QBase AI LLC, a Texas limited liability company ("QBase AI", "we", "us"), makes Q, an app for Mac, iPhone and other Apple devices in which you work with an AI assistant that uses your own knowledge and the services you connect to it. This policy covers Q, your QBase account at account.qbaseai.com, and this website. It says what information is involved, where it is kept, who else handles it, and what you control.
1. The short version
- Your work in Q is kept on your own devices and, if you use iCloud, in your own iCloud account. QBase AI runs no service that stores it, and no one at QBase AI can read it.
- To answer you, Q sends your request, and the material that request needs, to the AI model that serves Q. That is the only reason your content leaves your devices.
- Q cannot use a service you connect until you allow it, one tool at a time, and for each tool you decide whether Q has to ask you first.
- Information Q receives from Google is used only to do what you asked. It is not sold, not used for advertising, and not used to train AI models.
- What QBase AI holds about you is an account record: your name and email address, your plan, your devices, and how much of your allowance has been used.
2. What Q keeps, and where
Q keeps these on the device you use it on:
- your conversations with Q, and the files and pictures made in them;
- the notes you write about yourself and your organization;
- documents you add, and the packs you install with the data they keep;
- your lenses (the roles Q works under), your motions (tasks you have set Q to repeat) and the record of each run;
- captures (section 3);
- your connections to other services (section 5);
- a record of every tool Q used and every action it took, signed by the device that took it.
If you are signed in to iCloud, Q keeps your devices in step through your own iCloud account, with the text held in iCloud's encrypted fields. Apple holds that data for you under your agreement with Apple. QBase AI operates no sync service and holds no copy. Not everything travels: packs are installed on each device, and the sound of a capture stays where it was recorded.
Sign-ins and keys are kept in the Apple Keychain. If you use iCloud Keychain, your sign-ins to connected services travel to your other devices through it.
Q itself sends no usage analytics to QBase AI. If you have chosen in your Apple settings to share diagnostics with app developers, Apple may pass us crash reports.
3. Voice and Capture
- Talking to Q. What you say is turned into text on your device. The sound is not kept and does not leave the device.
- Q reading aloud. The speech is made on your device.
- Capture. When you start a capture, Q records the sound around you and writes down what was said, on your device. The recording stays on the device that made it until you delete the capture; a recording made on an Apple Watch is handed to your iPhone and removed from the Watch. The written record is kept like the rest of your work (section 2).
- Voices. If you set up voice labels, Q tells the voices in a capture apart. To do that it keeps, with each capture, a numeric fingerprint of each voice heard in it, and it learns a fingerprint of your own voice from the times you dictate, so it can mark which words were yours. Q recognizes another person's voice from one capture to the next only if you name them and turn on remembering voices, which is off until you do. Fingerprints are kept with your work on your devices and in your iCloud, are never sent to an AI model or to QBase AI, and are deleted with the capture or the speaker they belong to.
- Calendar. When you start a capture, Q may look at your device's calendar to give the capture a name. Nothing is written to your calendar.
The speech models Q uses are downloaded to your device once.
4. The AI model
When you ask Q something, or a motion runs, Q sends the model service what the request needs: your words, the conversation so far, the notes you have written about yourself and your organization, passages found in your documents and packs, and the results of any tools used along the way, which can include content from a service you connected. A picture you ask Q to make is requested the same way.
These requests go from your device straight to the model service over an encrypted connection. They do not pass through QBase AI's systems.
The model service works on our behalf. It may use what it receives only to return the answer, and it may not use it to train or improve AI models.
If you set Q to use a model service of your own choosing, that service's terms apply to what Q sends it.
When Q reads a web page for you, that site receives the request as it would from any visitor.
5. Connected services and Google user data
You connect a service to Q yourself, and you sign in to it with that service, in your own browser. Q keeps the sign-in in the Keychain (section 2). Q can then use the tools that service offers, within limits you set:
- every tool starts switched off for every lens. Q cannot see or use it until you turn it on;
- for each tool you choose how far Q may go: propose a step for you to carry out yourself, prepare it and wait for your approval every time, or carry it out without asking, within conditions you set;
- every use is written to the record described in section 2.
You can connect Gmail, Google Calendar, Google Drive and Google Docs. Google's own consent page lists the permissions Q is asking for, and Q can do nothing that page did not list.
What Q accesses. The email address of the Google account, to label the connection. Then, for the services you connected: Gmail messages, threads, labels and drafts; Calendar events; and files and documents in Drive and Docs.
How Q uses it. Only to carry out what you ask in a conversation, or what a motion you set up tells it to do: finding and reading what is relevant, summarizing it, drafting for you and, where you have allowed that tool, making a change in your Google account such as saving a draft, sending a message or applying a label.
How it is stored. Q does not copy your mailbox, your calendar or your files. What a tool returned is kept with the conversation or run that used it, and in a pack's own data where a pack you installed records it, on your devices and in your iCloud (section 2), until you delete it.
How it is shared. The parts a request needs are sent to the AI model, as section 4 describes. Google user data is shared with no one else, and it never reaches QBase AI's systems.
Limited Use. Q's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- Google user data is used only to provide the features of Q that you can see and control.
- It is not transferred to anyone except the AI model service, as needed to provide the feature you used, or where the law requires it.
- It is not used to serve advertisements.
- It is not used to create, train or improve AI or machine-learning models.
- No person at QBase AI reads it. It is not on our systems.
Disconnecting. You can disconnect a Google account in Q at any time, which removes its sign-in from your devices. You can also withdraw Q's access at https://myaccount.google.com/permissions. What Q already saved from that account stays until you delete it.
6. Your QBase account
You sign in at account.qbaseai.com with Apple, Google or Microsoft, or with a link we email you. That gives us your name and email address, and nothing else from those accounts.
Your account record holds:
- your name and email address;
- your plan and its status;
- each device you activate: the name you gave it, what kind of device it is, when it was activated and when it last checked in;
- how much of your AI allowance has been used in the current period, as a total. It does not include what you asked or what Q answered;
- a log of account events such as sign-ins and device activations, and the internet address requests come from, to limit abuse.
Q contacts the account service to activate a device, to check your plan, to learn whether a newer version of Q is available, and to download packs. The Mac app downloads its updates from our update service.
7. This website
- Forms. When you send us a form, we keep what you entered so we can answer you.
- Foundation Check. What the check records is set out in the Foundation Check terms.
- Visits. We keep our own record of visits to this site: the pages viewed and links followed, the site you came from and any campaign tags on the link, the kind of device, browser and operating system, and a random identifier stored in your browser so that visits from the same browser can be counted together. The site carries no advertising trackers.
- Email. If you give us your email address we may write to you about what you asked for. Every such message carries a way to stop them.
- Purchases. Payments on this site are taken by a payment processor. We do not receive or store your card number.
8. Who else handles your information
- The AI model service, as section 4 describes.
- Apple, for iCloud and the Keychain, under your own Apple account.
- The services you connect, under your own agreement with each.
- Companies that host the account service and this website, deliver our email, and take payments on this website. They handle the account and website information in sections 6 and 7 on our behalf.
We do not sell personal information, and we do not share it for advertising.
9. Security
- Sign-ins and keys are kept in the Apple Keychain, not in Q's own files.
- Q's connections to the account service, the AI model service and Google are encrypted in transit.
- Each device signs its own entries in the record of what Q did, so a later change to that record can be detected.
- The account service keeps a device's secret only in a form that cannot be read back.
10. Keeping and deleting
- In Q. You can delete a conversation, a document, a capture or a pack. It is removed from that device and, for anything that syncs, the removal is carried to your other devices.
- A whole device. You can erase Q's data from a device inside Q. Erasing one device leaves the copies on your other devices in place. You can remove Q's data from iCloud in your Apple account's storage settings.
- Your account. Write to privacy@qbaseai.com to have your account record deleted. We will do it within 30 days.
- Website information. Write to the same address.
We keep account and website records for as long as the account is open or the reason we collected them lasts, and afterwards only as long as the law requires.
11. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal information, or to object to or restrict how it is used. Because your work lives on your own devices, most of this is in your hands inside Q. For anything we hold, write to privacy@qbaseai.com. We will answer within 30 days.
12. Children
Q is for adults. We do not knowingly collect information from anyone under 18.
13. Changes
We will post any change to this policy on this page and update the effective date. Before a material change to how Google user data is handled takes effect, we will also email the address on your account.
14. Contact
QBase AI LLC
5473 Blair Rd Ste 100 Num 554777
Dallas, TX 75231
privacy@qbaseai.com