Quello

Legal

Privacy policy

What Quello records, what it never records, who else handles it and how to get it deleted.

Updated

This policy explains what Quello ("Quello", "we") collects when you use the Quello app on Android phones and Android TV and the website at app.quello-box.com, why, how long we keep it, and what you can ask us to do with it.

What Quello does not record

  • The websites, apps, streams or channels you use while connected.
  • The content of your traffic. It travels inside an encrypted WireGuard tunnel between your device and our server.
  • The names your device looks up (DNS). Our servers answer them and, if you turn on Block threats, check them against lists of known malware and phishing sites, without writing them to a log.

What we collect, and why

InformationWhy we need it
Account details: your name, email address, password (stored only as a one-way hash) and, if you add it, your phone number.To create your account, let you sign in on your devices and send you password reset codes.
A device identifier created by the app, and for each device the tunnel settings it uses (its WireGuard keys and the private address it gets inside the tunnel).To connect your device to our servers and keep each device's tunnel separate.
Connection records: which server and device, when the connection started and ended, and when the app last checked in. We do not store the IP address your device connects from.To apply your plan's limit on devices at the same time, to stop abuse of the service and to fix connection problems you report. Deleted automatically after 30 days.
Subscription details: your plan, its dates and status, and the reference numbers Stripe or PayPal give us.To give you the plan you paid for and let you change or cancel it. We never see or store your full card number or PayPal password.
Notification token from Firebase Cloud Messaging.To send notices to the app, such as service updates.
Crash reports from Firebase Crashlytics: device model, Android version, app version and what the app was doing when it crashed.To find and fix bugs.
Server logs for the website and for the app's sign-in and account requests (not your VPN traffic): IP address, page or request, time and browser or app version.To keep the service running and protect it from attacks. Deleted automatically after 14 days.

Who else handles your information

We share information only with the companies that help us run Quello, and only what each one needs:

  • Stripe and PayPal process payments. Their own privacy policies apply to the details you give them.
  • Google Firebase delivers notifications and crash reports.
  • Our hosting providers run the servers that hold the panel and the VPN servers.
  • Google Fonts serves the typeface on this website, so your browser contacts Google when a page loads.

We do not sell your information, and we do not use it for advertising. We give information to authorities only when the law requires it, and we can only give what we have, as described above.

How long we keep it

  • Connection records: 30 days, then deleted automatically.
  • Account, device and subscription records: while your account exists. When your account is deleted, they are deleted with it.
  • Records we must keep for tax or accounting: as long as the law requires.
  • Server logs: 14 days.
  • Password reset codes: 10 minutes.

Your choices and rights

You can see and change your name and password in your account on the website. You can also ask us to:

  • give you a copy of the information we hold about you,
  • correct it,
  • delete your account and its records,
  • stop using it for a purpose you object to.

Email admin@quello-box.com from the address on your account. We reply within 30 days. Depending on where you live, you may also complain to your data protection authority.

Security

Passwords are stored as one-way hashes, connections to the website and the app use HTTPS, and VPN traffic uses WireGuard encryption. Payment keys in our panel are stored encrypted. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.

Children

Quello is not meant for children under 16, and we do not knowingly collect their information.

Changes to this policy

If we change this policy, we update the date at the top of this page. If the change is significant, we also tell you by email or in the app before it takes effect.

Contact

Quello
Pattaya Brighton Grand
666/66, Moo 5, Na Kluea
Banglamung
Chonburi
Thailand
admin@quello-box.com