Privacy policy

Personal notes and permissions

Headrz keeps Personal notes, photos, saved links, and the search index on your device. Note search runs on your device. Headrz uses the microphone for voice capture and on-device speech recognition on supported devices. It uses the camera when you take a photo or scan an invitation. You can manage these permissions in system settings.

If you share, open, or export something, the destination you choose may receive it. Files you export or back up are subject to the privacy and retention settings of the location where you store them.

Shared Spaces

Headrz encrypts shared notes, Space names and descriptions, and other shared content on your device before uploading it. Member devices hold the keys needed to read that content. Quinnware’s Spaces service relays and stores the encrypted content and cannot decrypt it. New invitations can be used by one device and expire after one hour if unused. A person who receives a forwarded invitation may redeem it first, so share it only with people you trust.

The service handles information needed to operate Spaces, including app-generated device identifiers and public keys, Space and membership identifiers, join times, record activity, and network information such as IP addresses. This information helps us manage access, sync changes, enforce limits, prevent abuse, and troubleshoot. Connections to the hosted service use HTTPS.

Subscriptions and app verification

Apple and Google process purchases and handle store sign-in and payment information under their own policies. Headrz verifies the purchase and keeps a temporary billing record to finish processing it and authorize your first Space. We create a creator profile only when your first Space is saved. While the profile owns Spaces, the service keeps the purchase reference and subscription status to manage access and recover the profile when you restore purchases. The Spaces service also uses Apple App Attest or Google Play Integrity to verify the app installation and protect requests.

On Android, Google ML Kit processes image and text inputs on your device. Its SDKs send Google information such as app and device details, identifiers, feature usage, and performance and error metrics over HTTPS. Google uses this information to operate, diagnose, and improve those features and prevent abuse. See Google ML Kit’s privacy information.

Service providers help host and operate the website and Spaces service. This website does not use advertising, analytics scripts, or tracking cookies. Hosting infrastructure can process ordinary connection and request information to serve and protect the site. If you email support, we use your email address and the information you provide to respond.

Deletion and retention

Creators can choose Delete space for everyone in Space settings. This removes the shared content, membership records, and invitations from the live service and ends member access. Deleting the last Space you own this way also removes your creator profile, creator credentials, and the purchase references linked to that profile from the live service. If your last Space expires, routine cleanup removes the empty profile. We may briefly keep billing information needed to finish acknowledging a purchase. The store continues to manage your subscription and purchase history.

Leave space removes the Space from your device. Your membership record stays on the service until the Space is deleted or expires. A Space is scheduled to expire after 90 days without qualifying activity or 90 days after its creator’s subscription entitlement ends, whichever comes first.

Deletion cannot recall content that members have already saved or exported. We keep hashed deletion records to prevent deleted Spaces from being restored. Deleted records may remain in infrastructure backups until those backups expire. We may keep operational records as needed for security or legal obligations.

See how to manage or request deletion of your data. For privacy questions, contact support.