Privacy Policy

1. Summary

2. Information We Collect

2.1 Information you provide voluntarily

We do not require an email address or phone number to use the core App.

2.2 Information collected automatically

We do not currently implement custom logEvent calls in application code; Firebase may still collect default and automatic events when the SDK is initialized.

2.3 Information from your device and permissions

The App requests the following Android permissions:

The App does not request location, contacts, microphone, or camera permissions. Profile photos are chosen through the system photo picker (you grant access to a specific image).

Package visibility: The App may query whether Instagram is installed to support sharing to Instagram Stories.

2.4 Information you share outside the App

When you use Share Studio or system share:

• A quote image may be saved temporarily in the App's cache and passed to apps you select (messages, social networks, etc.);
• Shared text may include the quote, author, and a “Shared from Quoted” attribution.

We do not control what third-party apps do with content you share to them.

2.5 Deep links and web content

• Links to https://app.quoted.pro may open specific screens in the App.
• In-app WebViewpages may load external URLs (for example, our feedback form). Those pages are subject to the third party's privacy policy (e.g. Google).

3. How We Use Information

We use information to:

• Provide and maintain the App (quotes, explore, journal, favorites, streaks, widget, notifications);
• Personalize your experience (name in messages, profile, themes);
• Improve reliability (crash reporting, performance monitoring);
• Understand aggregate usage (analytics);
• Operate remote configuration and optional promotional in-app messages;
• Respond to feedback you choose to submit;
• Comply with law and protect our rights.

We do not use your journal content for advertising profiling on our servers, because journal entries are stored locally and are not uploaded to our backend in the current App version.

4. Legal Bases (EEA / UK users)

If you are in the European Economic Area or United Kingdom, we process personal data on the following bases:

You may withdraw consent for notifications through system settings or in-app notification preferences.

5. How We Store and Protect Information

• On-device data (journal, favorites, profile, streaks) remains on your phone or tablet unless you use device backup features.
• Android backup is enabled at the application level (allowBackup="true"). Depending on your device and Google account settings, some app data may be included in Google's encrypted backup or device transfer. Review your device backup settings if you want to limit this.
• Firestore contentis hosted on Google's infrastructure. We apply access rules intended to allow public read of quote/author content and restricted writes for administrative operations.
• We use industry-standard measures through our providers, but no method of transmission or storage is 100% secure.

6. Third-Party Service Providers

We rely on service providers that may process data on our behalf:

These providers may process data in the United States and other countries. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by major cloud providers.

7. Data Retention

8. Your Choices and Rights

Depending on your location, you may have rights to:

• Access personal data we hold about you;
• Correct inaccurate data;
• Delete data we control;
• Object to or restrict certain processing;
• Data portability where applicable;
• Withdraw consent for notifications;
• Lodge a complaint with a supervisory authority (EEA/UK).

Practical steps in the App today:

Because we do not operate user accounts, we may not be able to identify you from analytics data alone. Contact us (Section 12) and describe your request; we will respond within applicable legal timeframes.

California (CCPA/CPRA): We do not sell personal information. California residents may request access, deletion, and correction as described above.

9. Children's Privacy

The App is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it where we have control.

10. International Transfers

We and our providers may process data in countries other than your own, including the United States and India. By using the App, you understand that your information may be transferred internationally with appropriate safeguards where required by law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top. Material changes may be communicated through the App or Play Store listing. Continued use after changes means you accept the updated policy.

12. Contact Us

For privacy questions, requests, or complaints:

• Email: toonandtools@gmail.com (replace with your official privacy contact before publication)
• Website: https://app.quoted.pro
• Developer: Toon and Tools
• App: Quoted (com.toonandtools.quoted)

13. Additional Disclosures for App Store Requirements

Google Play Data Safety

When completing the Play Console Data safety form, align declarations with this policy, including:

• Data types collected (app activity, diagnostics, optional profile fields stored locally);
• Data shared with third parties (Google/Firebase);
• Whether data is encrypted in transit (HTTPS for network calls);
• Whether users can request deletion (via contact and local data clearing).

Firebase and device identifiers

Firebase Analytics and Crashlytics may use identifiers described in Google's documentation. You can configure data collection in the Firebase console for your project.

Appendix A — Technical reference (from app architecture)

This appendix summarizes data practices reflected in the Quoted codebase for transparency. It is not a separate contract.

Local storage (on device):

• Room database: journal_entries, favorite_quotes
• DataStore preferences: user name, DOB, gender, profile photo URI, streak dates, notification settings, theme, trending cache, achievement popup state, launcher icon selection, onboarding completion

Network (typical user session):

• Read quote and author documents from Firestore collections such as quotes_v2 and authors
• Increment aggregate likes, shares, or views on quote documents when you perform those actions
• Fetch Firebase Remote Config for feature flags
• Automatic Firebase Analytics / Crashlytics / Sessions reporting

Not collected by the App (current version):

• No email/password authentication
• No precise geolocation
• No contacts or SMS access
• No in-app payment billing data (subscriptions not wired in reviewed builds)