How your family calendar data is stored and used

Your family’s calendar is some of the most personal data there is. Here’s how we treat it - in plain words. The legally binding version is the Privacy Policy.

The short version

No ads. We never sell your data. Quok is a product you use, not a product that uses you.
Your family’s data belongs to your family. Strict isolation is enforced in the database itself - one family can never see another’s data.
No passwords to steal. Sign-in is passwordless (magic links), so there’s no Quok password to leak or reuse.
Encrypted in transit and at rest.

What we store

Your account: email address, display name, optional photo.
Your family’s content: events, lists, member profiles, notes - what you put in.
Device push tokens, only if you enable notifications.
Usage analytics and error reports with identifying details (emails, tokens) scrubbed before they leave the app. We keep these for 12 months to understand what’s working and what’s crashing.
Apple Ads attribution on iPhone, if an adult account arrives through one of Quok’s own campaigns. We keep the first campaign result with the adult account and family for acquisition and subscription measurement. Family content and children’s profiles are not used, and this is not cross-app tracking.
Meta ad measurement so we can tell which of Quok’s own Meta ads bring families in. On the web we tell Meta that an account was created and, later, that the family subscribed, using a hashed email, hashed account ID and the Meta cookies your browser already holds. The iPhone and Android apps include Meta’s SDK only to report that the app was installed and opened, and send the same two events from our servers with basic device details (model, OS and app version, language, time zone, screen size). The advertising identifier is included only if you allow tracking when iPhone asks, or haven’t limited ad tracking on Android. If you ask iPhone not to track you, Meta gets only an anonymous install ID from Quok, never your email or account ID. Family content never leaves Quok for this, children’s accounts are never reported, and turning off usage analytics in Settings stops all of it.
How you found Quok. On your first visit to getquok.com we note the campaign link you followed, the site that sent you, and the first page you saw, and keep that with your account when you sign up, so we know which channels bring families in. The apps record only which store you came from. Turning off usage analytics in Settings stops this.
Calendar imports you enable. Google credentials are encrypted and used only to copy selected calendar events into Quok. On iPhone, Quok reads selected local and iCloud calendars through iOS and does not receive your Apple password. Imports are one-way: Quok never writes to the source calendar. Editing an imported event in Quok disconnects that copy from its source.

AI features and what they send

A few optional features use AI to save you typing. They only ever run when you start them.

Scan a flyer. Pick a photo, and we send that image to an AI provider (OpenAI or Anthropic) to draft an event you then confirm. Only the image, the date, and your timezone go with it - no names, no email address, nothing else from your calendar.
Forward an email. Mail you forward to your family’s Quok address has its subject, body, and sender read by an AI provider to draft an event. Only mail you actually forward.
Connect your own AI assistant. Optional, off by default. If you connect Claude or ChatGPT, that provider handles what it reads under their terms - and you can disconnect any time.

The apps never talk to an AI provider directly; our server does. We don’t use your family’s content to train AI models, and we haven’t authorised anyone else to. Quok works completely without any of this.

Kids’ data

Children don’t have accounts in Quok. A child is a profile inside your family, created and controlled entirely by you - typically just a first name, a color, and whatever schedule you add. You can review, edit, or delete a child’s profile at any time. We never advertise to or profile children.

Where it lives

Quok runs on established cloud providers: application and database hosting in the US (Railway, Cloudflare), analytics hosted in the EU (PostHog), push delivery via Expo, AI extraction via OpenAI and Anthropic in the US (only for the features above), and Google/Apple only if you choose to sign in with them. The full, current subprocessor list is in the Privacy Policy.

Deleting your data

When you delete your account, there’s a 30-day grace window to change your mind. After that:

If you’re the last member, the entire family and all its content is permanently deleted.
If others remain, your personal account is removed and the family carries on without you.

Deleted content can persist in encrypted backups for up to 35 more days before those expire too.

Questions or requests?

Privacy questions, access requests, analytics opt-out: privacy@getquok.com. We’re Quok Labs, an Australian business, and we comply with the Australian Privacy Principles and the Notifiable Data Breaches scheme.