Privacy Policy

1. Who We Are

Quadrant is a personal task management application operated by Preet Kamal Singh Minhas. This policy explains what data we collect, why we collect it, and how you can control it.

2. Data We Collect

We collect only what is necessary to provide the Service:

• Email address — provided when you sign in. Used solely for authentication (sending your magic link).
• Task content — the text of tasks you create. Stored privately and only accessible to your account.
• Analytics events — when you sign up or visit the app, we record the event type, date, your country and region (derived from your IP address by our hosting provider), and the HTTP referrer of the request. We do not store your raw IP address in our own database.
• IP address — used transiently for rate limiting (to prevent abuse of the sign-in flow). Passed to Upstash Redis as a hashed counter key and not retained beyond the rate-limit window.
• Session data — a short-lived session token stored in a cookie to keep you signed in. No tracking cookies are used.

3. How We Use Your Data

• To authenticate you and provide access to your tasks.
• To understand aggregate usage patterns (e.g. how many people sign up per day, which countries use the app). This data is never shared or sold.

We do not use your data for advertising or profiling.

4. Third-Party Services

We use a small number of third-party services to operate Quadrant. Each receives only the data necessary for its function:

• MongoDB Atlas — cloud database where your tasks, account, and analytics events are stored.
• Resend — transactional email service used to send your magic sign-in link. Receives your email address and nothing else.
• Upstash Redis — serverless Redis used for rate limiting. Receives your IP address (for sign-in rate limits) and your account ID (for task mutation rate limits) as opaque counter keys. No other personal data is shared.
• Hosting provider — the platform serving the application. May log standard HTTP request data (IP address, user agent) per their own privacy policy.

5. Data Retention

Your account and task data are retained for as long as your account exists. Analytics events are retained indefinitely in aggregate form.

You can permanently delete your account and all associated data at any time from Settings → Delete my data. Deletion is immediate and irreversible.

6. Cookies

We use a single session cookie to keep you signed in. It contains an encrypted token and no personal information. No third-party or advertising cookies are set.

7. Your Rights

You have the right to:

• Access the data we hold about you — contact us at the email below.
• Delete your data — use the Delete my data option in Settings, or contact us.
• Object to processing — if you believe we are processing your data unlawfully, contact us or your local data protection authority.

8. Children

Quadrant is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

9. Changes to This Policy

We may update this policy from time to time. We will update the effective date at the top of this page. Continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

10. Governing Law

This policy is governed by the laws of United Kingdom.

11. Contact

Questions or requests regarding your data? contact@withpreet.com