Privacy Policy
Last updated: 8 October 2026
QuoteThat is a small app for sharing photos and quotes inside private groups. This policy explains what the app collects, why, and what control you have over it. QuoteThat is run by an individual developer, not a company.
What we collect
| Data | Why |
|---|---|
| Email address | To create your account and let you sign back in. |
| Display name | Shown next to your quotes and comments so your group knows who posted. |
| Profile photo (optional) | Shown as your avatar in the app. |
| Photos you capture or choose | Stored so they can be shown to your group alongside your quote. |
| Quote text and comments | The content of the app — shown to members of your group. |
| Group membership | To show you the right feed and control who can see what. |
| Reports and blocks you submit | To review reported content and to hide people you have blocked. |
| Push notification token | If you allow notifications, a random token that Apple gives your device, so we can tell you when someone in your group posts a quote or comments. It is not your advertising identifier and is deleted when you sign out or delete your account. |
| Technical data | Like most online services, our hosting provider may log basic technical information such as IP address, device type, and app version when your device connects. This is used to keep the service running and secure, not for advertising. |
| Data stored on your device | The app keeps your sign-in session, and temporarily saves recently viewed photos and feed content on your phone so it opens quickly. Signing out ends your session, and deleting the app removes everything stored on your device. |
QuoteThat does not itself collect your precise location, contacts, health data, or browsing history. Our advertising provider (see Advertising below) may collect your device's advertising identifier and approximate location if you allow it. We do not use analytics tools.
Camera and photo access
The app asks for camera access so you can take a photo for a quote, and for photo library access if you choose an existing photo instead. These are used only when you actively take or pick a photo. The app does not scan or upload your photo library in the background.
Who can see your content
Your quotes, photos, and comments are shown in the app only to the members of the groups you have joined. They are not listed publicly or searchable. Photos are stored at long, randomly generated web addresses that are never published, but anyone who somehow obtains the exact address of a photo could open it without signing in, so treat what you post accordingly.
Anyone with a group's invite code can join that group and see its content, so only share invite codes with people you trust. Other members of your group can save, screenshot, or share what you post, and we cannot control what they do with it.
QuoteThat's developer can access stored content when needed to review a report, investigate abuse, fix a problem, or comply with the law.
Who we share data with
- Supabase — provides the database, authentication, and photo storage that the app runs on. Your data is stored on their servers. See supabase.com/privacy.
- Apple — delivers push notifications (it receives your push token and the notification text), and if you buy anything in the app, processes the payment. We never see your payment details.
We do not sell your personal information, we do not give your account details, quotes or photos to advertisers, and we do not give it to data brokers. The only information that reaches our advertising provider is what is described under Advertising below. We may disclose information if required by law, such as a valid court order, or when needed to protect someone's safety or enforce our Terms of Use.
Where your data is stored
Our database and photo storage are hosted by Supabase in the United States. If you use QuoteThat from outside the United States, your information will be transferred to and stored in the United States, which may have different data-protection laws than your country.
Advertising
The ads are a banner in your feed and a full-screen ad after you post a quote. Google may collect your device's advertising identifier, approximate location, and information about how you interact with ads, to choose and measure ads and to prevent fraud. iOS asks for your permission before QuoteThat lets Google use your advertising identifier to track you across other companies' apps and websites; if you decline, you will still see ads, but they will not be personalized from that tracking. You can change your choice at any time in iPhone Settings > Privacy & Security > Tracking. Google's use of data is described at policies.google.com/technologies/partner-sites.
We do not give Google your name, email address, quotes, photos, or group information. Buying "Remove Ads" is handled by Apple; we do not receive your payment details. Once you remove ads, the app stops requesting them.
How long we keep it
Your content is kept until you delete it or delete your account. You can delete your own quotes and leave a group at any time inside the app. Records of reports about content may be kept for a limited time after the content is removed, so we can enforce our Terms of Use and respond to repeat abuse. Copies of data held in our hosting provider's routine backups, if any, are overwritten on the backup schedule and are not used for any other purpose.
Deleting your account
You can permanently delete your account inside the app: Groups tab → Account → Delete Account. This removes your profile, your quotes, your uploaded photos, and your comments. It cannot be undone. If you would rather we do it for you, email jacobbkroll@gmail.com.
Children
QuoteThat is not intended for children under 13, and we do not knowingly collect data from them. If you believe a child under 13 has created an account, email us and we will delete it. If you are a parent or guardian and believe your child has posted content or been photographed without your consent, contact us and we will remove it.
Your rights
Depending on where you live (including California and the European Economic Area, the United Kingdom, and similar regions), you may have the right to access, correct, export, or delete the personal data we hold about you, to object to or restrict certain uses, and not to be treated differently for using these rights. Most of this you can do yourself in the app by editing your profile, deleting quotes, or deleting your account. For anything else, email jacobbkroll@gmail.com and we will respond within 30 days. We may need to confirm your identity first.
We process your information to provide the app you asked for (contract), to keep it safe and enforce our rules (legitimate interests), to send notifications you have allowed (consent, which you can withdraw in iOS Settings), and to meet legal obligations. If you are in the EEA or UK and are unhappy with how we handle your data, you can also complain to your local data-protection authority.
Security
Data is transmitted over encrypted connections and access is restricted by per-user database rules so that people can only read content from groups they belong to. No system is perfectly secure, but we take reasonable steps to protect your information. If a breach affecting your personal information occurs, we will notify affected users and authorities as required by law.
Changes
If this policy changes, the date at the top of this page will be updated, and for significant changes we will tell you in the app before they take effect.
Contact
Questions about privacy: jacobbkroll@gmail.com