Privacy Policy

Effective Date: March 28, 2026 · Last Updated: June 18, 2026

1. Overview

MyQuotaBag ("MyQuotaBag," "we," "our," or "us") is an independent personal tracking app designed to help users log purchases, boutique visit history, wishlist preferences, and related personal notes for informational purposes only.

MyQuotaBag is not affiliated with, endorsed by, or sponsored by Hermès International or any of its affiliates. Any reference to Hermès products, boutiques, or categories is used solely for descriptive and personal tracking purposes.

2. Information We Collect

We may collect information that you choose to provide directly in the app, including:

First name or profile name
Email address if you sign in with Apple or Google
Authentication tokens and account identifiers provided by Apple or Google sign-in services
Preferred boutique name and location (city or store name only, no customer contact information, addresses, or personal details related to boutique staff)
Sales Associate first name if provided by you
Purchase history, including item names, categories, dates, notes, and amounts
Wishlist preferences such as bag models, sizes, colors, hardware choices, and related notes
Store visit logs, boutique visit notes, and visit events
Receipt scan data, including extracted product names, SKU codes, and amounts (see the Receipt Scanning section for how Basic eReceipt and AI Scan Pro differ)
Receipt images you choose to save, which are kept locally on your device
Import history you add, derived from text or spreadsheet content you paste or enter

We may also collect limited technical information needed to operate and improve the app, including:

Device model
Operating system version
App version
Anonymous product usage analytics (such as which screens are viewed, which features are used, and aggregated event counts). This data is collected through Aptabase, a privacy-first analytics provider, and is not linked to your identity. No personal information, purchase amounts, item SKUs, or note content is included in analytics events. Analytics data is hosted in the European Union.
Crash reports and error logs
Sync status or related service diagnostics

Our website (myquotabag.com) uses Cloudflare Web Analytics to understand aggregate traffic. It does not use cookies, does not fingerprint visitors, does not track you across other websites, and does not build personal profiles. It records aggregate page views and referral sources only, with no individual identification.

We do not intentionally request or require the following for normal use of the app:

Last name
Precise GPS location
Credit card numbers
Banking information
Biometric data
Government-issued identification
Customer contact information, email addresses, or phone numbers related to boutique staff or sales associates

3. How We Use Your Information

We may use your information to:

Provide and operate the app
Authenticate your account via Apple or Google sign-in
Sync your data across devices when signed in
Store and organize your purchase history, wishlist, and visit logs
Calculate personal tracking metrics and app insights
Process receipt scans to extract and categorize purchase information (Basic eReceipt on your device; AI Scan Pro by securely transmitting the selected image for analysis)
Enable optional cloud backup or sync features
Maintain app security, reliability, and performance
Troubleshoot bugs, crashes, and sync issues
Improve product features and user experience
Provide customer support
Generate aggregated and de-identified product usage insights

We do not use your personal information to sell targeted advertising based on your purchase history.

4. Receipt Scanning

MyQuotaBag offers two optional receipt-handling options, and you choose which to use for each receipt:

Basic eReceipt processes clean digital receipt screenshots on your device to pre-fill a purchase entry. The image is not transmitted for this option.
AI Scan Pro is an optional feature for paper receipts, photos, and complex or uncertain scans. When you choose it, the selected image is securely transmitted for AI analysis through our backend service, and you review and confirm the extracted details before anything is saved.
Text extracted from your receipt, including product names, SKU codes, and amounts, is used to pre-fill your purchase entry and is stored within your personal app data once you confirm it.
A local product reference database is included within the app to assist with category identification.
You are responsible for scanning only receipts that belong to you, and for reviewing all results before saving.
MyQuotaBag is not responsible for errors in text recognition or category identification resulting from receipt quality, lighting conditions, or unsupported receipt formats.

5. Informational Use Only

Any ratio, estimate, categorization, insight, or suggestion displayed in MyQuotaBag is provided for personal informational use only.

These outputs may be based on:

Information entered by you
User-selected assumptions
Community observations
Internal app logic

They do not reflect official brand policy and do not guarantee any commercial outcome, offer, allocation, or access to any product. They should not be interpreted as legal, tax, financial, investment, or purchasing advice.

6. Authentication and Account Options

MyQuotaBag offers three ways to use the app:

Sign in with Apple: Uses Apple's authentication service. We receive a unique identifier and, if you choose to share it, your name and email address. Apple allows you to hide your email address using a private relay.

Sign in with Google: Uses Google's authentication service. We receive a unique identifier, your name, and your email address.

Guest Mode: No account is created. No authentication data is collected. Your journey stays local to your device. Guest mode data may be lost if the app is deleted.

If you sign in with Apple or Google, your data syncs securely to our cloud infrastructure. If you later sign out, your local data is cleared to prevent access by another account.

7. Local Storage and Cloud Storage

Your information may be stored in one or both of the following ways:

Local storage: Data may be stored directly on your device for normal app functionality.

Cloud storage: If you sign in with Apple or Google, your data is also stored on secure third-party infrastructure used by MyQuotaBag, such as Supabase or similar service providers.

Guest mode: Data is stored locally only. No cloud storage is used. Data may be lost if the app is deleted or the device is reset.

Saved receipt images are kept locally on your device for quick reference. They are not currently backed up to the cloud, so if the app is deleted, the device is reset, or local storage is removed, a saved receipt image may not be recoverable. AI Scan Pro transmits the selected image for analysis at the time of the scan; that transmission is separate from any image you choose to save locally.

Import and export are user-controlled. Imported purchase history is reviewed and confirmed by you before it is saved. Exporting an inventory PDF is local and user-controlled: you preview and choose whether to save, print, or share it through your device's share sheet. It is not uploaded by us.

We may also temporarily process sync requests or diagnostic events through service infrastructure needed to support app functionality.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These may include:

Encrypted transmission using TLS
Authentication controls via Apple and Google sign-in services
Access restrictions
Database rules designed to separate user data
Logging and monitoring for security and reliability purposes
On-device processing for Basic eReceipt scanning; for AI Scan Pro, secure transmission of the selected image for analysis

No system can be guaranteed to be completely secure. As a result, we cannot guarantee absolute security of your data.

9. Sharing of Information

We do not sell your personal information.

We may share information in the following limited situations:

With infrastructure or service providers that help us operate the app
With analytics, hosting, storage, authentication, or crash-reporting providers acting on our behalf
If required by law, legal process, or valid governmental request
To protect the rights, safety, security, or integrity of the app, our users, or the public
In connection with a merger, acquisition, asset sale, financing, or business reorganization
In aggregated or de-identified form that does not reasonably identify you

We do not share your individual purchase history with luxury brands for marketing or allocation purposes.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to:

Provide the app
Maintain backups and service continuity
Comply with legal obligations
Prevent fraud or abuse
Resolve disputes
Enforce our terms

If you delete your account or request deletion, we will take reasonable steps to delete or de-identify your personal information within a reasonable time, subject to backup retention, legal requirements, fraud prevention, security obligations, and technical limitations.

Deleting the app from your device may remove locally stored data from that device, but may not remove cloud-stored data if sync or backup was enabled.

11. Your Choices and Rights

Depending on your location and applicable law, you may have the right to:

Access your personal information
Correct inaccurate information
Delete your information
Export certain information if such feature is offered
Disable optional cloud sync or local storage features where available
Sign out of your account at any time
Switch from guest mode to a signed-in account

You may also be able to reset or remove certain data directly within the app.

12. Third-Party Services

We may rely on third-party service providers such as:

Apple sign-in authentication services
Google sign-in authentication services
Supabase or similar cloud database and authentication providers
Expo or similar mobile development and infrastructure providers
Anonymous product analytics providers (currently Aptabase, hosted in the European Union)
Crash reporting or monitoring tools

Those providers may process information on our behalf under their own terms and privacy practices.

13. International Data Transfers

Your information may be processed or stored in countries other than your home jurisdiction, including the United States or other regions where our service providers operate.

By using the app, you understand that your information may be transferred to and processed in those locations, subject to applicable safeguards where required by law.

14. Children

MyQuotaBag is intended for adults aged 18 and older.

If we become aware that personal information was submitted by a child in violation of these terms, we will take reasonable steps to delete that information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date. If changes are material, we may provide additional notice within the app or by other appropriate means.

16. Contact Us

If you have questions about this Privacy Policy or your information, please contact us at: