Privacy policy

Who we are

QOYCA is a product and trading brand of Rubber Brains LTD, the data controller for the personal information described in this notice.

Information we handle

Website visits

Cloudflare hosts and protects the website. Like most hosting services, it may process technical request information such as an IP address, browser type, requested page, date and time, and security events. We use this only to deliver, maintain and protect the website. We do not currently use advertising cookies or website analytics.

Messages you send us

If you contact us, we receive your email address, the information in your message and any subsequent correspondence. Please do not email your private relationship answers or unnecessary sensitive information.

Purchases and licence verification

Purchases are completed on Gumroad. Gumroad handles checkout and payment information under its own privacy terms. We may receive customer and transaction information made available to sellers, such as an email address, product purchased, purchase status and licence information, so that we can provide access and customer support.

When you enter a Gumroad licence key in a QOYCA Web Reflection, it is sent securely to our verification service and checked with Gumroad. QOYCA does not save the licence key in the reflection tool. After successful verification, the browser receives a strictly necessary, secure access cookie that normally lasts for 30 days.

Your reflection answers

Your written answers, selections, bookmarks and action notes in the Web Reflection are stored locally in that browser on that device. They are not sent to QOYCA or Gumroad. We cannot read, recover or synchronise them. Clearing browser data, changing device or using a different browser may remove or separate those answers.

Answers entered in a downloaded PDF remain in the copy you save on your device. The PDF and Web Reflection do not automatically transfer or merge information.

Why we use personal information

• To provide purchased content and verify access, because it is necessary to perform the purchase arrangement.
• To answer messages and provide support, based on our legitimate interest in operating and improving the service.
• To protect the website and prevent misuse, based on our legitimate interest in security and fraud prevention.
• To keep records where required by law, including applicable tax and accounting obligations.
• To send marketing only where we have an appropriate lawful basis. You can unsubscribe from marketing at any time.

Who receives information

We use service providers where necessary to run QOYCA, including Cloudflare for website hosting and security, Gumroad for purchasing, delivery and licence verification, and our email provider for correspondence. These providers handle information under their own terms and, where applicable, as processors or independent controllers.

Some providers may handle information outside the UK. Where UK data protection law requires safeguards for an international transfer, we rely on the provider's recognised transfer mechanism or other lawful safeguard.

Links to Instagram, Facebook, Gumroad and optional third-party AI services take you to services that have their own privacy practices. QOYCA does not load social-media trackers merely because its social links are displayed.

How long we keep information

We keep customer-support correspondence only for as long as reasonably needed to resolve the matter and maintain appropriate business records. Transaction and accounting information may be retained for the period required by law. Hosting and security records are retained according to our service configuration and provider terms. Gumroad may retain its own transaction records to meet legal obligations.

Locally stored reflection answers remain on your device until you clear them, clear the browser's storage or remove the file. QOYCA has no copy to delete for you.

Your rights

Depending on the circumstances, UK data protection law may give you rights to access, correct, erase or restrict personal information, object to certain uses, and receive certain information in a portable form. You may also withdraw consent where processing relies on consent.

To make a request, email hello@qoyca.com. We may need to confirm your identity. You may complain to the UK Information Commissioner's Office at ico.org.uk.

Cookies and local browser storage

The public QOYCA website does not currently use advertising or analytics cookies. The protected Web Reflection uses a strictly necessary access cookie after licence verification and local browser storage to save your answers on your device. These functions are necessary to provide the tool you request. If optional analytics or marketing technologies are introduced later, this notice and any required consent choices will be updated first.

Changes to this policy

We may update this notice when the website, products or legal requirements change. The latest version and its update date will remain available on this page.