Qiva privacy policy

Effective date: October 16, 2026
Last updated: November 7, 2026

Qiva ("Qiva," "we," "us") is a public journal for private thoughts. You use it through our iPhone app or on the web at qiva.me. You write entries, optionally tie them to a place or a film, and read what other people have written. This policy explains what we collect, why, who we share it with, and the choices you have.

Qiva is operated by Wallizada LLC. Questions about this policy or your data: hello@qiva.me.

Qiva was previously called the veil. Your account, entries, and rights carry over unchanged under this policy.

1. The short version

• Entries you post are public. Anyone using Qiva can read them, along with your handle.
• Real names you write can be cast. Qiva can swap a person's name for a stand-in word before an entry posts. The real name is stored encrypted, and only you can see it.
• We check every entry before it posts for threats, targeted attacks, other people's personal information, and illegal content. An automated system does the first check.
• We do not sell your data, and we do not show ads.
• Your location is optional. It is used to show distances and nearby places. It is never published with your entries.
• You can delete your account and everything in it from Settings at any time.

2. Information we collect

a. Information you give us

• Account details. Your email address. In the iPhone app you can also sign in with Apple or Google, and we then receive the identifier and email address those services release to us (Apple lets you hide your real email).
• Your handle and the color you choose for it. Your handle is public.
• Your line. One line you can write under your handle. It is public.
• Entries. The text you write, an optional genre, an optional place or film, and an optional voice memo. Entries you post are public.
• Voice memos. The audio you record. If you turn on Mask, the pitch of your voice is changed on your device before upload. Before upload, we also clear the recording's date fields.
• Replies, felts, follows, and messages. Replies are public, unless the writer limits or turns off replies on an entry. Felts (likes) are counted publicly, unless the writer hides the count, which hides the number from readers only. When you feel an entry, its writer is notified with your handle; nobody else sees who felt it. Your activity in Settings lists your own felts and replies for you. Direct messages are visible only to the people in the conversation, and to our moderators if a message is reported.
• Your cast. When a real person's name appears in your writing, Qiva may replace it with a stand-in word. The real name is encrypted, and the encryption key is kept outside our database. Only you can reveal your cast's real names, from the Cast screen.
• Reports and blocks you make, and messages you send us.
• Gold and message packs. If you subscribe to Gold or buy a message pack, Apple handles the payment. We receive a record of the purchase from Apple, never your payment card. We also keep your message pack balance and how many Ask questions you have used this month.
• Ask conversations. If you have Gold, the questions you ask Insights and the answers you were shown are kept so you can reopen them, until you delete them or your account.

b. Information collected when you use Qiva

• Location, only if you allow it, and only while the app is open. Qiva uses your location to show how far places are, to suggest nearby places, and to name your city and neighborhood in the feed filter. Your coordinates are sent with those requests so the server can work out distances. They are not attached to your entries and are not shown to anyone. Qiva never uses location in the background.
• Your time zone, so streaks and Insights count days in your own time.
• Usage events. While you are signed in, Qiva records which screens you open and which controls you use, with a random session id and the app's build number. These events contain no entry text, no message text, and no location.
• Push token. If you allow notifications, we store your device's push token so we can deliver them.
• Sign-up address. To limit automated sign-ups, we keep a scrambled (hashed) form of the network address used to create an account for about one hour.
• Referral codes. If you enter a referral code or follow a referral link, we record which code you used and whether you opened Qiva on the third day after signing up, to pay the person who referred you a bonus. To detect duplicate or fraudulent referrals, we keep scrambled (hashed) forms of your email address and network address, and we delete the network address form after 30 days. The person who referred you is not shown your account. We never import your contacts.
• Technical data needed to run and secure the service, such as your app version and server logs.

c. What stays on your device

• Dictation. On iOS 26 and later, dictation runs entirely on your device. On the web, it runs on your device where your browser can do that. Otherwise, some browsers use their own speech service, which may send the audio to the browser's maker, and we tell you the first time. The audio is not sent to us.
• Face ID. If you turn on the app lock, Face ID runs on your device. We never receive biometric data.
• Drafts you save are kept on your device or in your browser only.
• Saved copies. To open quickly, the app and the website keep copies of what you have recently read on your device or in your browser. They are cleared when you sign out or delete your account.

3. How we use information

We use the information above to:

• create your account and sign you in;
• publish your entries, replies, and handle, and run the feed, search, and place pages;
• check entries and replies for harmful content before they post (section 4);
• cast names you write, if Qiva finds any;
• generate your Insights and answer what you ask it (section 4);
• send the notifications you allow;
• handle reports, blocks, and support requests, and keep the community safe;
• understand how the app is used so we can improve it;
• prevent abuse and comply with the law.

Legal bases (EEA and UK). We process data to provide the service you asked for (our contract with you), with your consent where we ask for it (location and notifications, which you can withdraw in your device settings), and for our legitimate interests in keeping Qiva safe and working.

4. Automated processing

Some features use an AI model provided by OpenAI. We send it only what the feature needs:

• Support resources. If an entry or reply suggests you may be in crisis, Qiva can show you support resources, including 988 in the United States. We keep a private note that this happened, without any copy of the text, and for about 48 hours Ask may take more care in how it answers you. The note is deleted with the entry or your account. This is not medical care or monitoring, and nobody is contacted for you.
• Safety checks. Every entry, reply, edit, and the line under your handle is checked before it posts for four things: a targeted attack on a real person or group, a threat, somebody else's personal information, and illegal content. If a check finds a problem, the entry does not post and you see why. If a check cannot finish in time, the entry waits privately and is checked again shortly after. If that later check finds a problem, the entry is held and you are told.
• Casting. Possible names in your writing are checked so that ordinary words are not mistaken for people.
• Insights and Ask. A private reading of your own writing, visible only to you. Your entries are sent to the model to write your findings and answer your questions. Without Gold, you get one set of findings and one Ask question a month. If you have Gold, the conversations you have with Ask are kept so you can reopen them, until you delete them or your account.
• Place names. Names suggested for new places are checked before they are added.

OpenAI processes this data on our behalf and does not use it to train its models under the terms of our agreement. These automated decisions can be appealed by writing to hello@qiva.me.

5. Who can see what

Who wrote an entry is not hidden from us. Our moderation tools show an entry and the reason it was reported or held. They do not show who wrote it. Two named people at Qiva can look up the writer of an entry when it is needed for safety or the law. Each lookup requires a written reason and is recorded in a log that the person running it cannot change. Anyone who administers our database could reach that information without the log. We would rather tell you this plainly than promise something we could not stand behind.

6. How we share information

We do not sell or rent your personal information. We share it only with:

• Service providers who run parts of Qiva for us, under contract:
  • Supabase: database, sign-in, storage, and servers.
  • OpenAI: the automated processing in section 4.
  • Resend: sending sign-in codes by email.
  • Apple and Google: sign-in if you choose them, and app distribution. Apple also handles subscription and message pack payments and delivers push notifications on iPhone.
  • Expo: push notification delivery.
  • Wikidata: when you search for a film, your search words are sent to Wikidata to find it. Nothing about you is sent.
• Other people using Qiva, as described in section 5.
• Legal and safety recipients, when we believe in good faith that the law requires it or that it is necessary to protect someone's safety or the integrity of the service.
• A successor, if Qiva is part of a merger, acquisition, or sale of assets. We will tell you before your data comes under a different privacy policy.

Some of these providers process data in the United States. Where the law requires it, we rely on appropriate safeguards for international transfers.

7. How long we keep data

We keep your account and your entries while your account exists. When you delete an entry, it is removed, along with its replies and any voice memo. When you delete your account, everything tied to it is deleted, as listed on our account deletion page. We keep limited records longer where the law requires it, to resolve disputes, or to enforce our terms, such as records of reports and of authorship lookups. We keep a record of each store purchase so that the same purchase cannot be credited twice.

8. Your choices and rights

• Location and notifications. Turn them on or off in your device settings at any time. Qiva works without either.
• Your line. Write it, change it, or clear it in Settings, under Your line.
• Your entries. Edit or delete any of them from the entry's menu. There you can also turn off replies and hide the Felt count on an entry. Privacy in Settings sets the defaults for new entries.
• Usage events. Qiva has no in-app switch for these today. Write to hello@qiva.me and we will stop recording events for your account.
• Export. With Gold, you can export your entries from Settings.
• Delete your account. Settings, then Delete account. This cannot be undone. Deleting your account does not cancel an Apple subscription; cancel it in your Apple account settings.
• Your rights by law. Depending on where you live (for example under the GDPR or California law), you may have the right to access, correct, delete, or receive a copy of your data, and to object to or restrict some processing. Write to hello@qiva.me. We will not treat you differently for using these rights.

9. Security

We use encryption in transit, row-level access rules in our database, and server-side checks on every write. Your cast's real names are encrypted with a key that is not stored in the database. No system is perfectly secure, but we work to protect what we hold and to collect as little as we can.

10. Children

Qiva is not for children. You must be at least 18 years old, or older if your country's age of digital consent is higher. We do not knowingly collect data from anyone younger. If you believe a child has given us data, write to hello@qiva.me and we will delete it.

11. Changes to this policy

We may update this policy as Qiva changes. If we make a material change, we will update the date at the top and tell you in the app.

12. Contact

Wallizada LLC, operator of Qiva
Email: hello@qiva.me

© 2026 Wallizada LLC. All rights reserved.