Quies Privacy Policy — how your health and journal data is handledHow Quies collects, stores, secures and discloses your health, fasting, nutrition and journaling data under the Privacy Act 1988 (Cth).Where your data is storedQuies data is stored on managed infrastructure provided by Supabase, with the underlying Postgres database physically hosted in Tokyo, Japan (AWS region ap-northeast-1). It is not stored in Australia. Creating an account consents to this cross-border disclosure under Australian Privacy Principle 8. Under section 16C of the Privacy Act 1988 (Cth), Quies remains accountable for how its overseas providers handle your data.Is health data sold or shared?No. Quies never sells personal or health information. The only third parties that touch your data are infrastructure providers required to deliver the service: Supabase and AWS for hosting, Stripe for payments in AUD, Google Gemini via the Lovable AI Gateway for AI reflection (not used for model training), and PostHog for anonymised product analytics that excludes health data.Security and your rights

All data is encrypted in transit (TLS 1.3) and at rest (AES-256).

Row-level security means only your own account can read your records.

Quies complies with the Notifiable Data Breaches scheme and will notify you and the OAIC if a serious breach occurs.

You can delete your account from Profile. Data is removed from primary systems within 30 days and from encrypted backups within 90 days.

Third-party wearable data (for example Oura Ring) is per-user, isolated by row-level security, and deleted immediately when you disconnect the provider.

Quies home · FAQ · Pricing · Privacy · Terms · Disclaimer