Privacy Policy

Effective Date: March 28, 2026 · Last Updated: June 30, 2026

1. Overview

MyQuotaBag ("MyQuotaBag," "we," "our," or "us") is an independent personal tracking app designed to help users log purchases, boutique visit history, wishlist preferences, and related personal notes for informational purposes only.

MyQuotaBag is not affiliated with, endorsed by, or sponsored by Hermès International or any of its affiliates. Any reference to Hermès products, boutiques, or categories is used solely for descriptive and personal tracking purposes.

2. Information We Collect

We may collect information that you choose to provide directly in the app, including:

First name or profile name
Email address if you sign in with Apple or Google
Authentication tokens and account identifiers provided by Apple or Google sign-in services
Preferred boutique name and location (city or store name only, no customer contact information, addresses, or personal details related to boutique staff)
Sales Associate first name if provided by you
Purchase history, including item names, categories, dates, notes, and amounts
Wishlist preferences such as bag models, sizes, colors, hardware choices, and related notes
Store visit logs, boutique visit notes, and visit events
Receipt details extracted with AI Scan or AI Photo, such as item names, SKU codes, categories, dates, and amounts, which become part of your app data only if you review and save them (see the Receipt Scanning section)
Photos you add when signed in, including receipt images, product photos attached to your purchases, and custom wishlist photos, which are stored in secure private cloud storage (Supabase) linked to your account (photo upload is not available in Guest mode)
Import history you add, derived from text or spreadsheet content you paste or enter

We may also collect limited technical information needed to operate and improve the app, including:

Device model
Operating system version
App version
Anonymous product usage analytics (such as which screens are viewed, which features are used, and aggregated event counts). This data is collected through Aptabase, a privacy-first analytics provider, and is not linked to your identity. No personal information, purchase amounts, item SKUs, or note content is included in analytics events. Analytics data is hosted in the European Union.
Crash reports and error logs
Sync status or related service diagnostics

Our website (myquotabag.com) uses Cloudflare Web Analytics to understand aggregate traffic. It does not use cookies, does not fingerprint visitors, does not track you across other websites, and does not build personal profiles. It records aggregate page views and referral sources only, with no individual identification.

We do not intentionally request or require the following for normal use of the app:

Last name
Precise GPS location
Credit card numbers
Banking information
Biometric data
Government-issued identification
Customer contact information, email addresses, or phone numbers related to boutique staff or sales associates

3. How We Use Your Information

We may use your information to:

Provide and operate the app
Authenticate your account via Apple or Google sign-in
Sync your data across devices when signed in
Store and organize your purchase history, wishlist, and visit logs
Calculate personal tracking metrics and app insights
Read and extract purchase details from receipt images you choose to submit through AI Scan or AI Photo, so we can pre-fill a purchase entry for your review
Enable optional cloud backup or sync features
Maintain app security, reliability, and performance
Troubleshoot bugs, crashes, and sync issues
Improve product features and user experience
Provide customer support
Generate aggregated and de-identified product usage insights

We do not use your personal information to sell targeted advertising based on your purchase history.

4. Receipt Scanning

MyQuotaBag offers optional receipt features to help you pre-fill a purchase entry. You choose whether to use them, and you can always add a purchase through Manual Entry instead, without submitting any image.

AI Scan lets you select a receipt image or screenshot, and AI Photo lets you take a photo of a receipt. With either option, the selected receipt image may be sent to an external AI service provider solely to read and extract purchase details.
Before using AI Scan or AI Photo, you should hide or crop personal details such as your name, address, phone number, customer number, payment details, or other information you do not want processed.
Receipt images may contain personal information if you choose to include it. MyQuotaBag does not intentionally request sensitive personal information from receipts and does not use receipt personal information for marketing, brand allocation, or unrelated purposes.
Text and purchase details extracted from a receipt, such as item names, SKU codes, categories, dates, and amounts, become part of your app data only if you review and save them.
When you are signed in, receipt images you choose to save are stored in secure private cloud storage (Supabase) associated with your account. These images are accessible only to your authenticated account through time-limited secure URLs and are never publicly accessible. If you use the app as a Guest, receipt image upload and storage are not available.
A local product reference database is included within the app to assist with category identification.
You are responsible for submitting only receipts that belong to you, and for reviewing receipt images and all extracted results before saving.
Recognition results may be incomplete, inaccurate, or require manual correction, and MyQuotaBag is not responsible for errors in text recognition or category identification resulting from receipt quality, lighting conditions, or unsupported receipt formats.

5. Informational Use Only

Any ratio, estimate, categorization, insight, or suggestion displayed in MyQuotaBag is provided for personal informational use only.

These outputs may be based on:

Information entered by you
User-selected assumptions
Community observations
Internal app logic

They do not reflect official brand policy and do not guarantee any commercial outcome, offer, allocation, or access to any product. They should not be interpreted as legal, tax, financial, investment, or purchasing advice.

6. Authentication and Account Options

MyQuotaBag offers three ways to use the app:

Sign in with Apple: Uses Apple's authentication service. We receive a unique identifier and, if you choose to share it, your name and email address. Apple allows you to hide your email address using a private relay.

Sign in with Google: Uses Google's authentication service. We receive a unique identifier, your name, and your email address.

Guest Mode: No account is created. No authentication data is collected. Your journey stays local to your device. Guest mode data may be lost if the app is deleted.

If you sign in with Apple or Google, your data syncs securely to our cloud infrastructure. If you later sign out, your local data is cleared to prevent access by another account.

7. Local Storage and Cloud Storage

Your information may be stored in one or both of the following ways:

Local storage: Data may be stored directly on your device for normal app functionality.

Cloud storage: If you sign in with Apple or Google, your data is also stored on secure third-party infrastructure used by MyQuotaBag, such as Supabase or similar service providers.

Guest mode: Data is stored locally only. No cloud storage is used. Data may be lost if the app is deleted or the device is reset.

Photos and images for signed-in users

When you are signed in, photos you add to the app, including receipt images, product photos attached to your purchases, and custom wishlist photos, are stored in secure private cloud storage (Supabase) linked to your account. This storage is owner-scoped and accessible only to your authenticated account through time-limited secure URLs. Photos are not publicly visible, are not shared with other users, and are used only to provide the app's photo and collection features.

Receipt images may contain personal information. You are responsible for reviewing, cropping, covering, or choosing not to upload any information you do not wish to store.

When an account is deleted, MyQuotaBag initiates deletion of the photos associated with that account from cloud storage, subject to normal technical processing and backup limitations.

If you use Guest mode without signing in, photo upload is not available and no photos are sent to our servers.

AI Scan and AI Photo may send the selected receipt image to an external AI service provider to extract purchase details at the time of the scan. That transmission is separate from storing a photo you choose to save.

Import and export are user-controlled. Imported purchase history is reviewed and confirmed by you before it is saved. Exporting an inventory PDF is local and user-controlled: you preview and choose whether to save, print, or share it through your device's share sheet. It is not uploaded by us.

We may also temporarily process sync requests or diagnostic events through service infrastructure needed to support app functionality.

8. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information.

These may include:

Encrypted transmission using TLS
Authentication controls via Apple and Google sign-in services
Access restrictions
Database rules designed to separate user data
Logging and monitoring for security and reliability purposes
Secure transmission of receipt images submitted through AI Scan or AI Photo to an external AI service provider for extraction

No system can be guaranteed to be completely secure. As a result, we cannot guarantee absolute security of your data.

9. Sharing of Information

We do not sell your personal information.

We may share information in the following limited situations:

With infrastructure or service providers that help us operate the app
With analytics, hosting, storage, authentication, or crash-reporting providers acting on our behalf
If required by law, legal process, or valid governmental request
To protect the rights, safety, security, or integrity of the app, our users, or the public
In connection with a merger, acquisition, asset sale, financing, or business reorganization
In aggregated or de-identified form that does not reasonably identify you

We do not share your individual purchase history with luxury brands for marketing or allocation purposes.

10. Data Retention

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including to:

Provide the app
Maintain backups and service continuity
Comply with legal obligations
Prevent fraud or abuse
Resolve disputes
Enforce our terms

If you delete your account or request deletion, we will take reasonable steps to delete or de-identify your personal information within a reasonable time, subject to backup retention, legal requirements, fraud prevention, security obligations, and technical limitations.

Deleting the app from your device may remove locally stored data from that device, but may not remove cloud-stored data if sync or backup was enabled.

11. Your Choices and Rights

Depending on your location and applicable law, you may have the right to:

Access your personal information
Correct inaccurate information
Delete your information
Export certain information if such feature is offered
Disable optional cloud sync or local storage features where available
Sign out of your account at any time
Switch from guest mode to a signed-in account

You may also be able to reset or remove certain data directly within the app.

12. Third-Party Services

We may rely on third-party service providers such as:

Apple sign-in authentication services
Google sign-in authentication services
Supabase or similar cloud database and authentication providers
Expo or similar mobile development and infrastructure providers
Anonymous product analytics providers (currently Aptabase, hosted in the European Union)
External AI service providers used to read or extract information from receipt images you choose to submit through AI Scan or AI Photo
Crash reporting or monitoring tools

Those providers may process information on our behalf under their own terms and privacy practices.

13. International Data Transfers

Your information may be processed or stored in countries other than your home jurisdiction, including the United States or other regions where our service providers operate.

By using the app, you understand that your information may be transferred to and processed in those locations, subject to applicable safeguards where required by law.

14. Children

MyQuotaBag is intended for adults aged 18 and older.

If we become aware that personal information was submitted by a child in violation of these terms, we will take reasonable steps to delete that information.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date. If changes are material, we may provide additional notice within the app or by other appropriate means.

16. Contact Us

If you have questions about this Privacy Policy or your information, please contact us at: