Privacy Policy

This Privacy Policy describes how Quotes ("we", "our", "the app") handles information when you use the Quotes invoicing application, available on Android, iOS, macOS, Windows, Linux, and Web.

Because Quotes is a local-first application, the vast majority of your data never leaves your device. Please read this policy to understand exactly what is and is not transmitted.

1. Data stored locally on your device

The following data is stored exclusively on your device and is never transmitted to our servers unless you enable Cloud Sync (Pro) — see Section 3:

• All estimates, invoices, and credit notes you create
• Line items, pricing, discounts, and tax details
• Client names, addresses, and tax identifiers
• Your company profile, including logo
• Payment records and document notes
• Reusable document templates

This data is encrypted on-device using AES-256-CBC before being written to disk. The encryption key is derived from your Firebase account identifier (UID) and is never transmitted anywhere.

2. Data transmitted to Firebase (Google)

Quotes uses Firebase, a Google service, for authentication and, if you enable it, cross-device sync and error reporting. The following data is shared with Firebase:

• Your email address (used as your account identifier)
• Your Firebase UID (a random token, used to derive your encryption key)
• Authentication tokens (session management)
• A randomly generated device identifier (not your device's hardware ID) used only to coordinate sync between your own devices — see Section 3

Firebase's handling of this data is governed by Google's Privacy Policy.

3. Cloud Sync (Pro)

If you enable Cloud Sync to keep your documents up to date across multiple devices, the following is transmitted:

• Your full document and client records, encrypted (AES-256-CBC) before upload, stored as opaque encrypted files in Firebase Storage
• Sync metadata stored in Firestore in the clear (not encrypted): last-modified timestamp, an integrity checksum of the encrypted content, the random device identifier described in Section 2, and deletion status — none of this metadata contains your document content, client names, or financial figures

The encryption key is derived deterministically from your account identifier. This means the server itself cannot read your document content, but it is not a "zero-knowledge" design in the strict cryptographic sense: anyone who had access to both our Firebase project and your account identifier could in theory derive the same key. We do not access, inspect, or share this content. Cloud Sync is currently unavailable on Linux desktop.

4. Digital signature feature (Pro)

When you use the digital signature feature, the following additional data is written to Firebase Firestore:

• A snapshot of the document being signed (sent to your client for review)
• Your company profile snapshot (displayed to your client)
• The client's name and email address
• Signature status (created, opened, signed, or rejected) and an audit trail of timestamps for each status change, plus the signer's name and any note they choose to add

This data is stored in Firestore and is accessible only to your authenticated account. Signature data is retained until you delete the associated document.

As with any web request, your client's browser and device necessarily transmit their IP address to Firebase's infrastructure when they open the signing link, as an inherent part of how web requests work. We do not record, store, or use this IP address for tracking or location purposes.

5. Crash and error reporting

Quotes uses Firebase Crashlytics to help us detect and fix bugs. When the app or our sync engine encounters an unexpected error, we receive a technical error report containing the type of error, a stack trace, and which internal operation failed. These reports never include your document content, client data, or any business information — only anonymous technical details needed to diagnose the issue. Crash reporting is disabled on the Web version of the app.

Quotes does not use any third-party advertising SDKs, behavioral analytics, or usage-tracking tools. We do not track how you use the app, and we do not profile you based on your business data.

6. Data we never collect

• We never read, process, or store the content of your invoices or estimates
• We never sell your data to third parties
• We do not show advertising and have no advertiser relationships
• We do not profile users based on their financial activity

7. Backup & Restore (Pro)

The Backup & Restore feature exports a ZIP archive of your locally stored encrypted files. This archive is saved to a location you choose (your device's file system, cloud storage, etc.). We do not receive, store, or have access to your backup files.

8. Data retention and deletion

Local data persists until you uninstall the app or use the "Empty Trash" / permanent delete function. Deleted documents are soft-deleted first (recoverable for 30 days) then permanently removed.

You can delete your account yourself at any time from within the app (Settings → Account → Delete Account). This immediately removes your authentication record and your associated Firestore and Cloud Sync data. If you are unable to access the app, you may instead contact us at the email below and we will delete your account and associated server-side data within 30 days.

9. Children's privacy

Quotes is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated through an in-app notice. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact

If you have questions about this Privacy Policy or your data, contact us at: [email protected]