1. Data Controller
The data controller for this Service is:
- Service Name: RoundQ
- Website: roundq.app
- Contact Email: privacy@roundq.app
2. Purpose of Data Collection
We collect your personal data for the following purposes:
- Account creation and authentication
- Providing friend circle Q&A service functionality
- Service-related notifications and communication
- Maintaining service security and preventing abuse
3. Categories of Data Collected
We collect the following categories of personal data:
Required Data
- Email addressUsed for account registration, login, and notifications
- Name/Display nameUsed to identify you within friend circles
- Password hashOnly for email registration (we do not store plain text passwords)
Optional Data
- Profile pictureYou may upload a custom avatar or use your Google account avatar
- User-generated contentIncluding circles you create, rounds you initiate, responses, comments, and reactions
- Uploaded imagesImages you insert in your responses
Automatically Collected Data
- Login session cookiesUsed to maintain your login state
- Language preferenceRemembers your chosen interface language (Traditional Chinese or English)
- Technical dataYour IP address and browser user agent are recorded with your login sessions and push notification subscriptions, used for security and abuse prevention
- Usage and error dataPages visited, device and browser information collected by Google Analytics and Cloudflare Web Analytics; error reports and, for a sample of sessions, session replays (text inputs masked) collected by Sentry
4. Data We Do NOT Collect
To protect your privacy, we explicitly do not collect:
- Geographic locationWe do not detect or store your location information
- Payment informationThis is currently a free service; we do not collect any payment data
5. Data Usage Period, Region, and Recipients
Usage Period: Your data will be retained until you delete your account. When you delete your account, all your personal data will be permanently deleted.
Usage Region: Your data is stored and processed in Cloudflare data centers; the primary database and file storage are located in the Asia-Pacific (APAC) region. Data sent to the other third-party services listed below is processed in their own data centers.
Recipients: Limited to what is necessary for operating this Service. We do not sell or share your personal data with third parties for advertising purposes.
6. Third-Party Services
This Service uses the following third-party services:
- CloudflareHosts the Service and its API (Workers), stores the database (D1) and uploaded files (R2), sends account emails such as verification, sign-in, and password reset links (Email Service), and measures site traffic without cookies (Web Analytics). User authentication runs on our own server code on Cloudflare; it is not handled by a separate authentication provider.
- Google OAuthIf you choose to sign in with Google, we receive your name, email, and avatar URL from Google. You can revoke this authorization at any time in your Google account settings.
- Google AnalyticsMeasures how the Service is used (pages visited, device and browser information) and sets analytics cookies.
- SentryReceives error reports and, for a sample of sessions, session replays to help us find and fix bugs. Without your consent in settings, error reports only identify you by your user ID.
- Web PushIf you enable push notifications, your browser's push service (for example Google, Apple, or Mozilla) delivers encrypted notifications to your device.
7. Your Rights
Under Taiwan's Personal Data Protection Act, you have the following rights:
- Query or request access to your personal data
- Request supplementation or correction of your personal data
- Request deletion of your personal data (account deletion)
- Request cessation of collection, processing, or use of your personal data
- Withdraw your consent
To exercise these rights, please use the settings page or contact our support email.
9. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including: HTTPS encrypted transmission, access checks enforced by our server on every request, secure password hashing, and regular security reviews.
10. Policy Changes
We may update this Privacy Policy from time to time. When significant changes are made, we will notify you within the Service. We recommend regularly reviewing this page to stay informed about our privacy protection measures.
11. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data subject rights, please contact us at privacy@roundq.app.