iqal.io

Privacy Policy

Last updated: May 25, 2026

1. Introduction

Iqal ("we", "us", "our") operates the website iqal.io and the Iqal mobile applications (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use it, and the rights you have over your data.

2. Information We Collect

  • Account data: name, email address, and authentication identifiers from sign-in providers (Google, Apple).
  • Content you create: prompts, images, videos, chats, and edits generated with the Service.
  • Usage data: features used, credits consumed, device and browser metadata, and IP address for security and analytics.
  • Payment data: handled by Stripe; we do not store full card numbers.

3. How We Use Your Information

  • Provide, maintain, and improve the Service.
  • Process payments and manage your credits.
  • Send transactional and authentication emails (e.g. receipts, password resets).
  • Detect and prevent fraud, abuse, and security incidents.
  • Comply with legal obligations.

4. Sharing of Information

We share data only with service providers needed to run Iqal: cloud hosting and database (Supabase / Lovable Cloud), payments (Stripe), AI model providers (e.g. Google, OpenAI), email delivery, and analytics. We do not sell your personal data.

5. Data Retention

We retain account and content data for as long as your account is active. You may request deletion at any time by contacting us; we will delete or anonymize your data within 30 days unless retention is required by law.

6. Your Rights

Depending on your location (GDPR, CCPA, etc.), you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. Contact us to exercise these rights.

7. Children

Iqal is not directed to children under 13 (or under 16 in the EEA). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.

8. Security

We use industry-standard safeguards including encryption in transit, row-level security on our database, and secret management for credentials. No system is 100% secure; we cannot guarantee absolute security.

9. International Transfers

Your data may be processed in countries other than your own. We rely on standard contractual clauses and provider-level safeguards for international transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced via the Service or by email.

11. Contact

Questions about this policy? Email privacy@iqal.io.