QI-Zero Privacy Policy
This Privacy Policy explains how Veriquest ("we", "us", or "our") handles user information in "QI-Zero" (the "App"), a music composition app for the Mac.
- Established: October 30, 2026
- Provider: Veriquest
This policy applies only to QI-Zero.
The App sends information out only when the user presses Send on its feedback and bug report screen. For our other apps, see the list of policies; for our website, see the Site Privacy Policy. Matters not covered here (security measures, and the procedure and fees for requests for disclosure, correction, suspension of use and the like) follow sections 8 and 9 of the Site Privacy Policy.
This English text is provided for convenience. If it differs from the Japanese original, the Japanese text governs.
0Provider Information
| Provider | Veriquest |
|---|---|
| Address | Dai-2 Mori Bldg. 401, 4-24-5 Meieki, Nakamura-ku, Nagoya, Aichi 450-0002, Japan |
| Representative | Yuya Shirayanagi |
| Personal information protection officer | The representative (through the contact point) |
1Overview
The App requires no sign-up and keeps your songs and settings only on your Mac. It connects to the internet only when you press Send on the feedback and bug report screen. Below we set out what is sent at that moment and what we record when we receive it.
2Data Kept in the App
Your settings (language, color scheme, MIDI, key assignments, etc.), the report ID and a send counter that prevents over-sending (the time of the last successful send and that day's count) are stored in the App's settings area; your songs and exported MIDI files are stored in the save folder. All of this stays on your Mac and, except for what you send under section 3 (such as the report ID and the App's language when included in the diagnostic information), is not sent to our servers. Your songs and exported MIDI files are never sent. The App does not sync with any cloud service.
3What the Feedback and Bug Report Screen Sends
Information is sent only when you press Send on the feedback and bug report screen in the settings.
Nothing is sent automatically. It is sent only to
https://veriquest.dev/api/contact, over HTTPS only (redirects to any other host are not followed).
What is sent
- The type (bug report / support, or feedback / comments)
- Your message (up to 5,000 characters together with the diagnostic information; if it is longer, the App asks you to shorten it and does not send it)
- Your name (optional; up to 200 characters)
- Your email address (optional; only if you want a reply; up to 254 characters)
- The app concerned (the product name, plus the version and build number when diagnostic information is included)
- Diagnostic information (if you choose to include it, which is the default)
Before sending, the diagnostic information is shown in full on screen, and you can edit or delete any of it. Anything you delete is not sent. It consists of:
- The product name, version and build number, and the build date and time
- The report ID (a random 12-digit hexadecimal number generated on your device, not derived from your name or device information, which you can regenerate in the settings; if you enter your name or email address, they arrive together with it in the same submission)
- The macOS version and build number
- The Mac's model identifier and CPU
- The App's language and the system language
- The type of sound source (bundled, separate file, or the Mac's built-in; file names are not included)
- The output sample rate (device names are not included)
What is not sent
The contents of your songs, file locations, your user name, your name and email address (unless you enter them), the names of individual output devices or MIDI devices, and crash logs are not sent. You can look at a crash log in the Finder and choose whether to paste it into your message.
Purposes of use
What you send is used only to reply to you, to investigate and fix bugs, and to improve the App.
4What We Do Not Collect and Connections the App Does Not Make
Apart from sending feedback and bug reports, the App has no process that connects to the internet. There are no automatic updates, no usage collection, no analytics, no ads, and no automatic crash reporting. Links in the App simply open in your browser.
5What the Receiving End (veriquest.dev) Records, and the Rate Limit
What you send is received by the receiving end of our website and reaches us as a notification email. At that point we also collect the following, and it appears in the notification email.
- The sending IP address
- The name of the sending software (user agent)
- The date and time of receipt
We collect this to deal with abuse and bulk submissions, and to investigate problems.
To prevent repeated submissions in a short period, we count submissions for each sending IP address, and stop accepting them once the count reaches five (submissions arriving at almost the same moment may occasionally get slightly past five). This record is erased automatically one hour after the last submission, after which you can send again. It is never stored in association with the content you sent.
In addition, Cloudflare, Inc., which operates the receiving end, records connection logs (IP address, date and time, requested address, and similar). We review these only to the extent necessary to investigate faults and to respond to unauthorized access.
6Service Providers and Transfers Abroad
Except where required by law, we do not provide personal information to third parties without your prior consent. To receive submissions and notify us of them, we entrust part of the handling to the following providers.
| Provider | What is entrusted |
|---|---|
| Cloudflare, Inc. | Operating the receiving end, processing submissions, rate limiting |
| Resend (Plus Five Five, Inc.) | Sending the email that notifies us of what you sent |
| Zoho Japan Corporation (Zoho Mail) | Receiving and storing the notification email, and sending our replies |
Cloudflare, Inc. and Resend are located in the United States. What you send and the information in 5 may therefore be processed on servers in that country. Zoho Japan Corporation is a Japanese company, and email is stored in data centers in Japan. For information on that country's system, and how to reach us if you do not consent to the transfer, see clause 6 of the Site Privacy Policy.
7Data Retention and Deletion
| Information | Retention period |
|---|---|
| Data in the App (2) | Stays on your Mac, and you can delete it. The report ID can be regenerated in the settings |
| What you send and the record of receipt (3, 5) | Three years after we finish handling it, then deleted |
| Submission count (5) | One hour after the last submission; erased automatically |
| Connection logs (5) | As set by the provider |
We will delete it at your request even before the period ends. If the report ID was included in the submission, telling us the report ID lets us identify the submission concerned.
8Children's Privacy
We do not knowingly collect personal information from children. As noted above, the App sends no personally identifying information unless the user enters and sends it.
9Contact Us
For questions about this Policy, and for requests for disclosure, deletion and the like, please use the Veriquest Works contact form. We also accept them at the contact point of the Site Privacy Policy.
10Changes
We may update this Policy in response to legal or service changes. We will also update it if we add any feature to the App that involves communication. We will announce significant changes on this page.