Data & Security Practices

Your entries are stored in a managed database hosted in the Tokyo, Japan AWS region. Data is encrypted while it travels between your device and our servers (HTTPS/TLS) and encrypted while it is stored, using the encryption provided by our infrastructure providers.

Every table in our database uses row-level security: a request carrying your login can only ever return your own rows. Administrative access is limited to the account owner and is used for support and abuse handling, not for browsing diaries. We do not sell your records, and we do not disclose them to insurers, employers, advertisers or marketers.

• Quies is not end-to-end encrypted — the service has to read your entries to draw your charts and generate reflections.
• We hold no ISO 27001, SOC 2 or equivalent certification.
• We do not claim any system is free of vulnerabilities.
• We make no health, treatment, diagnosis or outcome claim of any kind. Quies is a diary for adults 18+.

We state this plainly so you can make an informed choice about what you record here.

If a data breach occurs that is likely to cause serious harm, we notify the affected users and the Office of the Australian Information Commissioner as required by the Notifiable Data Breaches scheme (Part IIIC of the Privacy Act 1988 (Cth)).

You can cancel yourself, in the app, at any time — no email, no phone call, no retention script. Open Manage subscription and press Cancel. Your paid access continues until the end of the period you have already paid for, and nothing is charged after that. We email you a confirmation showing the exact date access ends.

In the app, open your profile and use the Danger Zone. Deleting your account removes your records from every table that holds them, removes any files you uploaded, cancels any active subscription, and deletes your login itself. It happens immediately and it cannot be undone. You do not have to cancel first — deleting also stops billing.

Contact us through the app or via the contact link on the home page. If you are not satisfied with our response to a privacy complaint, you may escalate it to the Office of the Australian Information Commissioner (oaic.gov.au).