Privacy Policy

Effective 14 October 2026

1. Controller

Eutopix Labs P.S.A. (prosta spółka akcyjna) is the controller for the limited information described in this policy, processed through the app, this website and support communications.

Registered by the Sąd Rejonowy dla m.st. Warszawy w Warszawie, XII Wydział Gospodarczy KRS. KRS 0001237465 · NIP 7011310736 · EU VAT PL7011310736 · REGON 544584646 · share capital PLN 20,000. See also the legal notice.

2. Information stored by the app

QuoteLocal can store business details, customers, catalogue items, quotes, invoices, notes, logos, attachments, payments and signatures that you enter. Records stay in the app’s protected local container unless you explicitly enable Pro’s private iCloud sync. Eutopix Labs does not operate a QuoteLocal account system or a server that stores app records, and does not receive these records. The only developer-operated service the app can contact is the optional usage-count collector described in section 4, which you must turn on yourself and which never receives your records.

Optional sync stores a QuoteLocal data file in your private Apple iCloud container so your signed-in Apple devices can access it. Each synced device keeps a local copy for offline work. Apple processes the iCloud copy under its terms and your iCloud settings. You can turn sync off or delete the shared iCloud copy in the app without deleting local records from the current device.

Contacts. When you import a customer from Contacts, QuoteLocal uses Apple’s contact picker. The app does not get access to your address book; it receives only the contact you choose, and copies its name, email addresses, phone numbers and postal addresses into the customer record on your device.

Dictation and drafting. Dictating a job description is optional. QuoteLocal asks for microphone and speech-recognition permission when you first use it and requires on-device speech recognition, so the audio is processed on your device and is not sent to Apple or to Eutopix Labs. Where available, suggested quote lines are written on your device with Apple Intelligence; your text is not sent to Eutopix Labs.

Reminders. Optional overdue-invoice reminders are local notifications scheduled on your device. They show the document number and amount, not the customer’s name, and are never sent to the customer.

PDFs and encrypted QuoteLocal backup files are created only when you request them. New backup files use password-based AES-256 encryption; Eutopix Labs cannot recover the password. Once exported, files are under your control. The destination you choose—such as Files, Mail, AirDrop or a third-party provider—may process them under its own terms and privacy policy.

3. Purchases

Apple processes App Store purchases. QuoteLocal receives StoreKit product and cryptographically verified entitlement information needed to unlock Pro features. Eutopix Labs does not receive your full payment card details. Apple’s processing is governed by Apple’s privacy policy and your Apple Account settings.

Apple provides us with App Store sales, subscription, proceeds and performance reports. Depending on the report, these can include product and transaction details, country or storefront, subscription status and an Apple-generated subscriber identifier, but not your name or email address. We use them to provide purchases, keep accounting and tax records, handle refunds and disputes, and understand aggregate performance. We keep these records for as long as Polish accounting and tax law require — usually 5 years from the end of the calendar year in which the related tax fell due (Accounting Act art. 74; Tax Ordinance arts. 70 and 86) — or longer while a dispute requires it. App purchases are sold by Apple, so your purchases do not appear in our accounting records.

4. Analytics, advertising and tracking

The QuoteLocal app contains no advertising SDK and no third-party analytics SDK. It does not create an advertising profile, use an advertising identifier or track you across apps or websites. The app may produce ordinary diagnostic information controlled by your Apple device and App Store privacy settings; Apple determines whether such diagnostics are shared with developers.

Optional usage sharing. In versions that offer Usage analytics in Settings, you can choose to share basic counts to help Eutopix Labs improve QuoteLocal. Sharing is off by default and normal features remain usable without it. Counts cover app opens, successful tasks, paywall and plan choices, purchase outcomes and useful returns, plus app version and build number, platform, distribution channel (App Store, TestFlight or unknown), UTC day and consent-cohort week. We do not send business records, customer details, quotes, invoices, document contents, text, precise locations, financial amounts, name, email, advertising identifiers or persistent account, installation or device identifiers. Purchase outcomes are categories, not transaction identifiers or amounts; locally used transaction identifiers are not uploaded. A temporary random batch identifier recognizes retries. Nothing is collected or queued for analytics before consent.

Eutopix Labs operates the collector using Cloudflare Workers and Cloudflare D1. The database is restricted to the European Union, but Cloudflare’s network may process requests elsewhere and necessarily sees the network address during transport. The collector does not retain IP addresses, request headers or raw bodies; invocation/application logging is disabled. Cloudflare may still process infrastructure and security information under its own obligations and applicable safeguards. Requests are not guaranteed anonymous or entirely processed within the EU. No advertising personalization or cross-company tracking is added.

Unsent counts expire after 7 days. Daily cleanup removes retry identifiers older than 8 days and aggregate counts older than 400 days. Provider recovery copies may retain earlier database states for an additional recovery window, currently up to 30 days depending on the Cloudflare plan. Turning sharing off deletes unsent counts and local sharing metadata; requests already sent may already have been accepted. Combined totals contain no person identifier, so we cannot locate or erase a person’s past contribution. Questions and applicable rights requests can be sent to privacy@quotelocal.app.

Advertising measurement (Apple). QuoteLocal shows no ads, does not use the advertising identifier (IDFA), never shows an App Tracking Transparency (ATT) prompt and does not track you across other companies’ apps or websites.

• Apple’s own measurement. If you install QuoteLocal after tapping an Apple Ads advertisement, Apple may count the install and attribute it to that ad using its own App Store measurement. Apple is responsible for that processing; see Apple’s privacy policy.
• EU/EEA, UK and Switzerland. From the first update of QuoteLocal released after 14 October 2026, the app sends no SKAdNetwork or AdAttributionKit conversion value in these regions. Earlier versions may send the coarse, aggregate value described below in every country.
• Other regions. Outside these regions (and, in earlier versions, everywhere) the app may send a coarse, aggregate conversion value through Apple’s SKAdNetwork/AdAttributionKit: a number from 0 to 3 describing progress during the first days after installation (for example: app opened, first document exported, offer viewed, subscribed or bought). It contains no identifier, no IDFA and nothing about you, and no ATT prompt is shown. Apple passes it on delayed and combined with other installs; Eutopix Labs receives only aggregated postbacks that identify no one. Legal basis: our legitimate interest in measuring our own advertising (Art. 6(1)(f) GDPR where applicable).

5. Website delivery

quotelocal.app does not set marketing or analytics cookies. Our hosting and infrastructure provider, Cloudflare, may process IP addresses, request metadata and security events to deliver the site, prevent abuse and maintain reliability. This limited processing is based on our legitimate interest in operating a secure website. Infrastructure logs are retained according to provider configuration and legal requirements.

6. Support communications

If you email us, we process your address, message, device and app details, and any files you deliberately attach so we can answer your request. Please do not send customer records or financial documents unless we specifically request an anonymised example. Support information is kept only as long as needed to respond, maintain a useful support history and meet legal obligations.

7. Legal bases and recipients

Where the GDPR applies, we process support requests to perform a contract or take steps at your request, App Store purchase records to perform the purchase agreement and meet accounting and tax obligations, aggregate ad-attribution results and website security information for our legitimate interests, optional usage counts on the basis of your choice to turn sharing on (which you can withdraw at any time in Settings), and records required by law to meet legal obligations. Recipients are limited to Apple (App Store, StoreKit, iCloud and device services, under its own terms), service providers needed for website delivery and optional usage counts (Cloudflare), email, support and legal compliance. We do not sell personal data.

8. For businesses and organisations

Customer, quote and invoice data you enter stays on your device or in your own private iCloud container. When you record information about customers or other people, you (or your organisation) are the controller of that data and decide why it is collected, how long it is kept and with whom it is shared. Eutopix Labs receives none of it and acts as neither controller nor processor for it. There are no sub-processors for record data and no developer access to records. This also applies when an organisation deploys the app through Apple Business Manager or device management.

9. International transfers

Apple and Cloudflare can process information in the United States and other countries outside the European Economic Area. These transfers rely on the EU–US Data Privacy Framework where the provider is certified, and on the European Commission’s Standard Contractual Clauses or another lawful transfer mechanism otherwise.

10. Your rights

Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection, and withdraw consent at any time where we rely on consent. Send requests to privacy@quotelocal.app; we normally reply within one month. Because app records are not available to us, you manage local and optional iCloud copies inside QuoteLocal or through your Apple account and device settings.

You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl, or to the authority where you live or work.

California (CCPA/CPRA): we do not sell or share personal information. The only categories we handle are identifiers and messages you send by email, commercial information in Apple’s purchase reports, website network data and, if you opt in, aggregate usage counts, used for the purposes described above.

Do Not Track: this site and our apps do not track you across third-party sites or services, so they behave the same whether or not your browser sends a Do Not Track or Global Privacy Control signal.

11. Children

QuoteLocal is a business tool and is not directed to children under 16. We do not knowingly collect children’s personal data through a QuoteLocal account because no such account exists.

12. Security and changes

We use proportionate technical and organisational safeguards. No system can guarantee absolute security. We may update this policy when the product, providers or law changes; the effective date above will identify the current version.

13. Contact

Privacy questions: privacy@quotelocal.app. General help: support@quotelocal.app.