Privacy Policy

Bro (“the app”) is operated by Quarq (“we”, “us”, “our”). Bro is an AI assistant that helps you discover places, food, events and plans in Bangalore, and can perform tasks through services you choose to connect. This policy explains what we collect, why, who we share it with, and the choices you have.

1. Information we collect

Information you provide

• Account details | your phone number, name and authentication identifiers when you sign in with a phone number and a verification code delivered through WhatsApp. Clerk manages your app sign-in identity. Older versions may offer Apple, Google or email sign-in; we also receive an email address if you use one of those methods or choose to link an email.
• Profile details | the age and gender response you provide during profile setup, including a “Prefer not to say” gender option, and interests or preferences you choose to add.
• Messages & content | the messages you send to Bro and the AI’s responses, plus any photos, files, or voice notes you attach.
• Preferences | interests/hobbies you add to your profile to personalize recommendations.
• Shopping and checkout | saved products, cart contents, selected variants and quantities; delivery addresses, recipient names and contact details; retailer checkout information you supply; and order, purchase, payment-status, cancellation and refund records. These are used to provide physical-goods checkout, order status and support. Payment information entered into a payment provider’s or retailer’s payment page is processed by that provider.

Information collected with your permission

• Location | if you allow location access, your device location is used to give relevant “near me” recommendations. This may be approximate (from your device) or a precise point you choose on the map or set manually. You can turn this off any time in your device settings.
• Microphone, photos & files | accessed only when you choose to record a voice note or attach media to a message.

Information collected automatically

• Product analytics | screens visited and interactions such as sending a message, receiving or failing to receive a reply, submitting a product search, viewing or selecting products, changing a cart or saved list, and opening a retailer. We attach counts, timing, product identifiers, category and price information, and the words you search for in Bro Shop and Bro Now (shortened to 120 characters, with email addresses, links, phone numbers and other long numbers removed on your phone before they are sent), but not message bodies, attachment contents or precise location. Session replay is disabled.
• Device and app context | app and over-the-air update version, operating system, response timing, failure category, and basic lifecycle information needed to understand reliability and usage. IP-based location enrichment is disabled in our analytics client.
• App events | to measure and improve our own advertising on Facebook and Instagram, the app sends Meta a small set of events: installing and opening the app, completing sign-up, your first question to Bro after signing up, viewing a product, adding one to your bag, starting a checkout, and completing an order (with the order amount, the number of items and an order reference). These events never include your name, phone number, address, messages or anything you type. On iPhone, the app first asks your permission through Apple’s tracking prompt; the iOS advertising identifier (IDFA) is included only if you allow it, and saying no changes nothing in the app. On Android, Meta receives your device’s advertising ID, which you can reset or delete in your phone’s settings.
• Identifiers | a user/account identifier tied to your account, a randomized app-install identifier used for product analytics, and a device/push identifier used to deliver notifications. The analytics identifier is not the iOS advertising identifier (IDFA).

2. How we use your information

• To provide the assistant, understand your requests and generate responses.
• To remember your conversation and preferences so Bro stays helpful over time.
• To give location-relevant recommendations (only when you enable location).
• To perform tasks on services you explicitly connect (see “Connected services”).
• To verify phone sign-in, connect your WhatsApp identity and prevent unauthorized account access.
• To compare products, check prices and local availability, arrange physical-goods checkout with supported retailers, and handle delivery details, payment status, order support, cancellations and refunds.
• To send you notifications (e.g. when Bro has a reply or update for you), where you allow them.
• To maintain security, prevent abuse, and improve reliability.
• To understand activation, feature use, retention and shopping funnels so we can improve Bro.

3. Third-party AI services: what is sent, and to whom

Bro is an AI assistant. It cannot answer you without sending what you send it to AI services operated by other companies. We ask for your agreement inside the app, on a screen that names these companies, before anything of yours is sent to any of them.

This is exactly what leaves your device, and who receives it:

When Bro orders for you, it signs in to a store only with an account you connected, and only with a code you enter. Every order needs your yes on its bill, and you pay the store yourself from your own UPI app. Bro never holds your card or UPI details. You can disconnect a store at any time from Profile → Connected apps.

4. Other service providers

These providers operate the app itself rather than its AI features. We send only the information needed for the feature you use:

5. Your choice, and how to withdraw it

You agree to the sharing described in section 3 on the disclosure screen shown when you first sign in; the app will not send anything to those services until you do. You can review the full list at any time in this Privacy Policy, available in the new app from Profile → Privacy centre → Read the full Privacy Policy. Older versions may also show an AI Processing & Data Sharing section under Terms, Policies & Licences.

Because the assistant cannot work without this processing, withdrawing your agreement means ending your use of Bro: in the new app, open Profile → Privacy centre → Delete account (older versions may show Delete Account directly in Profile), which removes your data as described in section 7. You can also revoke microphone, photo and location access at any time in your device settings without deleting your account; Bro will simply stop receiving that category of data.

6. Connected services (Gmail, Calendar, Maps, etc.)

The new Bro app uses WhatsApp verification for phone sign-in and requires a verified WhatsApp connection to use its account features. Signing in or connecting WhatsApp does not grant Bro access to unrelated personal WhatsApp conversations. Messages you send to Bro on WhatsApp are processed as assistant content, as described above.

Bro can perform tasks on services you choose to connect. When you connect a service, you authorize Bro to access it on your behalf to carry out your requests (for example, reading your calendar or drafting an email). We access only what is needed to complete what you ask. You can disconnect a service at any time, which revokes that access.

Google user data | Limited Use. When you connect a Google service (such as Gmail or Google Calendar), Bro accesses your Google data only to provide and improve features you request. Bro’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where you explicitly request it, where required for security or to comply with law, or where the data has been aggregated and anonymized.

7. Data retention

We keep your account information and conversation history for as long as your account is active, so Bro can remember context and stay useful. Product-analytics records are retained only for operational analysis and are included when we process a request to delete data associated with your account. You can delete your account and associated data at any time (see “Your rights” and our Account Deletion page). We may retain limited records where required for legal, security, or fraud-prevention purposes.

Some order, payment, refund and transaction records may need to be retained for legal/accounting obligations, dispute resolution or fraud prevention after account deletion. Such retention does not keep your app account active. Retailers and payment providers may retain their own transaction records under their policies.

8. Your rights & choices

• Access & deletion | request a copy of your data or delete your account and data. See Account & Data Deletion.
• Permissions | revoke location, microphone, photo, and file access in your device settings any time.
• Connected tools | disconnect any third-party service you connected.

9. Data security

Data is encrypted in transit (HTTPS). We use reputable infrastructure providers and apply access controls to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures.

10. Children

Bro is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.

11. International users

Bro is operated from India. By using the app, you understand your information may be processed in India and in other countries where our service providers operate.

12. Changes to this policy

We may update this policy from time to time. We’ll revise the “Last updated” date above and, for significant changes, provide notice in the app.

13. Contact us

Questions about this policy or your data? Email support@quarq.io.

Terms of Service · Account Deletion