BroBack to Bro
The fine print

Privacy Policy

Updated August 26, 2026

Bro (“the app”) is operated by Quarq (“we”, “us”, “our”). Bro is an AI assistant that helps you discover places, food, events and plans in Bangalore, and can perform tasks through services you choose to connect. This policy explains what we collect, why, who we share it with, and the choices you have.

1. Information we collect

Information you provide

  • Account details | your name and email address, obtained when you sign in with Apple, Google, or a passwordless email verification code (via our authentication provider, Clerk).
  • Messages & content | the messages you send to Bro and the AI’s responses, plus any photos, files, or voice notes you attach.
  • Preferences | interests/hobbies you add to your profile to personalize recommendations.

Information collected with your permission

  • Location | if you allow location access, your device location is used to give relevant “near me” recommendations. This may be approximate (from your device) or a precise point you choose on the map or set manually. You can turn this off any time in your device settings.
  • Microphone, photos & files | accessed only when you choose to record a voice note or attach media to a message.

Information collected automatically

  • Product analytics | screens visited and interactions such as sending a message, receiving or failing to receive a reply, submitting a product search, viewing or selecting products, changing a cart or saved list, and opening a retailer. We attach counts, timing, product identifiers, category and price information, but not message bodies, search text, attachment contents or precise location. Session replay is disabled.
  • Device and app context | app and over-the-air update version, operating system, response timing, failure category, and basic lifecycle information needed to understand reliability and usage. IP-based location enrichment is disabled in our analytics client.
  • App events | a small number of app events, for example completing sign-up, are sent to Meta so we can measure our own advertising. We do not collect the iOS advertising identifier (IDFA) and the app does not ask to track you across other companies’ apps or websites.
  • Identifiers | a user/account identifier tied to your account, a randomized app-install identifier used for product analytics, and a device/push identifier used to deliver notifications. The analytics identifier is not the iOS advertising identifier (IDFA).

2. How we use your information

  • To provide the assistant, understand your requests and generate responses.
  • To remember your conversation and preferences so Bro stays helpful over time.
  • To give location-relevant recommendations (only when you enable location).
  • To perform tasks on services you explicitly connect (see “Connected services”).
  • To send you notifications (e.g. when Bro has a reply or update for you), where you allow them.
  • To maintain security, prevent abuse, and improve reliability.
  • To understand activation, feature use, retention and shopping funnels so we can improve Bro.

3. Third-party AI services: what is sent, and to whom

Bro is an AI assistant. It cannot answer you without sending what you send it to AI services operated by other companies. We ask for your agreement inside the app, on a screen that names these companies, before anything of yours is sent to any of them.

This is exactly what leaves your device, and who receives it:

OpenAI | receives the voice messages you record, to transcribe your speech into text so Bro can answer it. Also provides the AI model that writes Bro’s replies, and receives your message text to build the search index Bro uses to remember context (embeddings).
OpenRouter | receives your message, the recent conversation, your profile interests and, if you allowed location, your location for that request. OpenRouter routes it to the AI model that writes the reply. If we change which model providers we use, we will update this list and ask for your agreement again in the app.
Google | Google’s Gemini model receives the photos and documents you attach, so Bro can answer questions about them. Separately, Google Maps Platform receives the place search and, if you allowed location, your location, to find places for “near me” answers.
Exa | receives the web and event search terms derived from your request.
Composio | runs web searches, and connects services you explicitly link (such as Gmail or Google Calendar) to carry out only the actions you ask for.
How we hold these companies to the same standard. Each of them processes your data only as our processor, under written terms that permit them to use it solely to provide their service to us, prohibit them from using it for their own purposes or for training their models on your content, require confidentiality and security measures at least equivalent to our own, and require deletion or return of the data when our agreement ends. We confirm that every third party listed here provides the same or equal protection of your data as this policy does. We do not sell your personal information, and we do not share it with third parties for their own advertising or marketing.

4. Other service providers

These providers operate the app itself rather than its AI features, on the same terms as above:

Clerk | sign-in & account management (name, email, auth identifiers).
Quarq Agent (hosted on Google Cloud) | our backend that runs the assistant and stores your conversation.
Supabase | database & file storage (profile, chat history, attachments).
OneSignal | delivering push notifications (device/push identifier).
PostHog (EU Cloud) | product analytics (an internal profile identifier, a randomized app-install identifier, app/device context, screens, response timing, failure category, and the content-free interaction metadata described above). PostHog does not receive session replay, message bodies, search text, attachment contents, precise location or IDFA.
Meta | measurement of our own advertising, from the app events described in section 1. No advertising identifier is collected on iOS.

5. Your choice, and how to withdraw it

You agree to the sharing described in section 3 on the disclosure screen shown when you first sign in; the app will not send anything to those services until you do. You can review the full list at any time in the app under Profile → Terms, Policies & Licences → AI Processing & Data Sharing.

Because the assistant cannot work without this processing, withdrawing your agreement means ending your use of Bro: delete your account from Profile → Delete Account, which removes your data as described in section 7. You can also revoke microphone, photo and location access at any time in your device settings without deleting your account; Bro will simply stop receiving that category of data.

6. Connected services (Gmail, Calendar, Maps, etc.)

Bro can perform tasks on services you choose to connect. When you connect a service, you authorize Bro to access it on your behalf to carry out your requests (for example, reading your calendar or drafting an email). We access only what is needed to complete what you ask. You can disconnect a service at any time, which revokes that access.

Google user data | Limited Use. When you connect a Google service (such as Gmail or Google Calendar), Bro accesses your Google data only to provide and improve features you request. Bro’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not allow humans to read it except where you explicitly request it, where required for security or to comply with law, or where the data has been aggregated and anonymized.

7. Data retention

We keep your account information and conversation history for as long as your account is active, so Bro can remember context and stay useful. Product-analytics records are retained only for operational analysis and are included when we process a request to delete data associated with your account. You can delete your account and associated data at any time (see “Your rights” and our Account Deletion page). We may retain limited records where required for legal, security, or fraud-prevention purposes.

8. Your rights & choices

  • Access & deletion | request a copy of your data or delete your account and data. See Account & Data Deletion.
  • Permissions | revoke location, microphone, photo, and file access in your device settings any time.
  • Connected tools | disconnect any third-party service you connected.

9. Data security

Data is encrypted in transit (HTTPS). We use reputable infrastructure providers and apply access controls to protect your information. No method of transmission or storage is 100% secure, but we work to protect your data using industry-standard measures.

10. Children

Bro is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided us information, contact us and we will remove it.

11. International users

Bro is operated from India. By using the app, you understand your information may be processed in India and in other countries where our service providers operate.

12. Changes to this policy

We may update this policy from time to time. We’ll revise the “Last updated” date above and, for significant changes, provide notice in the app.

13. Contact us

Questions about this policy or your data? Email support@quarq.io.

Terms of Service · Account Deletion

Still got a question? Bro’s got humans too.

Real people, real replies, usually within a day.

Talk to Us