Privacy policy
Last updated: 8 October 2026
- Quotea works without an account: your quotes, invoices, clients and items are stored on your device.
- We don’t receive the content of your documents, show ads or sell data.
- You decide when to send or share a PDF and which app to use.
- Purchases are processed by Apple or Google; RevenueCat helps us verify your subscription.
- You can delete all data from Settings › Delete all data.
Who is responsible
This policy explains how the Quotea app for iPhone, iPad and Android and the quotea.app website handle personal data. For any privacy question, write to support@quotea.app.
Data you enter in Quotea
To create your documents you can choose to enter:
- your business details: name, address, tax identification, email, phone and website;
- logo, signature and payment QR codes;
- payment methods, such as an IBAN or payment links;
- client details: name, contact person, email, phone, address and tax identification;
- quotes, invoices, line items, prices, taxes, notes and attached photos;
- products and services in your catalogue;
- follow-up dates, statuses and recorded payments.
Only your business name is needed to get started; everything else is optional.
Where your data is stored
Quotea is a local-first app. Documents and settings are stored in a database on your device, and photos, signatures and logos in the app’s private storage. You don’t need an account and Quotea does not send the content of your documents to its own servers.
If you uninstall the app or clear its data without a backup, that information is lost.
Backups
On iPhone and iPad, Quotea makes automatic backups of your documents and related files. They are kept on the device and, if iCloud Drive is turned on, in the iCloud storage of your Apple account. The 10 most recent versions and one per day for 30 days are kept. Apple handles that data under its own privacy policy.
On Android, the system may include Quotea’s data in your device’s Google backup if you have it turned on. You can also create a backup file manually and save it wherever you choose (for example Google Drive or Files); that file stays under your control.
PDFs, sending and messages
PDFs are generated on your device when you ask for them. They only leave it when you choose to send, share, export or print them. If you use email, WhatsApp or another app to send them, that service handles the data under its own policy. Quotea prepares the message but never sends it without your action.
Device permissions
- Photos, camera and files: only when you choose to add a logo, a signature, a QR code or photos to a quote.
- Contacts: when you import a client, the system picker opens and Quotea only receives the contact you select. It never reads your address book in the background.
- Notifications: follow-up and recurring-invoice reminders are local notifications scheduled on your device. We don’t use remote notifications.
You can withdraw any permission in your system settings.
Subscriptions and purchases
Paid plans are bought through in-app purchases. Payment is processed by Apple (App Store) or Google (Google Play); Quotea never receives your card details.
To check and restore your subscription we use RevenueCat, Inc., which processes an anonymous app user ID, the products purchased, subscription status and dates, transaction data provided by the store, and technical data such as platform, app version and store country. We don’t send it your documents or clients.
Crash reports
To detect and fix unexpected crashes, the app may send crash reports to Firebase Crashlytics (Google). A report contains technical data such as the device model, operating system and app version, the time and technical details of the crash, and an installation identifier. It does not include the content of your documents.
Your clients’ data
When you enter information about your clients, you decide what you store and what you use it for, and you are responsible for having a lawful basis to process it. Quotea only uses it on your device to provide the features you ask for: documents, reports, reminders and messages.
The quotea.app website
This website uses no cookies, analytics or tracking tools, and loads no third-party fonts or scripts. It is hosted on Cloudflare, which processes technical data about each visit, such as IP address and browser, to deliver the pages and protect them from abuse.
If you write to support@quotea.app, we use your email address and message only to reply to you.
Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the app’s features on your device | Performance of a contract (terms of use) |
| Managing subscriptions and restoring purchases | Performance of a contract |
| Accessing photos, contacts or notifications | Your consent, which you can withdraw |
| Crash reports and website security | Legitimate interest in keeping the app and website stable and secure |
| Answering your support messages | Your request and legitimate interest |
| Meeting legal obligations | Legal obligation |
Who we share data with
Quotea does not sell personal data or use it for advertising. Only the providers needed for the purposes above are involved: Apple and Google (stores and the backups you turn on), RevenueCat (subscriptions), Google Firebase (crash reports) and Cloudflare (web hosting). We may also disclose data where the law requires it.
Some of these providers may process data outside the European Economic Area, for example in the United States. In those cases recognised safeguards apply, such as the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long data is kept
App data stays on your device and in your backups until you delete it. Settings › Delete all data removes quotes, invoices, clients, catalogue, photos, signatures, logos, settings and Quotea backups on the device and in iCloud. Google backups and backup files you saved yourself are managed from those services.
RevenueCat keeps purchase history for as long as needed to manage the subscription and meet legal obligations. Crash reports are kept for a limited period. Support emails are kept for as long as needed to handle your request.
Your rights
You can ask for access to your data, rectification or erasure, restriction of or objection to processing, and data portability by writing to support@quotea.app. As most data is only on your device, you can usually exercise these rights directly in the app.
If you think we have not handled your request properly, you can complain to the data protection authority in your country.
Security
Data is stored in the app’s private storage, protected by the operating system. We recommend using a passcode on your device and keeping backups turned on. No system is completely infallible, but we take reasonable measures to protect your information.
Children
Quotea is a professional tool and is not directed at children under 16.
Changes to this policy
If the way Quotea handles data changes, for example when adding accounts or sync, we will update this page and the date above before the change applies.