This policy describes how the QuoteCat app ("the App") handles information.
Controller. The controller responsible for QuoteCat is Severin Scheidegger, Switzerland. Send privacy requests to hello@quotecat.ch.
Locally stored app data. Quotes, drawings, folders, settings, daily-quote history, and backup exports are generally stored on your device. QuoteCat does not operate user accounts and does not send this content to the project's Express server.
Shared folders. Only when you share a folder or accept an invitation does QuoteCat establish a connection between exactly two devices. Each person can send their own local folder and receives the other person's folder as read-only. During synchronization, the folder name and new, changed, or deleted quotes – including authors, ratings, and drawings where applicable – are transmitted over HTTPS to QuoteCat's share-sync service on Cloudflare Workers.
The actual delivery packets are stored temporarily in Cloudflare R2. SQLite-backed Durable Objects coordinate both delivery directions, permissions, versions, and usage limits. During a transition period, Cloudflare KV remains connected solely as a fallback for legacy shares in the previous format. Content is not end-to-end encrypted. Long random member and invitation tokens protect access; new invitations can be accepted only once. Tokens are kept in secure storage on the device and stored only as hashes on the server. Cloudflare may process technical data such as IP address, request time, and request information while operating the service.
As soon as a packet has been stored successfully on the receiving device and acknowledged, that exact packet is deleted from R2. Unacknowledged packets expire after no more than seven days; later delivery is best effort only. Ending the connection in the App deletes waiting packets and the associated connection data. Merely deleting or resetting the App, or uninstalling it, cannot guarantee an online disconnect: waiting content still expires after no more than seven days, while non-content connection data may remain until disconnection or technical cleanup. Legacy shares in the previous snapshot format retain their 90-day expiry during migration.
Camera and text recognition. When you scan a printed quote with the camera, QuoteCat processes the captured image and text recognition locally on your device. The camera image and recognized text are not sent to QuoteCat, Cloudflare, or an external text recognition service for this purpose. Only a quote that you then expressly save in a shared folder is synchronized as described above.
Online quote library. When you open or refresh the optional online quote library, the App retrieves quotes from ZenQuotes. Your own quotes are not sent to ZenQuotes. According to its privacy policy, ZenQuotes may collect your IP address and usage or interaction data, associate it with IP or device information, and process it with third parties for analytics or advertising purposes. This product interaction is therefore conservatively declared in the App Store as linked to identity and used for tracking. For more information, see the ZenQuotes Privacy Policy.
Push notifications. Daily reminders are scheduled locally on the device. QuoteCat does not send a push token to its own server for this purpose. You can disable notifications at any time in your device settings.
Purchases and RevenueCat. Purchases are processed by Apple or Google. The App uses RevenueCat to manage premium status. RevenueCat processes, in particular, a randomly generated anonymous App User ID, technical device information, and purchase receipts or purchase tokens. QuoteCat does not receive or store your payment details. For more information, see the RevenueCat Privacy Policy.
Automatic updates. The App may retrieve updates through Expo Updates. Expo may receive a randomized update identifier, operating-system information, IP address, and technical error and performance data. For more information, see the Expo Privacy Policy.
Purposes and legal bases. Processing is used to provide the App, sharing, update, and purchase features you choose, to deliver them securely, and to prevent abuse. Where the GDPR applies, depending on the activity we rely on performance of a contract or pre-contractual steps, our legitimate interest in a secure and functional service, or your consent where it is expressly requested.
Recipients and international processing. Depending on the feature used, Cloudflare, RevenueCat, Expo, ZenQuotes, Apple, or Google may process technical data or the content described above, including outside Switzerland or the EEA. The relevant provider's privacy and transfer mechanisms apply. More information: Cloudflare, RevenueCat, Expo, ZenQuotes, Apple, and Google.
Retention. Local App data remains stored until you delete or reset it or uninstall the App. Temporary share packets are deleted immediately after successful acknowledgement or expire after no more than seven days without acknowledgement; legacy snapshot shares retain a 90-day expiry during migration. Non-content connection data may remain until disconnection or technical cleanup. The relevant providers retain technical and purchase-related data under their own retention rules and legal obligations.
Exports and sharing. When you export quotes, images, or backups, or use the system share sheet, you choose the destination. From that point, the privacy terms of the selected service or recipient also apply.
No selling of data. We do not sell your data to third parties.
Minimum age. The App is intended for persons aged 13 and older. We do not knowingly collect data from children under 13.
Your rights. Subject to applicable law, you may request access, correction, deletion, restriction, data portability, or object to processing, and you may withdraw consent for the future. You can export or reset local data directly in the App; owners can delete shares through the sharing feature. You may also complain to the Swiss Federal Data Protection and Information Commissioner or, where the GDPR applies, a competent EU/EEA data protection authority.
Changes. We may update this policy when features or service providers change.
Contact. For questions about privacy, contact us at hello@quotecat.ch or via the support option in the App.
Last updated: September 2026