquisition, or sale of assets. We will tell you before your data comes under a different privacy policy.

Some of these providers process data in the United States. Where the law requires it, we rely on appropriate safeguards for international transfers.

7. How long we keep data

We keep your account and your entries while your account exists. When you delete an entry, it is removed, along with its replies and any voice memo. When you delete your account, everything tied to it is deleted, as listed on our account deletion page. We keep limited records longer where the law requires it, to resolve disputes, or to enforce our terms, such as records of reports and of authorship lookups.

8. Your choices and rights

• Location and notifications. Turn them on or off in your device settings at any time. Qiva works without either.
• Your writer's line. Turn the Description switch off in Settings.
• Your entries. Edit or delete any of them from the entry's menu.
• Usage events. Qiva has no in-app switch for these today. Write to hello@qiva.me and we will stop recording events for your account.
• Delete your account. Settings, then Delete account. This cannot be undone.
• Your rights by law. Depending on where you live (for example under the GDPR or California law), you may have the right to access, correct, delete, or receive a copy of your data, and to object to or restrict some processing. Write to hello@qiva.me. We will not treat you differently for using these rights.

9. Security

We use encryption in transit, row-level access rules in our database, and server-side checks on every write. Your cast's real names are encrypted with a key that is not stored in the database. No system is perfectly secure, but we work to protect what we hold and to collect as little as we can.

10. Children

Qiva is not for children. You must be at least 17 years old, or older if your country's age of digital consent is higher. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to hello@qiva.me and we will delete it.

11. Changes to this policy

We may update this policy as Qiva changes. If we make a material change, we will update the date at the top and tell you in the app.

12. Contact

Wallizada LLC, operator of Qiva
Email: hello@qiva.me

© 2026 Wallizada LLC. All rights reserved.