1. Introduction

Quad ("we," "us," "our") is operated by Atlas Studios LLC, a North Carolina limited liability company.

This Privacy Policy explains how we collect, use, store, and disclose information when you use our mobile app or web platform ("the Service").

By using the Service, you agree to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

We collect information you provide directly, including:

• Account information: name, email address, university domain (.edu), password
• Profile details: gender (optional), phone number (required for Host applicants), social handles (e.g., Instagram)
• Event activity: event registrations, check-ins, and QR code usage
• Host application details: responses and materials submitted when applying to become a Host
• Communications: messages, support requests, and feedback

2.2 Automatically Collected Information

We automatically collect limited technical and usage data when you use the Service:

• Device information: device type, operating system, device identifiers
• Usage data: screens viewed, features used, in-app activity
• Log data: IP address, browser type, timestamps, referring URLs
• Analytics data: signups, logins, event interactions, check-ins, engagement metrics

Important:

We do not collect GPS or real-time device location.

Event locations are provided by event Hosts and are not tied to your physical location.

3. How We Use Your Information

We use your information to:

• Operate, maintain, and improve the Service
• Verify student status using university (.edu) email addresses
• Process event registrations and provide QR codes for check-in
• Determine eligibility for certain events (e.g., demographic-based event settings if voluntarily provided)
• Manage Host applications and permissions
• Communicate about events, updates, and support
• Monitor usage, troubleshoot issues, and enhance user experience
• Protect the integrity and safety of the Service
• Comply with legal obligations and enforce our Terms of Service

We do not use your information for automated decision-making that produces legal or significant effects.

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information.

We only share information in the following limited circumstances:

4.1 Event Participation

Hosts can verify your attendance only by scanning your QR code. They cannot view your name, email, or profile details.

Other participants cannot see your personal information.

Administrators may access names/emails solely for event management, support, or safety purposes.

Optional gender information, if provided, may be used for event balancing but is never shown to attendees.

4.2 Service Providers

We use trusted vendors to operate the Service, such as:

• Supabase (database, authentication, hosting)
• Email delivery providers (verification and notifications)

These providers access data only as necessary to perform tasks for us and are contractually obligated to protect it.

4.3 Legal Requirements

We may disclose information if required to do so by law, legal process, or valid request from authorities.

4.4 Business Transfers

If we undergo a merger, acquisition, or asset sale, user information may be transferred as part of that transaction.

5. QR Codes and Event Check-In

When you join an event:

• You receive a unique, event-specific QR code
• Hosts may scan it to confirm attendance
• Scanning does not reveal your identity
• QR codes are encrypted and accessible only to authorized Hosts and administrators

6. Data Security

We use reasonable technical and organizational safeguards to protect your data, including:

• Encrypted database storage
• Secure authentication
• Access controls and role-based administrative permissions

However, no online system is entirely secure. By using the Service, you agree to the inherent risks of transmitting data over the Internet.

7. Your Rights and Choices

You may exercise the following rights:

• Access & Update: Modify your profile and account settings
• Deletion: Request deletion of your account and associated personal data
• Portability: Request an export of your personal data
• Communications: Opt out of non-essential emails anytime

We respond to verified requests within a reasonable time.

8. Data Retention

We retain personal information only as long as necessary to:

• Provide the Service
• Support event history
• Meet legal obligations

If you delete your account, we delete or anonymize your personal data within a reasonable period unless retention is legally required.

Aggregated, anonymized analytics data may be kept longer for service improvement. This data cannot identify you.

9. Children's Privacy

Quad is for university students aged 18+.

We do not knowingly collect information from individuals under 18.

If we discover such data, we will delete it promptly.

10. International Data Transfers

Your data may be processed in the United States or other locations with different data protection laws. By using the Service, you consent to these transfers.

11. University Independence

Quad is an independent platform operated by Atlas Studios LLC.

We are not affiliated with, endorsed by, sponsored by, or operated by any university.

Universities have no responsibility for:

• Events on Quad
• Hosts or Host conduct
• Sponsored or business-hosted events
• Interactions between participants
• Quad's platform or operations

Use of university email addresses is solely for verification.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically.

The "Last Updated" date reflects the latest version.

Significant changes may be announced via app notice or email.

Continued use of the Service means you accept the updated Policy.

13. Contact Information

For questions or privacy requests:

Email: quadeventsus@gmail.com

Entity: Atlas Studios LLC

Location: Chapel Hill, North Carolina, USA