Privacy Policy

Effective date: April 15, 2026 · Last updated: August 3, 2026

Quillora ("we", "us", or "our") operates the Quillora iOS application (the "App"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use the App.

By using Quillora, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

• Account information: if you create an account, we collect your email address and display name. Authentication is handled through Supabase Auth or Sign in with Apple (if you choose Apple, you may hide your email and we receive an Apple-provided relay address).
• Reading preferences: your selected topics and interests, daily reading goal, and appearance settings.
• Contact communications: if you email us at contact@quillora.app, we retain your email address and message content in order to respond.

1.2 Information Collected Automatically

• Usage data: articles read, reading sessions and time, streak counts, feather balance, fox evolution, and shop interactions. This data is stored locally on your device (using SwiftData) and, when you have an account, is synced to our backend (see Section 2).
• Purchase data: subscription and in-app purchase transactions are processed by Apple via StoreKit. We receive purchase and entitlement status only; no payment card data is ever shared with us.
• Advertising identifier (free version): the free version displays ads through Google AdMob. Only if you grant permission through Apple's App Tracking Transparency (ATT) prompt may AdMob access your device's advertising identifier (IDFA) to show more relevant ads. If you decline, you still see ads, but they are non-personalized.
• Device & diagnostic data: device model, operating system version, and app version, used for crash diagnostics and compatibility.

2. Accounts & Cloud Storage

If you create an account, your profile — email, display name, reading progress, streaks, fox evolution, interests, and shop state — is stored on secure servers provided by Supabase so that your progress can sync across your devices. Communications between the App and Supabase are encrypted using HTTPS/TLS.

You can delete your account and all of its associated cloud data at any time from Settings → Delete Account inside the App. This immediately removes your record from Supabase.

If you use the App without an account, your data stays on your device and is not synced to our servers.

3. How We Use Your Information

• To provide and improve the App's functionality.
• To sync your reading progress across devices (when you have an account).
• To process in-app purchases and manage subscription and entitlement status.
• To display advertising in the free version (personalized only with your ATT consent).
• To send optional push notifications about daily reading reminders (only if you grant permission).
• To respond to your support inquiries.
• To diagnose crashes and fix bugs.

4. Advertising & Tracking

The free version of Quillora shows ads through Google AdMob. We use Google's User Messaging Platform (UMP) to gather any consent required in your region. Personalized advertising, which may use your device's advertising identifier (IDFA), is only enabled if you allow it through Apple's App Tracking Transparency prompt. You can change or revoke this at any time in iOS Settings → Privacy & Security → Tracking. Quillora Premium removes ads.

5. Third-Party Services

• Supabase: account authentication and cloud database for your profile and progress.
• Apple StoreKit / App Store: processing of purchases and subscriptions.
• Google AdMob: advertising in the free version; may access the IDFA with your ATT consent.
• Google User Messaging Platform (UMP): advertising consent management.
• Apple Push Notification Service (APNs): optional reading reminders.

We do not sell your personal data to third parties, and we do not share your reading history with data brokers.

6. Data Storage & Security

Local data (reading history, appearance settings, and progress that has not yet synced) is stored on your device using SwiftData and is deleted if you uninstall the App. Account data is stored on Supabase servers while your account remains active. All communication between the App and our backend is encrypted in transit (HTTPS/TLS 1.2 or higher).

We implement commercially reasonable technical and organizational safeguards to protect the data we process. However, no method of transmission over the internet is 100% secure.

7. Children's Privacy

Quillora is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at contact@quillora.app and we will delete it promptly.

8. Data Retention

Local data is retained until you delete the App or clear its data. Account data on Supabase is retained while your account is active and is deleted when you delete your account. Support emails are retained for up to 2 years or until you request deletion.

9. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete the personal data we hold about you. Account holders can export or delete their data directly in the App (Settings → Delete Account). See the GDPR and CCPA sections for jurisdiction-specific rights. To exercise any right, contact us at contact@quillora.app.

10. International Data Transfers

Your data may be processed on servers located outside your country of residence (primarily the data centers of Supabase and Apple). Where required, we rely on appropriate safeguards, such as Standard Contractual Clauses and certified providers, to protect your data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date above. Continued use of the App after changes constitutes your acceptance.

12. Contact

Questions about this policy? Email us at contact@quillora.app.