Privacy Policy

01Who we are

This Privacy Policy explains what personal data the QRONOS website at qronos.ai (the “Website”) and the QRONOS mobile application (the “App”) collect, and how it is used, shared and protected. The Website and the App are together the “Service”.

The Service is operated by Qronos AI Pte. Ltd. (UEN 202636102Z), 2 Venture Drive, #19-18, Vision Exchange, Singapore 608526 (“we”, “us”, “our”). We are the controller of the personal data described here.

Data Protection Officer — privacy@qronos.ai. Our Data Protection Officer can be reached at that address, or by post at the address above. Correspondence is monitored during Singapore business hours; our response times are in section 12.

If you do not agree with our policies and practices, your choice is not to interact with the Service.

02What Qronos does

You submit one question about a decision you are weighing. A deterministic calculation builds a structured model from the exact moment you ask, using your local time and time zone. A large language model then interprets that model against our analytical framework and returns a written reading. Further detail is in our Terms of Use.

03Where the Service is offered

The Service is offered only in the territories where the App is listed on the Apple App Store or Google Play. It is not offered in the European Economic Area, the United Kingdom, mainland China, Saudi Arabia, the United Arab Emirates, Türkiye, Brazil or Vietnam, and we do not target, market to, or solicit users there. Section 24 sets out the terms that will apply if and when we open the European Economic Area or the United Kingdom.

04What we collect

Account information. When you register with Sign in with Apple or with a Google account, we receive the email address associated with that account. If you use Apple's Hide My Email, we receive only the relay address Apple generates. We also collect the nickname you choose.

Year of birth is required, and we use it to confirm you are 18 or over.

Gender is required, and is used only by the analytical framework, which reads certain signals differently depending on it. We record it as male or female because that is the distinction the framework draws; it is not a statement about how you identify, and we do not ask for or infer your sexual orientation.

Month, day and hour of birth are optional. They produce a sharper, more personalised reading. You can use the Service without them, and you can remove them later from your account settings.

Your questions and readings. We store the question you submit as you wrote it, a normalised version of it produced by our system, a mathematical representation of it (an embedding) used to recognise when you are asking the same thing again, and the reading returned to you. We keep your question as written because our normalised version does not always capture it faithfully, and we use the original to check the quality of readings.

Time zone of asking. The time zone your device reports at the moment you ask — for example Asia/Singapore. We take the moment itself from our own servers, and we use your time zone to express that moment as your local time and to schedule notifications sensibly. We do not collect your location. Where the calculation needs an approximate longitude, we derive it from the time zone itself, not from your device's location.

Device and security information. IP address, and device-integrity signals provided by Apple DeviceCheck and the Google Play Integrity API. We use these to detect and prevent abuse — principally multiple accounts, automated access and fraudulent purchases. Please see section 13 for an important note about DeviceCheck.

Purchase records. Credit purchases, transaction identifiers issued by Apple or Google, credit balance movements, and refund history. We never see or store your payment card details — Apple and Google process every payment as merchant of record.

Notifications. If you enable push notifications, a device push token.

Technical logs. Our systems automatically record technical information when the App contacts our servers: timestamp, IP address, which function was called, response status, and error information. The full analytical prompt is never written to our logs, and our error handling does not echo the content of a question.

05What we do not collect

• Your legal name, telephone number or postal address.
• Your contacts, calendar, photos, microphone or camera.
• Your payment card or bank details.
• Your sexual orientation, religion, political opinions, or racial or ethnic origin. We do not ask for these and you should not include them in a question.
• Any location data — we do not request or receive GPS, precise, coarse, continuous or background location.

The one that matters most: we never send the content of your questions or your readings to any analytics, measurement or advertising service. Those tools receive events — that a reading was generated, that a screen was opened — never what you asked or what you were told. Section 16 sets out which tools we use and how to opt out.

We do not sell or rent your personal data.

06Sensitive questions

People ask Qronos about real decisions, and a question may reveal something sensitive — a health concern, a relationship, a legal matter, money. We treat the content of your questions as the most sensitive data we hold.

Three consequences follow. Access to question content inside our company is limited to what is needed to operate and improve the Service. Question content is excluded from our technical logs. And where a reading is prepared for publication as an example, the question itself is never published.

Please do not put identifying detail in a question. The analysis does not need it. By identifying detail we mean: the full name of any person; the name of a company, school or organisation; a street address, workplace or other specific place; a phone number, email address or account handle; and any unusual combination of facts that would let someone recognise the person you are asking about.

Write the role instead of the name. “my manager”, “my business partner”, “this company”, “my aunt”, “A” — all of these work, and questions written that way tend to produce better readings, because they describe the decision rather than the person.

07How we use your information

• To deliver readings — building the chart from your time of asking, and generating and returning the analysis.
• To run your account — registration, age verification, credit balances, purchase and refund records, support.
• To recognise repeated questions — so that asking the same thing again returns your original reading rather than consuming another credit.
• To keep the Service secure — detecting and preventing multiple accounts, automated access, fraudulent purchases and other abuse.
• To communicate with you — reading-ready and review-date notifications, service and security notices, and marketing only where you have opted in.
• To improve the Service — see section 8, which sets this out in full.
• To meet legal and accounting obligations, and to establish, exercise or defend legal claims.

Where a refund is requested on a credit purchase, Apple or Google may ask us for information about the purchase in order to decide it. You consent to that disclosure in our Terms of Use.

08Training, improvement and publication

These are three different things and we treat them differently.

1 · Our AI providers do not train on your content. The third-party providers that perform the analysis are engaged under terms prohibiting the use of your content to train their models. Some providers may briefly retain inputs and outputs for debugging or abuse monitoring; where they do, that retention is limited and governed by their terms.

2 · We do use your questions and readings to improve Qronos — and you can switch this off. We may use your question and the reading it produced, with identifying details removed, to refine our analytical framework and to train our own models. Identifying details — names of people and companies, places, and monetary amounts — are stripped before any material enters a training set. No automated process is perfect, which is why we ask you not to put identifying detail in a question in the first place (see section 6). You can turn this off at any time in the App's settings. Turning it off does not affect the readings you receive.

3 · We publish a reading as an example only if you have opted in — and we tell you before we publish any particular one. This is a separate setting, off unless you switch it on. Switching it on does not publish anything by itself: it makes your readings eligible, and before we publish any individual reading we contact you and give you the chance to say no to that one. We publish the reading only — never your question — and we remove names of people and companies first. You can switch it off at any time in settings, or by writing to privacy@qronos.ai. Withdrawal applies going forward, and we cannot recall copies others have already captured.

Our legal basis in Singapore for the use described in point 2 is the Business Improvement Exception in Part 5 of the First Schedule to the Personal Data Protection Act 2012, which permits the use of personal data to improve and develop products and services. That exception covers use, not disclosure — which is why publication under point 3 requires your consent.

09Who processes your information

We do not sell or rent your personal data. We never disclose the content of your questions or readings for advertising, and we never disclose your account information for advertising. Apart from the website advertising tags described in section 16, we share personal data only with service providers acting on our behalf under contract, and where the law requires.

We engage service providers in the following categories:

• Cloud database, authentication and backend hosting — stores your account, questions, readings and credit ledger.
• AI inference providers and the gateway that routes to them — performs the analysis. The gateway passes the request through and does not retain the question or the reading; the only stored copy is in our own database.
• Transactional email delivery — sends account and service messages.
• App distribution and payment — Apple and Google, who are the merchant of record for purchases and who operate the sign-in and device-integrity services we rely on.
• Push notification delivery — where you have enabled notifications.
• Product analytics and error reporting — where used, configured to exclude the content of questions and readings.

Each provider is engaged under contract terms that restrict them to processing your data on our instructions, and that prohibit its use for their own purposes, including model training. We may change or add providers of equivalent standing without notifying you individually; this policy will reflect any change in category.

We may also disclose personal data where required by law or valid legal process, to enforce our Terms of Use, to protect the rights or safety of any person, or in connection with a merger, acquisition or sale of assets — in which case we will notify you before your data becomes subject to a different privacy policy.

10Where your information is processed

We are based in Singapore. Your personal data may be processed, stored or transferred in countries or regions other than the one you live in, including Singapore, the United States, and other jurisdictions in which we or our service providers operate. Members of our team may access it from outside Singapore.

Where we transfer personal data outside Singapore, we take steps to ensure the recipient is bound to a standard of protection comparable to that required by the Personal Data Protection Act 2012, through the contract terms under which we engage them.

11How long we keep it

• Questions and readings — 24 months from delivery of the reading.
• Account information — for as long as your account is open.
• Purchase, credit-ledger and refund records — for the life of the account plus 5 years, to meet Singapore accounting and tax obligations.
• Technical and security logs — 12 months. We keep these for a full year because patterns of abuse and fraudulent registration are often only visible over a long window.
• Material you opted in to publish — for as long as it remains published, and in our records afterwards.

Your credit history outlives your questions. When a question and its reading are deleted at 24 months, the credit-ledger entry recording that a credit was used, and when, is kept under the five-year rule above. That record is what evidences your balance and your purchase history; it holds no question or reading content.

De-identified material that has entered a training set no longer identifies you and is not deleted on the schedule above.

12Your rights

Automated processing. Readings are produced automatically, and no person writes or reviews your reading — this is true of waitlist readings before launch as well as readings in the App. A reading is information for you to weigh; it does not make any decision about you, and it has no legal or similar significant effect on you. Nothing in the Service determines your access to credit, employment, insurance, healthcare or any other service.

Wherever you live, you may ask us to:

• Access the personal data we hold about you, and receive a copy of it.
• Correct anything inaccurate or incomplete.
• Delete your account and the personal data we hold about you.
• Stop using your questions and readings to improve our framework and models — from the App's settings, or by writing to us.
• Withdraw consent to publication, or to marketing email.

Write to privacy@qronos.ai. We respond within 30 days. If we need longer, we will tell you within those 30 days and explain why. We may ask you to verify control of the account before we act. Withdrawing consent to processing that the Service depends on may mean we can no longer provide it to you.

Sections 20 to 24 set out additional rights that apply in particular countries.

13Deleting your account

You can delete your account at any time from within the App — on both iOS and Android — using the Delete my account control in settings. You can also request deletion from the web at qronos.ai/delete-account without opening the App. You do not have to contact us, and you do not have to use up your credits first.

• Any unused credits are forfeited. We will tell you this on screen before you confirm.
• Your account, questions, readings and notification records are deleted within 90 days.
• Purchase and credit-ledger records are retained as set out in section 11, because we are required to keep them.
• De-identified material already in a training set no longer identifies you and cannot be extracted from it.

One thing you should know. Apple's DeviceCheck service stores two bits of information on Apple's own servers, associated with your physical device rather than with your account. We use them to prevent repeated abuse. Those bits survive deleting the App and deleting your account, and we cannot reset them by deleting your data. They do not identify you, and they cannot be used to contact you or to see what you asked.

14Security

Data is encrypted in transit and at rest. Access to production data is restricted, and row-level access rules mean an account can reach only its own records. The full analytical prompt is never logged, and error handling does not echo question content. We review these measures as the Service develops.

No system is perfectly secure, and we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the Personal Data Protection Commission as required by law, without undue delay.

15Children

The Service is intended for people aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, write to privacy@qronos.ai and we will delete it.

16Website, waitlist and measurement

The waitlist. Before the App launches we may offer a small number of free readings through a form on qronos.ai. Where we do, the form collects your nickname, your email address, your year of birth, your gender, and your question. Month, day and hour of birth are optional. A waitlist reading is generated by the same system that will run in the App, using a pre-release build, and we email the result to you. There is no account involved, and no person writes your reading. Everything in this policy about how questions are processed, stored and protected applies to waitlist questions in the same way. We use your email address to send that reading and to tell you once when the App has launched. We will not send you anything else unless you opt in. Waitlist questions and readings are kept under the same 24-month rule in section 11, and you can ask us to delete them at any time.

Measurement and analytics. We use analytics and measurement tools on the website and in the App to understand how they are used, which features people reach, and where they get stuck. On the App this may include a mobile analytics service and a crash-reporting service. On the website this may include a tag manager and advertising-measurement tags, which we use to understand whether our marketing reaches the right people. These run on our public marketing pages only. We do not place any advertising or measurement tag on the waitlist form or its confirmation page.

Cookies and similar technologies. Where the website uses cookies or similar technologies for measurement or advertising, we ask for your agreement first and you can decline without losing access to anything. You can change your choice at any time from the link in the website footer, and you can clear or block cookies in your browser settings. Cookies that are strictly necessary for the site to work do not require agreement and cannot be switched off.

In the App, where a tool would track you across other companies' apps and websites, iOS will ask your permission first and you may decline. Declining does not limit the Service.

Hosting. The website is served by a third-party hosting and content-delivery provider, which records standard technical information — IP address, browser type, pages requested — for security and operations. We may change hosting provider without notifying you individually.

17Email and notifications

Service messages — that your reading is ready, that a review date has arrived, or that something has changed about your account or security — are part of the Service and are sent to the email address associated with your Apple or Google account, or as a push notification if you have enabled them. You can turn push notifications off in your device settings.

Marketing email is sent only if you opt in, and never by default. Every marketing message carries an unsubscribe link, and unsubscribing takes effect promptly. If you joined our waitlist, we will send you one message telling you the App has launched, and nothing further unless you opt in.

Opting out of marketing does not stop service messages, and it cannot — they are how the Service works. After opting out you will still receive: that a reading is ready; that a review date has arrived; changes to your credit balance; security and account notices; changes to these terms; and our replies to things you write to us. You will not receive offers, promotions, feature announcements or re-engagement messages. We do not send invoices or receipts, because Apple and Google issue those.

18Changes to this policy

We may update this policy as the Service develops and as our business and operations require. The “Last updated” date at the top reflects the most recent change. Where a change is material, we will give notice in the App or by email before it takes effect and state the date it takes effect.

19Contact

• Privacy, data protection, and our Data Protection Officer — privacy@qronos.ai
• General and support — hello@qronos.ai
• Legal and intellectual property — legal@qronos.ai

Qronos AI Pte. Ltd. (UEN 202636102Z)
2 Venture Drive, #19-18, Vision Exchange, Singapore 608526

20Singapore supplement (PDPA)

We are established in Singapore and subject to the Personal Data Protection Act 2012 (“PDPA”).

We have designated a Data Protection Officer responsible for ensuring our compliance with the PDPA. Their business contact address is privacy@qronos.ai, and correspondence is answered during Singapore business hours.

Under the PDPA you may request access to the personal data we hold about you and information about how it has been used or disclosed in the past year; request correction of an error or omission; and withdraw consent to our collection, use or disclosure of your personal data, on reasonable notice. We will respond within 30 days, or tell you within 30 days when we will respond.

We rely on the Business Improvement Exception in Part 5 of the First Schedule for the improvement use described in section 8. We rely on consent for publication, and on the legitimate interests and business-improvement provisions for security and abuse prevention.

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Commission of Singapore at pdpc.gov.sg.

21United States supplement

This section applies if you live in a US state with a comprehensive consumer privacy law, including California.

Most of those laws apply only to businesses above a size threshold, and we are below all of them. We do not meet California's revenue threshold, we do not handle the personal information of 100,000 or more California residents, and we do not earn revenue from selling personal information. We set out the following anyway so you know how we handle your information, and we will comply in full if and when a threshold does apply to us.

We do not sell your personal information, and we have not done so in the preceding twelve months.

Our website may share limited information for cross-context behavioural advertising. Where we use advertising measurement tags on qronos.ai, those tags send a limited set of information to the advertising platform — a cookie or online identifier, your IP address, your browser and device type, and which page you visited — so that we can measure and target our marketing. This happens on our public marketing pages only.

It does not involve your account. We do not send your account information, your birth details, your gender, your questions or your readings to any advertising platform, and we do not run advertising tags on any page or screen where a question is written, submitted or answered. The analytics we use inside the App are service providers acting on our instructions and are not permitted to use your information for their own advertising.

You can opt out. Where we run advertising tags on our website, you can decline them when we ask about cookies, and we honour Global Privacy Control signals sent by your browser. There are no advertising tags in the App. Opting out never changes the price you pay or the readings you receive.

We do not use or disclose sensitive personal information for purposes other than those permitted without a right to limit, and we do not use the content of your questions for advertising in any form.

The categories of personal information we collect are: identifiers (an email address, an account identifier, an IP address, a device-integrity signal); commercial information (credit purchases and refund history); internet and network activity (technical logs); approximate location; inferences and content you provide (your questions, the readings produced, and the embeddings derived from them); and characteristics including gender and year of birth. Section 4 describes each in detail, section 7 the purposes, section 9 the categories of recipient, and section 11 how long we keep them.

You have the right to know what we collect and how we use it, to obtain a copy, to correct inaccurate information, to delete your personal information, and not to be discriminated against for exercising any of these rights. Exercising them will never change the price you pay or the readings you receive. To exercise a right, write to privacy@qronos.ai. You may use an authorised agent; we will ask for proof of their authority. If we decline a request you may appeal by replying to our response, and we will re-review it.

22Canada supplement

If you live in Canada, we handle your personal information in accordance with the Personal Information Protection and Electronic Documents Act and applicable provincial legislation, including Quebec's Law 25.

Our Privacy Officer is the Data Protection Officer identified in section 1, reachable at privacy@qronos.ai. You may request access to and correction of your personal information, and may complain to the Office of the Privacy Commissioner of Canada or to the Commission d'accès à l'information du Québec.

Because we treat the content of your questions as sensitive, the improvement and training use described in section 8 is switched off by default for users registered in Canada, and applies only if you turn it on. Marketing email is sent only with your express consent, as required by Canada's anti-spam legislation.

Your personal information is stored and processed outside Canada, including in the United States and Singapore, and is therefore subject to the laws of those jurisdictions and accessible to their courts and authorities in accordance with those laws.

23Australia supplement

This section applies from 10 December 2026, when the small-business exemption in the Privacy Act 1988 (Cth) is repealed. Until that date, sections 1 to 19 apply.

From that date we handle your personal information in accordance with the Australian Privacy Principles. You may seek access to and correction of your personal information under APP 12 and APP 13 by writing to privacy@qronos.ai. We will respond within 30 days.

We disclose personal information to overseas recipients as described in sections 9 and 10, principally in Singapore and the United States, and we take reasonable steps under APP 8 to ensure those recipients handle it consistently with the Australian Privacy Principles.

If you are not satisfied with our handling of a complaint, you may complain to the Office of the Australian Information Commissioner at oaic.gov.au.

24EEA and UK supplement — not yet in effect

This section does not currently apply. The Service is not offered in the European Economic Area or the United Kingdom, and we do not target users there. This section is published in advance, and will take effect only if and when we open those territories. We will update the “Last updated” date and give notice before it does.

When it takes effect, it will set out: our legal bases under Article 6 and, for special-category data, Article 9; our representatives appointed under Article 27 of the GDPR and of the UK GDPR; your rights of access, rectification, erasure, restriction, portability and objection; the safeguards applying to transfers outside the EEA and the UK; your right to complain to your supervisory authority; and our transparency obligations under Article 50 of the EU AI Act.

One consequence you should know in advance: where consent is the required basis, the improvement and training use described in section 8 will be off unless you turn it on, rather than on unless you turn it off.