Quantum Organic Reality Privacy Policy
Effective September 24, 2026
Nathalie Bonin operates the Quantum Organic Reality website and the Chiron Connect iPhone app used at its events. For privacy questions or requests, contact support@q0r.app. This policy describes the website and app. Before joining an event, you will see its specific agreement and retention periods.
Information we handle
- Account and profile: Your private account ID, the Apple or Google sign-in method you choose, the basic identity and email information that provider supplies, your display name, and your chosen avatar. Google sign-in requests basic profile and email access, not Gmail messages, contacts, calendar, or Drive files.
- Event participation: The event you join, your accepted agreement version and choices, timestamps, band assignment, and connection and readiness status.
- Wearable readings: During sharing, available heart rate and beat-to-beat intervals, their capture timestamps, and measurements calculated by the app, such as a session HRV baseline. Some devices provide fewer readings. During brief interruptions, readings may be queued on your phone for later delivery.
- Service operations: Limited network, device, and security information needed to run the service, troubleshoot failures, and fulfill deletion requests.
How we use it
We use account information for sign-in, profile management, participation history, and access control. We use event and wearable information to connect a band, calculate event measurements, show connection status, and drive the live visual scene. We use operational information for security, reliability, and deletion fulfillment. We do not sell participant data or use wearable readings for targeted advertising or medical, employment, credit, or insurance decisions. The display is an artistic experience, not a diagnosis of health or mood.
Who can see it
Your chosen display name or avatar and an artistic representation of your live state may be visible to people in the room and viewers authorized by the organizer. If enabled by the organizer, the display may also show your heart rate and your HRV change relative to your event baseline. People who know you may recognize your display lane. Organizers and authorized staff can see information needed to run the event. Other participants do not receive your account email or raw beat stream through the normal experience.
Supabase supplies authentication and private data storage; Vercel hosts the website and ingestion service. Apple or Google processes sign-in when selected. The app receives device data through the Garmin Companion SDK. Additional event partners, if any, are identified in the event agreement shown before you join.
Retention and your choices
The app shows each event's retention periods for readings, derived history, and participation records before you join. Those periods may differ. Active event records are scheduled for deletion after their disclosed deadlines. Your account and profile remain until account deletion, subject to any separately disclosed retention requirement. Provider backups and operational security records may follow separate schedules, so deletion from active service does not mean immediate erasure from every backup.
You can stop sharing in the app. You can request deletion of one event's data without deleting other events or your account, or request account deletion. The app shows deletion progress and any failure that needs retry. For access, correction, or deletion help, contact support@q0r.app.
Security, location, and changes
We use authenticated access controls, private event feeds, and encrypted connections. No service can guarantee absolute security. Chiron Connect uses Bluetooth and network access for the experience; it does not require your GPS location to find events. The configured application hosting regions are San Francisco, California for Vercel and Oregon for Supabase. Service providers may process operational information in other locations under their own practices.
We will update the effective date when this policy changes. A policy update does not silently replace the specific agreement you already accepted for an event.