Privacy Policy

Effective date: 14 September 2026

Version: v1-3, 14 September 2026

BLUF House, LLC, a New York limited liability company, operates Quency. In this policy, "Quency," "we," "us," and "our" mean BLUF House, LLC. "You" means the person using Quency.

Quency is available in the United States, the United Kingdom, and Australia. Mailing a physical card is available within the United States only.

Contact: hello@blufhouse.com. Postal: BLUF House, LLC, c/o Northwest Registered Agent, 418 Broadway STE N, Albany, NY 12207.

SUMMARY OF KEY POINTS

This summary gives you the key points. Each one names the section that explains it in full.

What does Quency hold? Quency helps you show up for the people you love. To do that it holds information about you and about them. We use that information to run the app and for nothing else. Sections 1 and 2.

What do we never do? We never message anyone on your behalf. We never sell your data. We show no advertising. We do not use your information, or the information you record about other people, to train artificial intelligence models. Section 19.

Do we hold information about people who are not users? Yes. Every loved one you add is a person who is not our user. Nothing becomes a loved one automatically. Section 2.

What happens to your contacts? We read them only if you allow it, and we store only what you act on. A contact you never add is not stored by us. Section 3.

Who else receives your information? Only the service providers we need to run Quency. Section 7.

Where is your information stored? In the United States, with one provider. Section 11.

What are your rights? Depending on where you live, you can see, correct, export, or delete what we hold, and object to some of what we do. This applies whether or not you are our user. Sections 15 and 16.

How do you reach us? hello@blufhouse.com

TABLE OF CONTENTS

1. WHAT INFORMATION DO WE COLLECT ABOUT YOU?

2. WHAT INFORMATION DO WE COLLECT ABOUT THE PEOPLE YOU ADD?

3. HOW DO WE USE YOUR CONTACTS?

4. WHAT HAPPENS WHEN YOU ASK SOMEONE FOR THEIR BIRTHDAY OR ADDRESS?

5. HOW DO WE PROCESS YOUR INFORMATION?

6. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

7. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

8. HOW DOES MAILING A CARD WORK?

9. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

10. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

11. WHERE IS YOUR INFORMATION STORED?

12. HOW LONG DO WE KEEP YOUR INFORMATION?

13. HOW DO WE KEEP YOUR INFORMATION SAFE?

14. DO WE COLLECT INFORMATION FROM MINORS?

15. WHAT ARE YOUR PRIVACY RIGHTS?

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

17. CONTROLS FOR DO-NOT-TRACK FEATURES

18. DO RESIDENTS OF US STATES HAVE SPECIFIC PRIVACY RIGHTS?

19. WHAT DO WE NOT DO?

20. A FEATURE NOT YET RELEASED

21. DO WE MAKE UPDATES TO THIS NOTICE?

22. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

1. WHAT INFORMATION DO WE COLLECT ABOUT YOU?

In short: we collect what you give us, and the minimum the app needs to run.

1.1 Your account. You sign in with Apple or with Google. We receive an account identifier and the email address the provider shares with us, which may be a private relay address if you chose to hide yours. We never receive or store a password. No password exists anywhere in our system.

1.2 Your preferences. Your preferences. The hour your daily reminder arrives, how far in advance you want reminders, whether star signs are displayed, and your device’s time zone, so that your reminder arrives at that hour where you are.

1.3 Your return address. If you mail a card, we collect your first name, last name, and postal address. This is printed on the envelope so that undeliverable mail returns to you, and it is used for nothing else.

1.4 Payment information. Card purchases are processed by Stripe. We do not receive or store your payment card number. We keep a Stripe reference to the transaction and a record of what you purchased.

Subscriptions are processed by Apple or Google under their own terms. We read whether your subscription is active from the platform; we do not store it as our own record and we never see your payment details.

1.5 Device and usage information. We receive basic technical information necessary to operate the app, such as a device token for notifications and diagnostic information from Apple or Google if you have chosen to share it with them. We do not collect your location, your browsing or search history, or any advertising identifier.

2. WHAT INFORMATION DO WE COLLECT ABOUT THE PEOPLE YOU ADD?

In short: we hold what you record about them. Nothing is created without a deliberate act by you.

2.1 What we hold. For each person you add as a loved one, we may hold: their name and any nickname you give them; their birthday and other dates you record; a photograph; their postal address; and anything you write about them, including how you know them, what you love about them, and facts you want to remember.

2.2 Where it comes from. From you, or from your device’s contacts if you choose to share them. Nothing becomes a loved one automatically. A person exists in Quency only because you deliberately added them.

2.3 What we do with it. We use it to remind you of their occasions, to help you plan how to show up for them, and to address and mail cards you choose to send. We do not use it to build advertising profiles and we do not sell it.

2.4 Your responsibility. You are recording information about other people. Please record only what you would be comfortable telling them you recorded, and only what you have a reasonable basis to hold. Quency shows you this reminder at the top of every profile.

2.5 Their rights. Some laws give people rights over information held about them even when they are not our users. Section 15 explains how a person can exercise those rights with us.

2.6 What we cannot do. We hold no way of contacting a person you add. We do not hold their phone number or their email address. Where the law asks us to notify a person whose information we hold, and we have no means of reaching them, this published policy is that notice.

3. HOW DO WE USE YOUR CONTACTS?

In short: only if you allow it, only to find the people you name, and we store only what you act on. Quency is available in the United States, Canada, the United Kingdom, and Australia. Mailing a physical card is available within the United States only.

3.1 If you allow access, we read your contacts to find the people you name and to show you birthdays already stored on your device. We store only what you act on. A contact you never add is not stored by us.

3.2 If you hide a contact so it stops appearing, we record a reference to that contact so we do not show it to you again. That is all we keep about a hidden person.

3.3 Addresses are never imported in bulk. When you address a card, we read the address from the contact record at that moment and store it only if you choose to use it. We never copy addresses out of your contacts in the background.

3.4 You can change or withdraw contacts access at any time in your device’s Settings, and Quency continues to work without it.

4. WHAT HAPPENS WHEN YOU ASK SOMEONE FOR THEIR BIRTHDAY OR ADDRESS?

In short: Quency prepares the message. You send it. We never see the reply.

Quency prepares a text message and opens it in your own Messages app. You address it and you send it.

We do not send the message, we do not see the reply, and we never receive the other person’s phone number. When a reply arrives, you enter the information yourself.

Quency records that you started an ask, and when, so that it can stop prompting you about that person. It does not know whether you sent the message, and it does not know whether anyone received it.

5. HOW DO WE PROCESS YOUR INFORMATION?

In short: to run the app, to remind you, to mail what you order, to keep it secure, and to obey the law.

We use the information described in this policy for the following purposes and for no others:

• To create your account and sign you in.

• To store the loved ones, dates, photographs, and notes you record, and to show them back to you.

• To send you the reminders you asked for, at the frequency and hour you chose.

• To find the people you name in your contacts, if you have allowed that.

• To prepare a message you can send asking someone for their birthday or address.

• To take payment for a card, and to print and mail it.

• To answer you when you write to us.

• To keep the service secure and to prevent fraud.

• To understand whether the app is working, using the diagnostic information Apple and Google provide.

• To meet legal obligations, such as keeping transaction records.

• To make suggestions about how to show up for the people you record. When this feature launches, the notes and details you record may be processed by a service acting on our instructions to produce those suggestions. Today nothing you write leaves Quency for this purpose.

6. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

In short: we use your information because you asked us to run Quency for you, because we have a legitimate interest in making it work, or because the law requires it.

If you are in the United Kingdom, data protection law requires us to name a lawful basis for everything we do with your information. We apply the same bases everywhere, so this section describes what we do for every user.

To perform our agreement with you. Running your account, storing the loved ones and dates you record, sending the reminders you asked for, and printing and mailing a card you ordered.

Our legitimate interests. Holding the information you record about the people you love, so that Quency can do the one thing it exists to do. Keeping the service secure and preventing fraud. Understanding whether the app is working. We have weighed these against the interests of the people involved, and section 19 lists what we refuse to do with the information, which is the substance of that weighing.

Your consent. Access to your contacts, and permission to send you notifications. You can withdraw either at any time in your device’s Settings, and Quency continues to work without them.

Legal obligations. Keeping transaction records for tax purposes.

Information you record about other people rests on our legitimate interests. If you are one of those people and you object, section 15 tells you how, and we will stop unless we have compelling grounds not to.

7. WHEN AND WITH WHOM DO WE SHARE YOUR INFORMATION?

In short: only with the service providers we need to run Quency, and only for that purpose.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Each of these providers acts on our instructions under a written agreement. They use sub-processors of their own, and we require that those be held to the same standard.

We may also disclose information if the law requires it, if we must to protect someone’s safety, or in connection with a merger, acquisition, or sale of assets, in which case we will tell you.

8. HOW DOES MAILING A CARD WORK?

In short: mailing is available in the United States only. If you use it, a person on our team reads what you wrote.

Mailing a card is available within the United States only. Both the delivery address and your return address must be United States addresses, so if you are outside the United States this section does not apply to you.

Please read the rest of this section carefully. Card fulfillment is not automated.

When you schedule a card, a person on our team transcribes the following into an external mailing service, which prints and mails the card:

• the recipient’s name and postal address,

• your return name and postal address, and

• the message you wrote.

That means a member of our team reads your message and both addresses, and the mailing service receives them, in order to produce and mail your card. We use this information for that purpose and for no other.

9. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In short: the app uses none. The website uses only what it needs to work.

The Quency app sets no cookies, carries no advertising trackers, and holds no advertising identifier.

Our website is a separate surface, and it does use cookies. We use Google Analytics 4 to understand how people find and use the site. Google Analytics sets cookies on your device and sends information about your visit, including your IP address, to Google.

You can stop it. Most browsers let you block or delete cookies, and Google publishes a browser add-on that turns Google Analytics off wherever you go. The site works normally either way.

Cookies that are strictly necessary to make the site work are set without asking, because the law does not require us to ask for those.

We do not use your content, or the information you record about other people, to train artificial intelligence models. When our assistant features launch, your content may be processed by a model acting on our instructions to produce suggestions for you, and it is not used to train that model.

10. WHAT IS OUR STANCE ON THIRD-PARTY WEBSITES?

In short: we are not responsible for what happens after you leave.

Quency may contain links to websites we do not operate, including links you save yourself in a profile. We do not control those sites and we are not responsible for their content or their privacy practices. A link is not an endorsement. If you follow one, the privacy policy of that site governs what happens there.

11. WHERE IS YOUR INFORMATION STORED?

In short: in the United States, with one provider, and we tell you what that means.

Quency runs on Supabase, and your information is stored on Supabase servers in the United States. BLUF House, LLC is a United States company, so your information is held in the United States from the moment you give it to us. There is no second region and no European copy.

United States law does not offer the same protections as United Kingdom or Australian data protection law, and United States authorities may in some circumstances compel access to information held there. We hold your information under a written agreement with Supabase that requires them to process it only on our instructions and to protect it, and we apply the safeguards described in section 13.

If you are in the United Kingdom or Australia, your information is held in the United States from the moment you give it to us, because we are a United States company and that is where our systems are.

12. HOW LONG DO WE KEEP YOUR INFORMATION?

In short: while your account is open, and no longer than the law requires after that.

Before you sign up, everything lives on your device only. The loved ones, dates, and notes you create before creating an account are stored locally and move to your account when you create one.

We keep your information while your account is open. Cards you have mailed are kept as a record of what you sent. Some records may be retained after deletion where the law requires it, such as transaction records for tax purposes.

13. HOW DO WE KEEP YOUR INFORMATION SAFE?

In short: access controls, encryption, and database rules that keep one account out of another.

We protect information with access controls, encryption in transit and at rest through our infrastructure provider, and row-level database rules so that one account cannot read another’s data. No system is perfectly secure, and we do not promise that ours is. If a breach affects your information, we will notify you as the law requires, and we will notify the relevant supervisory authority within the time the law sets.

14. DO WE COLLECT INFORMATION FROM MINORS?

In short: no. Quency is for adults, and an adult recording a child’s birthday is not a child using our service.

Quency is for adults. You confirm you are 18 or older when you create an account.

An adult recording a child’s birthday is not a child using our service. Quency is not directed to children, we do not knowingly permit anyone under 18 to create an account, and if we learn that an account belongs to a minor we will close it. If you believe a minor has created an account, write to hello@blufhouse.com.

Because Quency requires 18, no parental consent path exists anywhere we operate.

15. WHAT ARE YOUR PRIVACY RIGHTS?

In short: you have them whether or not you are our user.

15.1 If you are a user. Depending on where you live, you may have the right to access, correct, export, or delete your information, to restrict or object to processing, to withdraw consent without affecting what came before, not to be subject to decisions made solely by automated means, and not to be discriminated against for exercising these rights. Most of this you can do yourself in the app. For anything else, write to hello@blufhouse.com.

15.2 If you are not a user, and someone recorded information about you. Write to hello@blufhouse.com. Because we cannot tell whose information is whose without being told, please give us enough detail to find the record. Depending on where you live, you may have the right to ask what is held, to correct it, to object to our holding it, or to have it deleted, and we will honor valid requests.

15.3 How we respond. We answer within one month. If a request is complex we may take up to two months more, and we will tell you why within the first month. We may need to verify your identity first, and we will not ask for more information than we need to do that. We do not charge for this.

15.4 If you are unhappy with our answer. In the United Kingdom you can complain to the Information Commissioner’s Office. In Australia you can complain to the Office of the Australian Information Commissioner. You do not have to come to us first.

16. HOW CAN YOU REVIEW, UPDATE, OR DELETE YOUR DATA?

In short: most of it you can do yourself, inside the app.

Your profile fields, dates, notes, and addresses are always live and edit in place. You can change any of them at any time.

You can delete your account from inside the app, in Settings, and doing so removes your account and the information associated with it, including the information you recorded about other people.

You can export your information from inside the app, in Settings, under Account. The export is a machine-readable file containing your account, your preferences, and everything you recorded about the people you added.

17. CONTROLS FOR DO-NOT-TRACK FEATURES

In short: there is nothing to opt out of, because we run no tracking.

Some browsers and mobile operating systems offer a Do-Not-Track setting, and some United States states recognize a Global Privacy Control signal. No uniform standard exists for how a service should answer them. Quency runs no advertising trackers and does not sell or share personal information for advertising, so there is nothing for such a signal to switch off. If that ever changes, we will say so here first.

18. DO RESIDENTS OF US STATES HAVE SPECIFIC PRIVACY RIGHTS?

In short: yes, and we honor them for every user rather than checking where you live.

Several United States states, including California, Colorado, Connecticut, Virginia, and others, give residents rights over their personal information. Rather than apply them state by state, we extend the same rights described in sections 15 and 16 to everyone.

We do not sell personal information, we do not share it for cross-context behavioral advertising, and we do not use it for profiling that produces legal or similarly significant effects.

[Counsel to confirm which state-specific disclosures require their own named subsections, in particular the California notice at collection and the appeal path required by several state statutes.]

19. WHAT DO WE NOT DO?

In short: stated plainly, because their absence is part of the product.

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

• We do not message the people in your Quency on your behalf.

• We do not use your information, or the information you record about other people, to train artificial intelligence models.

• We show no advertising in the app, and the app runs no advertising trackers. Our website uses analytics cookies, described in section 9.

• We do not collect your location.

20. A FEATURE NOT YET RELEASED

In short: freQ is coming. It is not here yet, and this policy will be updated before it is.

A future feature, freQ, will help you plan how to show up for a specific person. If you use it, the information you have recorded about that person will be sent to an artificial-intelligence provider to answer your question and returned to you. That information will be used to answer your question and for no other purpose: it will not be sold, and it will not be used to train models outside that request. We will describe this fully, and update this policy, before the feature is released.

21. DO WE MAKE UPDATES TO THIS NOTICE?

In short: yes, and we date every version.

If we change this policy we will post the new version with a new effective date. If a change is material, we will tell you in the app before it takes effect.

22. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

In short: by email.

hello@blufhouse.com, or BLUF House, LLC, c/o Northwest Registered Agent, 418 Broadway STE N, Albany, NY 12207.

BLUF House, LLC is the data controller for the information described in this policy.