Effective date: 2026-10-17 Version: 1.0-draft
This policy describes what the Quoteback application (the "App") does with data, in line with the General Data Protection Regulation (GDPR) and Polish law. Every statement matches the shipped App; if the App changes, this policy changes in the same release.
ASE Spolka Akcyjna, ul. Portowa 41, 78-100 Kolobrzeg, Poland, KRS 0000965347, NIP 6711850032, REGON 521363498 ("we", "us") is the controller of personal data processed through the App.
Contact for all privacy matters: sprzedaz@amazinggirl.pl. We have not appointed a data protection officer because the scale and nature of our processing do not require one.
Android may include the App's local data in the device backup to your Google Account (Android Backup). That copy is made and encrypted by Google under your Google Account settings; we have no access to it. You can exclude the App from backups in the Android settings.
| Data | Why | How long we keep it |
|---|---|---|
| The title, author and highlights (with your notes on them) of one book, at most 300 highlights and 30,000 characters, and the language of the answer | To produce the digest you requested (summary, five supported claims, three questions to yourself) | 24 hours, under a hash of the input, so a retry returns the same result; physically deleted within 72 hours after that |
| The same book data plus your question (at most 300 characters) | To answer your question from those highlights | 24 hours, as above |
| A reported digest or answer (the text you saw, the book title, the reason and your optional comment) | To review the quality and safety of AI-generated content | 90 days |
| Anonymous user identifier (Firebase Anonymous Authentication) | Usage limits, subscription entitlement, abuse prevention | Until you delete your data (section 9) |
| App version, device language, first-use date | Compatibility and support | Until you delete your data |
| Monthly usage counters (digests and questions used) | Enforcing free and paid limits | 45 days from the start of the month |
| A one-way hash (SHA-256) of the Android device identifier (ANDROID_ID), salted with the App's package name | Applying the monthly limit per device as well as per installation, so that reinstalling the App does not grant a new free allowance | 45 days, with the counters; the raw identifier never leaves your device and the hash cannot be reversed |
| AI usage ledger (token counts, estimated cost, outcome, latency; no content) | Cost control | 400 days; your identifier is replaced by a pseudonym on deletion |
| Technical request logs (identifier, route, status, timing, counts; no content) | Operating and securing the service | 30 days |
We do not log the content of your highlights, notes, questions, digests or answers. Our logging is configured to remove such fields, and an automated test in our build checks it.
The App contains no advertising SDK and no analytics SDK in this version. If crash reporting or usage analytics are added later, this policy will describe them before they ship.
Name, email address, phone number, contacts, precise or approximate location, your Amazon or Google account data, your reading position or purchase history in any reading app, advertising identifiers, and any data for advertising purposes. The App shows no ads.
| Purpose | Data | Legal basis |
|---|---|---|
| Providing the AI digest or answer you request | One book's highlights and notes, your question, the result | Performance of a contract (Art. 6(1)(b) GDPR) - the Terms of Service - and your explicit confirmation on the consent screen before the first request |
| Enforcing usage limits, preventing abuse and fraud, securing the service | Identifier, hashed device identifier, counters, logs, App Check data | Legitimate interests (Art. 6(1)(f)) in protecting the service and controlling costs |
| Reviewing reported AI-generated content | Reported digest or answer, reason, comment | Legitimate interests (Art. 6(1)(f)) in content quality and safety, and legal obligations regarding unlawful content where applicable |
| Keeping subscription and entitlement records (when Quoteback Pro is available) | Purchase token, entitlement history | Performance of a contract (Art. 6(1)(b)) and legal obligations on accounting and complaint handling (Art. 6(1)(c)) |
Highlights may reveal your interests, including sensitive ones; the App does not profile you and we do not analyse them for any purpose other than producing the result you asked for.
Outside the EEA and the UK we process personal data for the same purposes under the laws applicable to you.
| Recipient | What | Where |
|---|---|---|
| OpenAI, L.L.C. (our AI provider; provider policies: https://openai.com/policies/) | The title, author, highlights and notes of the one book you asked about, the answer language, and your question. No identifier, no other books, no files. | United States (OpenAI API). Processing under the provider's API data processing terms: the data is not used to train the provider's models and is not retained by the provider beyond abuse monitoring |
| Google Cloud (Cloud Run, Firestore, Cloud Logging, Secret Manager) | Hosting of our server and database | europe-central2 (Warsaw, Poland) |
| Google Firebase (Authentication, App Check) | Anonymous identity, app integrity | Google's infrastructure per Firebase terms |
| Google Play (when Quoteback Pro is available) | Purchases and subscriptions | Google's infrastructure |
We do not sell personal data and do not share it for advertising. If the AI provider changes, this policy is updated in the same release.
Our server runs in europe-central2 (Warsaw, Poland). Our AI provider and Google may process data outside the European Economic Area, including in the United States. For those transfers we rely on the European Commission's adequacy decision for the EU-US Data Privacy Framework, under which both OpenAI and Google LLC are certified, and on the Standard Contractual Clauses contained in the data processing terms of each provider. You may ask sprzedaz@amazinggirl.pl for details of the safeguards used.
Retention periods are stated per data type in section 3.2. Time-based deletion is applied by our database automatically; expired records are never served, and physical deletion completes within 72 hours of expiry. Data on your device stays until you delete it or uninstall the App.
The App is not directed at children under 13. If you are below the age at which your country allows you to consent to online services on your own (16 in Poland and in several other EU countries, 13 in others), you may use the App only with the consent of a parent or guardian. We do not knowingly collect personal data from children below that age. Because the App requires no account, we cannot verify age; if you believe a child has used the App in a way that provided us personal data, contact sprzedaz@amazinggirl.pl and we will delete it.
Under the GDPR you have the right to access, rectify and erase your data, to restrict or object to processing, to data portability, and to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzedu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).
How to exercise them:
Data is encrypted in transit (TLS). The App contains no server credentials or AI provider keys. Our server verifies every request with a signed token and checks that it comes from a genuine copy of the App. Content fields are removed from logs. Access to production systems is limited to named team members. No method of transmission or storage is completely secure; we cannot guarantee absolute security.
Digests and answers are generated automatically by an AI model from the highlights you marked. They are labelled "Generated by AI" in the App. They may be inaccurate or incomplete; our server rejects claims that are not supported by the highlights they cite, but it cannot judge truth. You can report any digest or answer from the App. Reports are used to improve the quality and safety of generated content; they do not train the AI provider's models under our provider terms. We make no decisions about you that have legal or similarly significant effects based on automated processing.
The daily reminder is created locally on your device, only when you have enabled it, at the hour you chose, and only when today's highlights have not yet been read: at most one a day. No data is sent to us to deliver it.
We will publish changes at https://quoteback-backend.europe-central2.run.app/legal/privacy and update the effective date. For material changes (new data types, new recipients, longer retention) we will inform you in the App before the change takes effect.
ASE Spolka Akcyjna, ul. Portowa 41, 78-100 Kolobrzeg, Poland, sprzedaz@amazinggirl.pl.