Effective Date: January 8, 2026
ConsistencyForge ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. This policy applies to both Adult Accounts and Minor Sub-Accounts.
The data controller responsible for your personal data is:
Quantum Media Technologies sp. z o.o.
Slezna 104 / #2A
53-111 Wroclaw, Poland
Tax ID: PL8971768021
Contact: privacy@qmt.email
We collect information you voluntarily provide when using our service:
| Data Type | Purpose | Required |
|---|---|---|
| Email address | Account creation, authentication, notifications | Yes |
| Display name | Personalization, communications | No |
| Timezone | Scheduling check-ins at appropriate times | No (defaults to UTC) |
| Contract titles & descriptions | Service functionality | Yes (for contracts) |
| Special dates (birthday, etc.) | Excluding check-ins on special days | No |
| Gender preference | Rank name personalization | No |
| Minor's information (for Sub-Accounts) | Supervised account functionality, task certificates | Yes (for Minor Sub-Accounts) |
| Shared commitment data | Group participation, comments, check-ins, invitations | Yes (for shared commitments) |
We automatically collect certain information when you use our service:
When you make a payment, Stripe (our payment processor) collects payment card information directly. We receive only:
We never receive, store, or have access to your full credit card number.
We use your information to:
We may also use your information for:
We engage in the following automated processing activities:
Profiling, scoring, gamification, and behavioral analysis apply to both Adult Accounts and Minor Sub-Accounts. For minors, this processing occurs under the supervision and with the consent of the Supervising Adult, who has full visibility into the minor's data and can manage preferences.
If you are in the EEA, UK, or Switzerland, you have rights regarding automated decision-making that produces legal or similarly significant effects:
Most of our automated processing (gamification, scoring) does not produce legal or similarly significant effects, but we provide these safeguards for transparency. Contact us to exercise these rights.
For users in the European Economic Area (EEA), UK, and Switzerland, we process your data based on:
| Processing Activity | Legal Basis |
|---|---|
| Account creation and management | Contract performance |
| Check-in reminders and notifications | Contract performance |
| Payment processing | Contract performance |
| Gamification and scoring | Contract performance / Legitimate interest |
| Marketing and promotions | Legitimate interest / Consent (where required) |
| Analytics and optimization | Legitimate interest |
| Data sharing with partners | Legitimate interest / Consent (where required) |
| Minor Sub-Account processing | Parental consent (GDPR Art. 8) |
| Shared commitment participation | Contract performance / Consent |
| Data sharing with group members | Consent (by joining the commitment) |
| Invitation email disclosures | Consent (by sending invitations) |
| Legal compliance | Legal obligation |
We retain your data based on the following criteria:
| Data Type | Retention Period |
|---|---|
| Account data | Duration of account + 3 years after deletion request |
| Contract data | Duration of account + 3 years (for analytics and disputes) |
| Check-in and activity history | Duration of account + 3 years |
| Points and rank history | Duration of account + 3 years |
| Task completion certificates | Duration of account + 3 years |
| Magic link tokens | 15 minutes (auto-deleted) |
| Session tokens | 30 days (auto-deleted) |
| Payment records | 7 years (legal requirement) |
| Analytics data | 5 years (for product improvement) |
| Shared commitment data | Duration of membership + 3 years |
| Comments in shared commitments | Duration of membership + 3 years |
| Shared commitment invitations | 24 hours (auto-deleted if not accepted) |
We may retain data longer where required for legal compliance, dispute resolution, fraud prevention, or legitimate business purposes such as analytics and product improvement.
Your data may be processed in countries outside your residence to support our global business operations. This includes transfers to:
We ensure appropriate safeguards are in place, including:
We implement appropriate security measures including:
No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security of your data.
A "Minor Sub-Account" is an account for a user under 18 years of age, created and controlled by a verified Adult Account holder (the "Supervising Adult") who is the minor's parent or legal guardian.
Parental consent required under Article 8 for children under the applicable age of digital consent (13-16 depending on member state).
Verifiable parental consent required for children under 13 before collecting personal information.
For Minor Sub-Accounts, we collect and process:
Minor Sub-Account users may generate daily certificates confirming completion of tasks assigned by the Supervising Adult. These certificates are automatically shared with and delivered to the Supervising Adult as a core feature of the Service.
The Supervising Adult may, on behalf of the minor:
Important: All data processing for Minor Sub-Accounts occurs only with and under the authorization of the Supervising Adult. Privacy rights for minors are exercised by the Supervising Adult.
You have the right to:
If you are in the European Economic Area, UK, or Switzerland, you also have:
EU Supervisory Authorities: You have the right to lodge a complaint with a data protection authority in the EU member state where you reside, work, or where the alleged infringement occurred. A list of supervisory authorities is available at edpb.europa.eu.
For Minor Sub-Accounts, all privacy rights are exercised by the Supervising Adult on behalf of the minor. The Supervising Adult may access, correct, delete, or export the minor's data at any time.
To exercise any of these rights, contact us at support@qmt.email. We will respond within 30 days (or sooner if required by law).
If you are a California resident, this section provides additional disclosures required by the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA).
We collect the following categories of personal information:
We use personal information for:
"Sale" under CCPA means exchanging personal information for monetary or other valuable consideration.
"Sharing" under CPRA means disclosing personal information for cross-context behavioral advertising.
We may share personal information with marketing and advertising partners for targeted advertising purposes. This sharing may constitute "sharing" under CPRA. We do not "sell" personal information in exchange for monetary compensation.
As a California resident, you have the right to:
Do Not Sell or Share My Personal Information
To opt out of the sharing of your personal information for cross-context behavioral advertising, contact us at support@qmt.email.
We recognize Global Privacy Control (GPC) signals. If your browser sends a GPC signal, we will treat it as a valid opt-out request for sharing.
Note: Opting out may reduce the personalization and relevance of marketing communications you receive.
We retain personal information as described in Section 6 (Data Retention) above. Retention periods are based on the category of data and the purposes for which it was collected.
Residents of Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Utah (UCPA), and other states with privacy laws have similar rights. Contact us to exercise these rights.
If you appear on our leaderboard ("Hall of Fame"), the following information is publicly visible:
Your email address, contract details, and other personal information are never publicly displayed. Minor Sub-Accounts do not appear on public leaderboards.
We may update this Privacy Policy from time to time. We will notify you of changes by:
For material changes that require consent under applicable law, we will request your explicit consent before implementing those changes. Continued use of the Service after notice of non-material changes constitutes acceptance.
If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:
General Support
support@qmt.emailData Protection Inquiries
privacy@qmt.emailBy using ConsistencyForge, you acknowledge that you have read and understood this Privacy Policy.