Quantum Organic Reality Privacy Policy
Effective November 1, 2026
Nathalie Bonin operates the Quantum Organic Reality website and the Quantum Organic Reality iPhone app used at its events. For privacy questions or requests, contact support@q0r.app. This policy describes the website and app. Before joining an event, you will see its specific agreement, purposes and data deletion policy.
Information we handle
- Account and profile: Your private account ID, the Apple or Google sign-in method you choose, the basic identity and email information that provider supplies, your display name, and your chosen avatar. Google sign-in requests basic profile and email access, not Gmail messages, contacts, calendar, or Drive files.
- Event participation: The event you join, your accepted agreement version and choices, timestamps, band assignment, seat or stage placement, an intention word when enabled, and connection and readiness status.
- Wearable readings: During sharing, available heart rate, beat-to-beat intervals, heart-rate variability, device stress, motion, EEG and optical sensor signals, their capture timestamps, and calculated measurements such as focus, calm and session baselines. Some devices provide fewer readings. During brief interruptions, readings may be queued on your phone for later delivery.
- Service operations: Limited network, device, and security information needed to run the service, troubleshoot failures, and fulfill deletion requests.
How we use it
We use account information for sign-in, profile management, participation history, and access control. We use event and wearable information to connect a band, calculate event measurements, show connection status, and drive the live visual scene. We use operational information for security, reliability, and deletion fulfillment. We do not sell participant data or use wearable readings for targeted advertising or medical, employment, credit, or insurance decisions. Where you separately agree, we retain data to let you view your event history, or for internal replay and analysis of signal quality and visual responses. Optional after-event analysis is separate from live participation. The display is an artistic experience, not a diagnosis of health or mood.
Who can see it
Your chosen display name or avatar and an artistic representation of your live state may be visible to people in the room and viewers authorized by the organizer. If enabled by the organizer, the display may also show your heart rate and your HRV change relative to your event baseline. People who know you may recognize your display lane. Organizers and authorized staff can see information needed to run the event. Other participants do not receive your account email or raw beat stream through the normal experience.
Supabase supplies authentication and private data storage; Vercel hosts the website and ingestion service. Apple or Google processes sign-in when selected. The app receives device data through the Garmin Companion SDK or the Muse SDK, depending on your device. At local events, the phone also sends readings to the enrolled event server, which records input and calculated signals and sends artistic output to the visualization system. Additional event partners are identified in the event agreement shown before you join.
Retention and your choices
New events use one maximum period: event recordings, calculated signals and linked visual output are kept for up to 90 days after the event ends, for the after-event purposes you agree to. Replays, downloads and reopening the event do not restart that deadline. The app shows the remaining time and the deletion date. You can request deletion sooner. Declining optional after-event storage or analysis does not prevent live participation; data without an agreed after-event purpose is removed after the event.
Earlier events keep their previously accepted terms; this policy does not extend an earlier deletion promise. Recorded event data and basic attendance history are different: deleting your recordings leaves the event in your history. Your account and profile remain until account deletion, subject to any separately disclosed retention requirement. Provider backups and operational security records may follow separate schedules, so deletion from active service does not mean immediate erasure from every backup. QOR tracks deletion work for its cloud and local event servers. An offline event server finishes cleanup when it reconnects; the app identifies pending local cleanup. Copies given to other event partners must also be covered by the event's stated data handling arrangements.
You can stop sharing in the app. You can request deletion of one event's data without deleting other events or your account, or request account deletion. The app shows deletion progress and any failure that needs retry. For access, correction, or deletion help, contact support@q0r.app.
Security, location, and changes
We use authenticated access controls, private event feeds, and encrypted connections. No service can guarantee absolute security. The Quantum Organic Reality app uses Bluetooth and network access for the experience; it does not require your GPS location to find events. The configured application hosting regions are San Francisco, California for Vercel and Oregon for Supabase. Service providers may process operational information in other locations under their own practices.
We will update the effective date when this policy changes. A policy update does not silently replace the specific agreement you already accepted for an event.