Quotsy — Privacy Policy
Effective 29 August 2026
Quotsy keeps your books, the lines you save from them, and the dates you finished reading. That is all it keeps. There is no analytics, no advertising, no tracking, and nothing is ever sold or shared for marketing.
Quotsy needs an account, because your library is stored on our server so it stays in step between the app and platform.quotsy.app. This policy explains exactly what is stored there, who else touches it, and how to get rid of it.
What we store
| Your account | Your name, your email address, and your password. The password is stored only as a bcrypt hash — we cannot read it, and neither can anyone who obtains the database. We also record when the account was created and whether you have confirmed your email address. |
|---|---|
| Your library | For each book: its title, authors, category, cover image address, star rating, and the Google Books identifier if you added it through search. |
| Your notes | Everything you write about a book, including the lines you mark as quotes. This is your own writing and it is private to your account. |
| Your reads | The dates you marked a book as finished. |
That is the complete list. Quotsy does not collect your location, your contacts, your photos, your microphone, your device identifiers, your advertising identifier, or anything about how you use the app. It asks for no device permissions at all.
What stays on your phone
When you sign in, your phone keeps a sign-in token in the app's own private storage so you do not have to type your password every time. It expires on its own, and signing out or deleting the app removes it.
Who else touches your data
- Heroku hosts the Quotsy service and its database. Your library lives there.
- Amazon Web Services (SES) sends the two emails Quotsy can send you: the link that confirms your address, and the daily quotes email if you turn it on. AWS handles the delivery of those messages.
- Google Books is searched when you look for a book to add. The search runs from our server rather than your phone, so Google receives the words you typed but not your device or your network address. Your phone does load book cover images directly from Google's servers when it shows your library.
Nobody else. Your notes are never sent to any third party, and no part of your library is used to train anything.
The daily email
If you turn on daily quotes in Settings, once a day Quotsy emails you up to five lines picked at random from the ones you marked as quotes. It is off until you turn it on, it requires a confirmed email address, and you can turn it off at any time from the same switch. Nothing else is ever emailed to you.
Children
Quotsy is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has created an account, write to us and we will delete it.
Deleting your data
Settings has a Delete account button. It removes your account, every book, every note, and every read in one go, permanently, with no waiting period and no need to write to anyone. Deleting the app alone does not do this — use the button first if you want the server copy gone.
You can also delete a single book, a single line of notes, or a single read from inside the app at any time.
Security
Traffic between the app and the service is encrypted in transit. Passwords are stored hashed, never in plain text. Access to a library is checked against the account that owns it on every request.
Changes to this policy
If Quotsy changes in a way that affects this policy, this page is updated and the effective date above changes with it.
Contact
Questions about this policy, or requests about your data, can be sent to hinojosalunaf@gmail.com.