Veriquest / Legal / QI-Zero

QI-Zero Privacy Policy

This Privacy Policy explains how Veriquest ("we", "us", or "our") handles user information in "QI-Zero" (the "App"), a music composition app for the Mac.

  • Established: October 30, 2026
  • Provider: Veriquest

This policy applies only to QI-Zero.

The App sends information out only when the user presses Send on its feedback and bug report screen. For our other apps, see the list of policies; for our website, see the Site Privacy Policy. Matters not covered here (security measures, and the procedure and fees for requests for disclosure, correction, suspension of use and the like) follow sections 8 and 9 of the Site Privacy Policy.

This English text is provided for convenience. If it differs from the Japanese original, the Japanese text governs.

0Provider Information

ProviderVeriquest
AddressDai-2 Mori Bldg. 401, 4-24-5 Meieki, Nakamura-ku, Nagoya, Aichi 450-0002, Japan
RepresentativeYuya Shirayanagi
Personal information
protection officer
The representative (through the contact point)

1Overview

The App requires no sign-up and keeps your songs and settings only on your Mac. It connects to the internet only when you press Send on the feedback and bug report screen. Below we set out what is sent at that moment and what we record when we receive it.

2Data Kept in the App

Your settings (language, color scheme, MIDI, key assignments, etc.), the report ID and a send counter that prevents over-sending (the time of the last successful send and that day's count) are stored in the App's settings area; your songs and exported MIDI files are stored in the save folder. All of this stays on your Mac and, except for what you send under section 3 (such as the report ID and the App's language when included in the diagnostic information), is not sent to our servers. Your songs and exported MIDI files are never sent. The App does not sync with any cloud service.

3What the Feedback and Bug Report Screen Sends

Information is sent only when you press Send on the feedback and bug report screen in the settings. Nothing is sent automatically. It is sent only to https://veriquest.dev/api/contact, over HTTPS only (redirects to any other host are not followed).

What is sent

  • The type (bug report / support, or feedback / comments)
  • Your message (up to 5,000 characters together with the diagnostic information; if it is longer, the App asks you to shorten it and does not send it)
  • Your name (optional; up to 200 characters)
  • Your email address (optional; only if you want a reply; up to 254 characters)
  • The app concerned (the product name, plus the version and build number when diagnostic information is included)
  • Diagnostic information (if you choose to include it, which is the default)

Before sending, the diagnostic information is shown in full on screen, and you can edit or delete any of it. Anything you delete is not sent. It consists of:

  • The product name, version and build number, and the build date and time
  • The report ID (a random 12-digit hexadecimal number generated on your device, not derived from your name or device information, which you can regenerate in the settings; if you enter your name or email address, they arrive together with it in the same submission)
  • The macOS version and build number
  • The Mac's model identifier and CPU
  • The App's language and the system language
  • The type of sound source (bundled, separate file, or the Mac's built-in; file names are not included)
  • The output sample rate (device names are not included)

What is not sent

The contents of your songs, file locations, your user name, your name and email address (unless you enter them), the names of individual output devices or MIDI devices, and crash logs are not sent. You can look at a crash log in the Finder and choose whether to paste it into your message.

Purposes of use

What you send is used only to reply to you, to investigate and fix bugs, and to improve the App.

4What We Do Not Collect and Connections the App Does Not Make

Apart from sending feedback and bug reports, the App has no process that connects to the internet. There are no automatic updates, no usage collection, no analytics, no ads, and no automatic crash reporting. Links in the App simply open in your browser.

5What the Receiving End (veriquest.dev) Records, and the Rate Limit

What you send is received by the receiving end of our website and reaches us as a notification email. At that point we also collect the following, and it appears in the notification email.

  • The sending IP address
  • The name of the sending software (user agent)
  • The date and time of receipt

We collect this to deal with abuse and bulk submissions, and to investigate problems.

To prevent repeated submissions in a short period, we count submissions for each sending IP address, and stop accepting them once the count reaches five (submissions arriving at almost the same moment may occasionally get slightly past five). This record is erased automatically one hour after the last submission, after which you can send again. It is never stored in association with the content you sent.

In addition, Cloudflare, Inc., which operates the receiving end, records connection logs (IP address, date and time, requested address, and similar). We review these only to the extent necessary to investigate faults and to respond to unauthorized access.

6Service Providers and Transfers Abroad

Except where required by law, we do not provide personal information to third parties without your prior consent. To receive submissions and notify us of them, we entrust part of the handling to the following providers.

ProviderWhat is entrusted
Cloudflare, Inc.Operating the receiving end, processing submissions, rate limiting
Resend
(Plus Five Five, Inc.)
Sending the email that notifies us of what you sent
Zoho Japan
Corporation
(Zoho Mail)
Receiving and storing the notification email, and sending our replies

Cloudflare, Inc. and Resend are located in the United States. What you send and the information in 5 may therefore be processed on servers in that country. Zoho Japan Corporation is a Japanese company, and email is stored in data centers in Japan. For information on that country's system, and how to reach us if you do not consent to the transfer, see clause 6 of the Site Privacy Policy.

7Data Retention and Deletion

InformationRetention period
Data in the App
(2)
Stays on your Mac, and you can delete it. The report ID can be regenerated in the settings
What you send and
the record of receipt (3, 5)
Three years after we finish handling it, then deleted
Submission count
(5)
One hour after the last submission; erased automatically
Connection logs
(5)
As set by the provider

We will delete it at your request even before the period ends. If the report ID was included in the submission, telling us the report ID lets us identify the submission concerned.

8Children's Privacy

We do not knowingly collect personal information from children. As noted above, the App sends no personally identifying information unless the user enters and sends it.

9Contact Us

For questions about this Policy, and for requests for disclosure, deletion and the like, please use the Veriquest Works contact form. We also accept them at the contact point of the Site Privacy Policy.

10Changes

We may update this Policy in response to legal or service changes. We will also update it if we add any feature to the App that involves communication. We will announce significant changes on this page.