Who we are
My Quash (Quantum Self-Healing) is operated from Tanzania. We handle your personal data as a data controller under the Personal Data Protection Act, 2022 (Tanzania) and its regulations, and we follow recognised international standards such as the GDPR where they give you stronger protection.
What we collect
We collect the name, email address and wellbeing answers you give us during onboarding, plus payment references created when you buy a program, membership or product.
How we use it
Your information is used only to personalise your healing plan, deliver the content you paid for, send your plan by email and support you over WhatsApp.
Lawful basis and consent
We process your data on the basis of your consent (given when you complete onboarding or contact us) and to perform the service you purchased. You may withdraw consent at any time; this does not affect processing already carried out.
Payments
Pi Network payments are processed by Pi. We store only the payment reference and status — never your wallet keys or passphrase.
Sharing
We never sell your data. We share it only with the service providers needed to run the app (hosting, email delivery and payments).
Cross-border transfer
Our hosting, email and payment providers may store data outside Tanzania. Where that happens we only use providers that apply comparable safeguards, as required by the Personal Data Protection Act, 2022.
How we protect your data
Orders, payment records, client plans, admin alerts and coach content are stored in a locked database. Direct access from browsers or app visitors is blocked at the database level by row-level security rules that deny all public and signed-in reads and writes. Only our trusted server code, and the admin panel behind separate credentials, can read or change these records — and each request is limited to the specific data it needs. Client plans are retrieved with a secret one-time link, and administrative screens require a private username and password.
How long we keep it
Onboarding answers and plans are kept while your account is active and for up to 24 months after your last activity. Payment references are kept for 7 years where tax and accounting law requires it, then deleted or anonymised.
Your choices
You may ask us to review, correct or delete your data at any time by contacting us on WhatsApp from the Profile page.
Your rights
You have the right to access your data, correct it, ask for deletion, object to or restrict processing, receive a copy in a portable format, and withdraw consent. We respond within 30 days. If you are not satisfied you may complain to the Personal Data Protection Commission of Tanzania.
Children
The app is intended for adults aged 18 and over. We do not knowingly collect data from children; if we learn that we have, we delete it promptly.
Breach notification
If a security incident affects your personal data, we will notify you and the Personal Data Protection Commission without undue delay, together with the steps we are taking.
Updates to this policy
We may update this policy as the app or the law changes. Material changes are announced in the app, and the version in force is always the one shown on this page.