Privacy Policy

Effective date: March 17, 2026

Quoted Collective ("we", "us", "our") operates the Quoted Collective mobile application. This page informs you of our policies regarding the collection, use, and disclosure of personal data when you use our app.

1. Data We Collect

• Account information: email address, display name, and profile photo (provided via Apple Sign-In or Google Sign-In).
• User-generated content: quotes, images attached to quotes, group names and descriptions.
• Location data: approximate location when you choose to tag a quote (only with your explicit permission).
• Device tokens: push notification tokens to deliver notifications.
• Usage data: app interactions for improving the service (no third-party analytics are currently used).

2. How We Use Your Data

• To operate and maintain the app and your account.
• To display quotes and group content to group members.
• To send push notifications for group activity (new quotes, join requests, etc.).
• To enable sharing of quotes via links and images.
• To generate AI images when you use the image generation feature (quote text is sent to third-party AI providers).

3. Data Storage & Hosting

Your data is stored securely on Supabase (hosted on AWS). Authentication is handled through Supabase Auth with Apple and Google OAuth providers. All data is transmitted over HTTPS/TLS.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties. Data is only shared:

• With other members of groups you belong to (quotes, display name, avatar).
• When you explicitly share a quote via a public link (only non-members-only, approved quotes are accessible).
• With service providers that help us operate the app (Supabase for hosting, Firebase for push notifications, Vercel for the share server).
• With AI image generation providers (Google Gemini, Hugging Face) when you use the image generation feature — only the quote text is shared, no personal information.

5. Authentication

We support Sign in with Apple and Google Sign-In. We receive only the information you authorize (email, name). We do not receive or store your Apple ID or Google password.

6. Push Notifications

We use Firebase Cloud Messaging (FCM) and Apple Push Notification Service (APNs) to send notifications. You can disable notifications at any time through your device settings.

7. Data Retention

We retain your data for as long as your account is active. When you delete your account, all your personal data (profile, quotes, group memberships) is permanently removed from our systems.

8. Your Rights

You have the right to:

• Access your personal data through the app.
• Update your display name and profile photo in Settings.
• Delete your account and all associated data via Settings > Delete Account.
• Opt out of push notifications via your device settings.

For GDPR and CCPA requests, contact us at cdasidi@gmail.com.

9. Children's Privacy

Our app is not directed to children under 13. We do not knowingly collect data from children under 13.

10. Changes to This Policy

We may update this policy from time to time. We will notify you of changes by posting the new policy on this page and updating the effective date.

11. Contact Us

If you have questions about this privacy policy, please contact us at cdasidi@gmail.com.