Privacy Policy

Quok ("we," "us," or "our") operates the Quok platform, an end-of-life planning and checklist management service. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website and services (collectively, the "Service"). By accessing or using the Service, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

We collect the following categories of personal information in connection with providing the Service:

2. What We Don't Collect

We are committed to collecting only the information necessary to provide the Service. We do not collect:

• Passwords. We use passwordless authentication exclusively. You never create or provide a password to use Quok.
• Social Security numbers or government-issued identification numbers of any kind.
• Financial account numbers, including bank account numbers, credit card numbers, or other payment instrument details.
• Health information, including protected health information (PHI) as defined under HIPAA or any equivalent regulation.
• Biometric data, including fingerprints, facial recognition data, voiceprints, or any other biometric identifiers.

3. How We Use Information

We use the information we collect for the following purposes:

• Service delivery and maintenance. To provide, operate, and maintain the Service, including generating personalized checklists, tracking your progress, and storing your content.
• Authentication. To send magic link emails that allow you to securely sign in to your account without a password.
• Location-specific content. To customize your checklist with tasks and information relevant to your US state and county, such as jurisdiction-specific legal requirements and filing procedures.
• Transactional communications. To send you essential service-related emails, including magic link authentication emails, account notifications, and important updates about the Service.
• Service improvement and bug fixes. To analyze usage patterns, diagnose technical issues, and improve the performance, reliability, and features of the Service.
• Legal compliance. To comply with applicable laws, regulations, legal processes, or enforceable governmental requests.

We do not send marketing emails or promotional communications. We do not sell, rent, or trade your personal information to any third party for any purpose.

4. How We Share Information

We may share your personal information only in the following limited circumstances:

• Service providers. We share information with trusted third-party service providers who assist us in operating the Service, including cloud infrastructure hosting and email delivery services. These providers are contractually obligated to use your information only as necessary to perform services on our behalf and to maintain appropriate security measures.
• Legal requirements. We may disclose your information if required to do so by law, or in response to valid legal process, including lawful requests, subpoenas, court orders, or government investigations.
• Business transfers. In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you of any such change in ownership or control of your personal information.
• With your consent. We may share your information with third parties when you have given us explicit consent to do so.

We do not sell or share your personal information as defined under the California Consumer Privacy Act (CCPA) or any other applicable privacy law.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. If you request deletion of your account, we will retain your data for a period of 30 days to allow for account recovery, after which your personal information will be permanently and irreversibly deleted from our systems.

Automatically collected data, such as server logs and analytics data, is retained for up to 12 months and is then deleted or anonymized. We may retain certain information for longer periods as required by law or to resolve disputes, enforce our agreements, or protect our legal rights.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols.
• Encryption of data at rest using industry-standard encryption algorithms.
• Access controls that restrict access to personal information to authorized personnel on a need-to-know basis.
• Regular security assessments and monitoring of our systems.

However, no method of electronic transmission or storage is 100% secure. While we strive to use commercially reasonable means to protect your personal information, we cannot guarantee its absolute security. Because Quok uses passwordless authentication via your email address, we strongly recommend that you protect access to your email account with a strong password and two-factor authentication, as your email is the sole method of accessing your Quok account.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal information:

• Right to know. You have the right to request information about the categories and specific pieces of personal information we have collected about you, the purposes for which we use it, and the categories of third parties with whom we share it.
• Right to delete. You have the right to request the deletion of your personal information, subject to certain exceptions provided by law.
• Right to correct. You have the right to request that we correct inaccurate personal information that we maintain about you.
• Right to data portability. You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format.
• Right to opt-out of sale. Although we do not sell your personal information, you have the right to direct us not to sell your personal information.
• Right to non-discrimination. We will not discriminate against you for exercising any of your privacy rights. You will not receive different pricing, quality of service, or access to features for exercising your rights.

To exercise any of these rights, please contact us at [email protected]. We will respond to verifiable requests within 30 days. In certain circumstances, we may require up to 45 days to respond, in which case we will notify you of the extension and the reason for it.

8. Do Not Sell / Do Not Share

Quok does not sell or share your personal information. We have not sold or shared personal information in the preceding twelve (12) months. We do not use your personal information for cross-context behavioral advertising. We do not have actual knowledge that we sell or share the personal information of consumers under 16 years of age.

9. Cookies and Tracking

We use a minimal set of cookies that are strictly necessary for the operation of the Service:

• Session cookies. Used to maintain your authenticated session after you sign in via a magic link. These cookies expire when your session ends or after a defined period of inactivity.
• Preference cookies. Used to remember your settings and preferences, such as your display mode (light or dark theme).

We do not use third-party advertising cookies, behavioral tracking cookies, or social media tracking pixels. We do not participate in any advertising networks or retargeting programs. You can manage or delete cookies through your browser settings. Please note that disabling session cookies may prevent you from using the Service, as they are required for authentication.

10. Children's Privacy

The Service is not directed at children under the age of 13 (or under the age of 16 for residents of California). We do not knowingly collect personal information from children under these ages. If we become aware that we have inadvertently collected personal information from a child under the applicable age, we will take steps to promptly delete that information from our systems.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at [email protected] so that we can take appropriate action.

11. International Users

Quok is a United States-based service. All data is stored and processed on servers located in the United States. If you access the Service from outside the United States, please be aware that your information will be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

By accessing or using the Service from outside the United States, you consent to the transfer of your personal information to the United States and acknowledge that your information will be subject to United States law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make changes, we will update the "Last updated" date at the top of this page and post the revised policy on the Service.

For material changes that significantly affect how we collect, use, or share your personal information, we will notify you by sending an email to the address associated with your account prior to the changes taking effect. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the updated policy.

We encourage you to review this Privacy Policy at least annually to stay informed about how we are protecting your information.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

[email protected]

Please include "Privacy Request" in the subject line of your email so that we can direct your inquiry to the appropriate team. We will acknowledge receipt of your request and respond within 30 days.