Privacy Policy

WekliQ™ PRIVACY POLICY

Last Updated: August 1, 2026

WekliQ™ Privacy Policy

kliQ Labs, Inc., a California corporation, dba WekliQ and kliQ² (hereinafter referred to as "kliQ," "WekliQ," "we," "us," or "our") respects your privacy. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the WekliQ Service.

This Privacy Policy applies to the WekliQ Service offered at https://wekliq.com. The Service is currently available only in the United States. Users outside the United States are not eligible to use the Service.

By using the Service, you agree to the practices described in this Privacy Policy. This Privacy Policy becomes effective with respect to you on the date you accept it or first use the Service.

1. SUMMARY OF KEY PRIVACY PRACTICES

• We do NOT sell your personal information.
• We do NOT share your personal information for cross-context behavioral advertising, marketing, or advertising purposes.
• We do NOT perform facial recognition or biometric identification on any photos or data.
• We do NOT collect biometric data (no voiceprints, no face geometry, no fingerprints).
• We do NOT collect IP addresses, device identifiers, or use browser fingerprinting.
• We do NOT use marketing or advertising tracking pixels.
• We do NOT collect precise geolocation. ZIP code / city-level only.
• Phone numbers are optional. We collect phone numbers only if you choose to provide them, and use them only for account verification, two-factor authentication, account recovery, and transactional notifications. We do NOT send marketing SMS.
• We use Plausible Analytics (cookieless, privacy-focused).
• Your profile photo is not public. It is visible only to users with whom you have completed a kliQ.
• We use OpenAI's AI models (with Anthropic as fallback) to perform compatibility analysis. Personally identifying information (name, email, phone number, account credentials) is retained in WekliQ's Supabase database and is NOT transmitted to AI providers. Only de-identified data is sent to AI processors. Neither OpenAI nor Anthropic trains AI models on your data under commercial API terms.
• Sensitive modules are opt-in. Health & Wellbeing (M10) and Sexual Compatibility (M9) modules require your explicit opt-in consent. You may skip them at any time.
• We retain your data while your account is active. Deleted accounts are archived for 3 months, then permanently deleted.

2. INFORMATION WE COLLECT

2.1 Information You Provide

• Account identifiers: name, email address
• Account credentials: password (stored as hashed/encrypted value)
• Questionnaire answers: including potentially sensitive personal information categories (see Section 2.5)
• Profile photo: displayed only to confirmed matches post-kliQ
• Activity/place photos: metadata extracted (activity classification, location indicators); underlying photo not retained
• Compatibility codes used in kliQs
• Phone number (optional): provided at your discretion at signup or in account settings. Phone number collection is never required. If you choose to provide a phone number, you may also separately opt-in to transactional SMS communications (see Section 2.7).
• Reports and feedback about other users and the Service
• Communications with WekliQ

2.2 Information We Collect Automatically

• Essential cookies necessary for the Service to function (login session, security)
• Plausible Analytics — cookieless, no IP collection, no cross-site tracking
• Service usage data for operational logging

We do NOT collect IP addresses, device identifiers, or use browser fingerprinting.

2.3 Information From Other Users

• Reports about you from other users
• kliQs initiated by other users using your code
• Mismatch Notes about interactions with you

We do not verify information other users provide about you.

2.4 Information We Derive (Inferences)

• Compatibility scores
• Behavioral patterns
• Compatibility archetypes
• Reporting patterns (about you as a reporter)

2.5 Sensitive Personal Information

Under CPRA, the following questionnaire categories are sensitive personal information:

• Racial or ethnic origin
• Religious beliefs
• Sexual orientation
• Health information (Health & Wellbeing module, M10)
• Sexual life / sexual compatibility (Sexual Compatibility module, M9)
• Financial circumstances (questionnaire context only; payment info handled by Stripe)

Sensitive modules are opt-in. WekliQ operates two dedicated sensitive-category questionnaire modules that require your explicit opt-in consent:

• Health & Wellbeing module (M10) — physical and mental health, chronic conditions, and related wellbeing categories
• Sexual Compatibility module (M9) — sexual preferences, boundaries, values around intimacy, and related categories

Before entering either sensitive module, you are presented with a plain-language explanation of what will be asked, how the information is used, and your right to opt out. You may:

(a) Opt in to complete the module; (b) Opt out of the entire module (with the option to return later); (c) Select "Prefer not to say" on any individual question within a module you have opted into.

Profile-type scoping and reveal-type filtering. Sensitive module data is collected and used according to the following architecture:

• Partner profiles may include M9 and M10 (with your opt-in).
• Friend profiles do NOT collect M9 or M10 data. These modules are not part of the Friend profile questionnaire.
• Roommate profiles do NOT collect M9 or M10 data. These modules are not part of the Roommate profile questionnaire.
• Reveal-type filtering: Even where a user has completed M9 or M10 data in a Partner profile, that data is NOT surfaced in any Roommate or Friend context reveal.

Answer privacy. In standard reveals, WekliQ does NOT disclose your actual answers to any counterparty. Reveals communicate compatibility insights and scoring, not the underlying answers.

Deep Dive consent (post-launch feature). For the future Couples Deep Dive feature, additional issue-area disclosure may occur only with the separate, mutual, explicit consent of both users at the moment of Deep Dive activation. Consent to complete the M9 or M10 module is not, by itself, consent to Deep Dive disclosure.

You are not required to disclose sensitive personal information. All sensitive modules are optional, and all questionnaire questions include "Prefer not to say" options.

We use sensitive personal information to:

• Generate compatibility analysis for the users with whom you choose to share your code
• Improve the Service
• Comply with legal obligations

We do NOT use sensitive personal information for advertising, marketing, or sale to third parties.

You have the right to limit the use of your sensitive personal information by contacting kteam@kliqlabs.com.

Full architecture for sensitive modules opt-in, withdrawal, and downstream data handling is set forth in the WekliQ Terms of Service.

2.6 What We Do NOT Collect

• Biometric data
• Facial recognition or face-feature extraction
• Voice samples
• IP addresses
• Device identifiers
• Browser fingerprints
• Precise geolocation
• Genetic data
• Information about users under 18
• Financial account information (handled by Stripe)

2.7 SMS Communications and Consent

Phone number collection is always optional. WekliQ may collect your phone number at signup (optional) or when you provide it through your account settings.

Separate SMS opt-in is required for SMS communications. Providing your phone number does NOT, by itself, authorize WekliQ to send you SMS messages. To receive SMS communications, you must separately opt in.

Consent record. When you opt in to SMS communications, WekliQ stores in your account record:

• A consent flag indicating you have opted in
• The date and time of your consent
• The method of consent (web form, in-app, or other)

This consent record is retained as long as your account is active and as required for TCPA compliance.

Types of SMS we send (transactional only):

• Account verification codes
• Two-factor authentication (2FA) codes
• Account recovery (password reset) messages
• Security alerts (new login, suspicious activity)
• Transactional kliQ notifications (pending reveals, account activity)

Types of SMS we do NOT send:

• Marketing or promotional SMS
• Advertising SMS
• Referral or growth marketing SMS
• Re-engagement marketing SMS

Opting out of SMS. You may opt out of SMS at any time by:

• Replying "STOP" to any SMS message from WekliQ
• Updating your preferences in your account settings
• Contacting kteam@kliqlabs.com

Opting out of SMS does NOT terminate your WekliQ account. You will continue to receive notifications via email and in-app notification.

Standard message and data rates may apply to SMS communications, depending on your wireless carrier.

SMS service provider. WekliQ uses Telnyx as its SMS service provider. Telnyx receives your phone number only when you have separately opted in to SMS communications. Telnyx operates under its own privacy policy and is bound to WekliQ via Data Processing Agreement. See Section 4.2 for the current vendor list.

3. HOW WE USE YOUR INFORMATION

3.1 To Operate the Service

• Account management
• Compatibility analysis
• Reveal generation and delivery
• User-to-user reveal reporting
• Payment processing (via Stripe)
• Transactional SMS (via Telnyx, only with your separate opt-in)

3.2 To Improve the Service

• Debugging and troubleshooting
• Refining AI prompts and compatibility logic
• Aggregated, anonymized analytics
• User research and feedback analysis

3.3 To Communicate With You

• Transactional communications
• Support responses
• Security-related communications
• Product updates and Service announcements (email; opt-out available)

3.4 For Legal and Compliance Purposes

• Fraud prevention
• Terms enforcement
• Legal obligations
• Response to lawful requests

3.5 For Business Operations

• Internal analytics
• Investor materials (with no individually identifiable information)
• Business planning

4. HOW WE SHARE YOUR INFORMATION

4.1 With Other WekliQ Users

• Compatibility output revealed to counterparties (compatibility-relevant insights, not raw personal data)
• Profile photo visible to confirmed matches only post-kliQ

Phone numbers are never shared with other users.

4.2 With Service Providers

We share information with service providers bound by Data Processing Agreements. Current service providers:

• OpenAI (San Francisco, CA): Primary AI processing. Data submitted to OpenAI is de-identified — personally identifying information (name, email, phone number, account credentials) is retained in WekliQ's Supabase database and is NOT transmitted to OpenAI. What is transmitted is limited to de-identified questionnaire responses, compatibility codes, and analysis prompts. Under OpenAI's commercial API terms, OpenAI does NOT train its AI models on your data submitted via the API. See Section 5 for full details.
• Anthropic (San Francisco, CA): Fallback AI processing. Used when OpenAI is unavailable or as required for specific workflows. Data submitted to Anthropic is de-identified under the same architecture described for OpenAI above. Under Anthropic's commercial API terms, Anthropic does NOT train its AI models on your data. See Section 5 for full details.
• Stripe (San Francisco, CA): Payment processing. WekliQ does NOT receive or store your payment card or bank account information.
• Plausible Analytics (Tallinn, Estonia): Cookieless site analytics with no IP collection.
• Google Workspace (Mountain View, CA): Email infrastructure.
• Resend: Transactional email delivery.
• Telnyx (Chicago, IL): SMS infrastructure for account verification, two-factor authentication, account recovery, and transactional SMS notifications. Telnyx receives your phone number only when you have separately opted in to SMS communications. Telnyx operates under its own privacy policy at https://telnyx.com/legal-and-compliance/privacy-policy and is bound to WekliQ via Data Processing Agreement.
• Vercel (San Francisco, CA): Website hosting infrastructure.
• Supabase (San Francisco, CA): Backend database and infrastructure.

We will update this Privacy Policy when new service providers are added.

Service providers are not "buyers" of your personal information. Sharing information with a service provider under a contractual restriction limiting their use to processing on WekliQ's behalf is NOT considered a "sale" under CCPA/CPRA.

4.3 With Legal Authorities

We may share information with legal authorities when required to comply with subpoenas, court orders, or other legal obligations.

4.4 In Connection With Business Transactions

If kliQ Labs, Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred to the successor entity. This type of transfer is not considered a "sale" of personal information under CCPA/CPRA.

4.5 With Your Consent

We may share information for other purposes with your specific consent.

4.6 What We Do NOT Do — Non-Sale Commitment

WekliQ commits that:

• We do NOT sell your personal information.
• We do NOT share your personal information for cross-context behavioral advertising.
• We do NOT share your personal information with advertisers, ad networks, or marketing platforms.
• We do NOT share your personal information with data brokers.
• We do NOT share phone numbers with any third party except Telnyx for transactional SMS delivery (with your opt-in) and as required by law.

Aggregate deidentified insights. WekliQ may publish or share aggregated, deidentified insights (for example, regional trends in compatibility preferences, aggregate research findings, or high-level industry benchmarks) that do NOT identify any individual user. Aggregate deidentified data is not "personal information" under CCPA/CPRA and is not subject to the non-sale commitment above. WekliQ commits that any such aggregate publication will:

• Meet minimum sample-size thresholds sufficient to prevent re-identification;
• Exclude direct personal identifiers;
• Be limited to non-sensitive dimensions unless the sample size and anonymization architecture is sufficient to prevent inference of individual-level sensitive attributes.

Service providers processing on our behalf. Sharing information with service providers under contractual restrictions (per Section 4.2) is not a "sale" under CCPA/CPRA. Service providers cannot use your data for their own purposes.

Business transfers. Transfer of your information in connection with a merger, acquisition, sale of assets, or similar transaction (per Section 4.4) is not a "sale" under CCPA/CPRA.

Legal disclosures. Sharing information as required by law, court order, subpoena, or other legal compulsion is not a "sale" under CCPA/CPRA.

5. AI PROCESSING AND YOUR DATA

Primary and Fallback AI Providers. WekliQ uses OpenAI's AI models as its primary AI provider for compatibility analysis, with Anthropic's Claude AI models as fallback. Both providers are accessed via commercial API and are bound by commercial API terms that prohibit training their AI models on your data.

De-Identification Architecture. Data submitted to AI providers is de-identified before submission. Specifically:

• Personally identifying information stays in WekliQ's own database infrastructure (Supabase) and is NOT transmitted to AI providers. This includes your name, email address, phone number, account credentials, and any other direct identifiers.
• What IS transmitted to AI providers: Your de-identified questionnaire responses, the compatibility codes of the two users being analyzed (yours and your counterparty's), and the prompts directing the compatibility analysis. WekliQ maintains the mapping between compatibility codes and account holders internally. AI providers do not have access to this mapping and cannot re-identify you from the code alone.

AI provider training practices: Under commercial API terms with both OpenAI and Anthropic, your data is NOT used to train the providers' AI models.

AI provider retention: Under commercial API terms, data submitted for processing is retained only for a short operational period and is then deleted per each provider's commercial API policies.

WekliQ's internal use: WekliQ may use your data internally to refine prompts and improve the Service. WekliQ does not export your data to AI providers outside of the commercial APIs listed above.

Questions about AI processing? Contact kteam@kliqlabs.com.

6. DATA RETENTION

6.1 Active Accounts

Retained while active and in good standing.

6.2 Inactive and Paused Accounts

• Freemium tier (inactive): Retained up to 10 years from last activity, then evaluated for deletion
• Paused accounts: Retained while in paused status

6.3 Deleted Accounts

When you request deletion:

• Account moves to archive bucket separate from active data
• Archive retained for 3 months from your deletion request
• After 3 months, permanently deleted from all WekliQ systems
• You will receive a clear warning during deletion that data will be permanently deleted after 3 months and cannot be recovered
• During the 3-month archive period, you may request reactivation

6.4 Legal and Audit Retention

Some data may be retained beyond standard periods for legal compliance, audit logs, SMS consent records (TCPA), or active legal matters.

6.5 Anonymized Data

Aggregated, anonymized data that does not identify you may be retained indefinitely.

7. YOUR PRIVACY RIGHTS

7.1 Rights Under California Law (CCPA / CPRA)

• Right to Know
• Right to Delete
• Right to Correct
• Right to Limit Use of Sensitive Personal Information
• Right to Opt-Out of Sale or Sharing (we do not sell or share for behavioral advertising)
• Right to Non-Discrimination

7.2 How to Exercise Your Rights

Contact:

• Email: kteam@kliqlabs.com
• Address: kliQ Labs, Inc., 1001 Bridgeway A1 #505, Sausalito, CA 94965

We respond to verified requests within 45 days per California law.

7.3 Verification

We will verify your identity before fulfilling a privacy rights request.

7.4 Authorized Agents

You may designate an authorized agent. We require verification.

8. SECURITY

We implement reasonable security measures:

• Encryption of sensitive data in transit and at rest
• Hashed and salted password storage
• Access controls
• Audit logging
• Service provider Data Processing Agreements

No system is perfectly secure. We will notify you of data breaches as required by applicable law.

9. CHILDREN'S PRIVACY

The Service is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18.

If we discover data from a user under 18, we will delete it, close the account, and prevent future collection.

Parents or guardians: contact kteam@kliqlabs.com.

10. INTERNATIONAL USERS

The Service is currently available only to users in the United States. Users outside the United States are not eligible.

If you are located outside the United States:

• Your data is processed in the United States
• We do not have GDPR-compliant infrastructure for European users
• Your access may be technically blocked

We may expand internationally and will update this Privacy Policy accordingly.

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy. For material changes:

• Posted at https://wekliq.com/privacy
• "Last Updated" date updated
• Notification by email or through the Service

Continued use after a change constitutes acceptance.

12. CONTACT US

• Email: kteam@kliqlabs.com
• Mail: kliQ Labs, Inc. dba WekliQ and kliQ²

1001 Bridgeway A1 #505 Sausalito, CA 94965

13. ADDITIONAL CALIFORNIA-SPECIFIC DISCLOSURES

13.1 Categories of Personal Information Collected (Past 12 Months)

13.2 Sources of Personal Information

• Directly from you (questionnaire, account, communications, optional phone number)
• From other users (reports, kliQs initiated)
• Automatically (limited essential cookies, Plausible aggregate analytics)
• Service providers (Stripe payment data — WekliQ does not store)

13.3 Business Purposes for Use

See Section 3.

13.4 Categories of Third Parties

• Service providers (Section 4.2)
• Legal authorities when required
• Other WekliQ users (compatibility output and profile photos post-match)

13.5 Sale or Sharing for Behavioral Advertising

We do NOT sell personal information. We do NOT share personal information for cross-context behavioral advertising.

13.6 Retention Schedule

See Section 6.

13.7 Notice at Collection

This Privacy Policy serves as the notice at collection required under CCPA/CPRA.

13.8 California Civil Code § 1789.3 Consumer Notice

The Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs may be contacted in writing at 1625 North Market Blvd., Suite N 112, Sacramento, CA 95834, or by telephone at (800) 952-5210.

14. TRADEMARK NOTICE

WekliQ™ and the WekliQ™ logo are trademarks of kliQ Labs, Inc. Federal trademark applications are pending. WekliQ is the primary fictitious business name (dba) of kliQ Labs, Inc., registered with Marin County, California. kliQ² and kliQ are additional fictitious business names of kliQ Labs, Inc. registered with Marin County, California. Neither kliQ² nor kliQ is claimed as a trademark.

Last Updated: August 1, 2026

kliQ Labs, Inc. dba WekliQ™ and kliQ² 1001 Bridgeway A1 #505 Sausalito, CA 94965 kteam@kliqlabs.com

Version 1 | Effective August 1, 2026