Privacy Policy

In plain language

Short answers to three questions people ask. They restate the policy below in plain words and change nothing in it.

What happens to a receipt photo? Scanning is optional: you can always add a purchase by hand. When you use Scan or Photo, only the image you choose is sent to an external AI service provider, which reads it and returns the purchase details. You review every detail before saving. Our server does not keep the image after reading it; the AI service provider may keep it for a limited time under its own terms. When you are signed in, the receipt image stays attached to the purchase in your account. As a guest, the receipt image is not kept.

Is my data sold or shared with Hermès? No. We do not sell your data and we do not share it with any brand or boutique, Hermès included. We do not use it for advertising.

How do I delete my account? In the app, go to Profile and choose Delete account. It deletes your account and your data from our servers: your name, email, purchases, Quota Bag, boutique visits, notes, photos, receipts and reflections. We do not keep an anonymized or aggregated copy. Backups kept by our cloud provider for recovery may hold deleted data for a limited time, until they expire. As a guest, no account is created and what you save stays on your phone.

MyQuotaBag is built in Quebec, Canada and follows Quebec's privacy law (Law 25), one of the strictest in North America. Your data is stored by providers in the United States and the European Union, listed below. Wherever it is stored, it stays covered by that law and by the choices described in this policy.

Who receives what

One line per feature: what is sent, to whom, why, for how long and what you can choose. The sections below give the full detail and this table changes nothing in them.

Feature	What is sent	Who receives it	Why	How long	Your choice
Scan and Photo	The receipt image you choose	Our server on Supabase (United States), then OpenRouter, which passes it to the AI model we select	To read the purchase details	Our server keeps nothing after reading. OpenRouter: logging turned off in our settings. AI model provider: see the provider's terms.	Add the purchase by hand instead. Crop personal details before you scan.
Import from screenshots	The screenshots you choose	Our server on Supabase, then OpenRouter and the AI model we select	To read the item details	Same as Scan and Photo.	Add the item by hand instead.
Daily Reflection	Your purchases, visits, notes, Quota Bag, dream items, plus the mood and message of the day. Not your profile name, email, Sales Associate's name or photos.	Our server on Supabase, then an AI model from Google, accessed through OpenRouter	To write your reflection	Reflections stay in your account until you delete them. OpenRouter: logging and training use turned off in our settings. Google: see the provider's terms.	Turn off Daily Reflection in Profile, under My experience: only the mood and message are then sent.
Account and sync	Your name and email from sign-in, your collection, photos and receipts	Supabase (cloud hosting, United States). Apple or Google for sign-in.	To keep your collection in your account across devices	Until you delete your account. Recovery backups expire on the provider's schedule: see the provider's terms.	Use the app as a guest: what you save stays on your phone. Delete your account in Profile.
Where you heard about us	The answer you choose after signing up for the Monthly Brief in the app, for example a friend or a social network. Optional.	Your account on Supabase (United States). As a guest, it stays on your phone.	To understand how collectors discover MyQuotaBag	Until you delete your account.	Tap Skip: nothing is saved.
App usage statistics	Anonymous events: screens opened, features used, app version	Aptabase (European Union)	To see which features are used	See the provider's terms.	They never include your name, email, amounts, item details or notes.
Website analytics	Aggregate page views, referring sites, approximate location (country, region, city) and time spent on the site, with no cookies	Cloudflare Web Analytics and Umami (data hosted in the European Union)	To count visits to this website and see which pages help visitors	Umami: 6 months. Cloudflare: see the provider's terms.	No cookie is set, so there is nothing to accept.
Monthly Brief, Android list and contact form	Your email address, where you signed up (this website or the app, in Profile under Help & Learn) and your message for the contact form	Netlify Forms (Netlify also hosts this website)	To send the Monthly Brief, tell you when Android is ready and answer you	Until you unsubscribe or ask us to delete it. Your email is then removed from the mailing list; we keep a dated record of your sign-up and unsubscribe only as long as the law requires us to prove consent.	Unsubscribe by replying to any Monthly Brief. Ask for deletion at info@myquotabag.com.

1. Overview

MyQuotaBag ("MyQuotaBag," "we," "our" or "us") is an independent app that helps you keep a private record of your purchases, boutique visits, notes, dream items and Quota Bag, for your own information.

MyQuotaBag is not affiliated with, endorsed by or sponsored by Hermès International or any of its affiliates. References to Hermès products, boutiques or categories are descriptive only.

This policy describes what the app does with your information today. It covers the MyQuotaBag iPhone and iPad app and the website myquotabag.com.

2. The Short Version

• We do not sell your data. We do not share it with any brand or boutique and we do not use it for advertising.
• As a guest, what you save stays on your phone. With an account, it is saved to your account so you can find it again on another device.
• Scan and Photo send only the receipt image you choose to an external AI service provider. You review everything before it is saved.
• Daily Reflection sends part of your journey to an external AI service provider so it can write your text. It does not add your name, your email or your photos.
• Deleting your account deletes your data from our servers: your name, email, purchases, Quota Bag, visits, notes, photos and receipts. We do not keep an anonymized copy.
• The research published on this website (MyQuotaBag Data, the Insider Guide, the Ratio Calculator) comes from public sources and public collector reports. None of it comes from data saved in the app.

3. Information You Choose to Save

Everything below is optional and comes from you:

• Your first name or profile name
• Your home boutique (the store name and city) and the first name of your Sales Associate, if you add them
• Your purchases: item names, categories, dates, amounts, currency and notes
• Your Quota Bag and your dream items: models, sizes, leathers, colors, hardware and notes
• Your Journal: boutique visits, notes and private events
• The "About you" text and the preferences you ask the app to remember
• Photos you add: receipt images, photos of your pieces and photos of your dream items
• Your Daily Reflections, your replies and the notes you add under them

If you sign in with Apple or Google, we also receive an account identifier and the email address that service shares with us (Apple lets you hide your real address behind a private relay). Google may also share your name.

The app does not ask for your last name, your precise location, card or bank details, biometric data, government identification or the contact details of boutique staff.

4. Guest or Account

Guest: no account is created. What you save, including any photos you add, is stored on your phone. It is not saved to our servers, so it can be lost if you delete the app or reset the phone. If you later sign in, what you saved as a guest can move to your new account.

Account (Sign in with Apple or Google): what you save is stored in your account with our cloud hosting provider, so you can find it again on another device. Photos are kept in private storage linked to your account. The app opens them through temporary signed links; they are not public and are not shared with other users.

Signing out removes your account data from the phone, so the next person to sign in on it does not see it. Your data stays in your account.

5. Scan and Photo

In the Scan tab, you can take a photo of a receipt or choose a receipt image or screenshot. Both are optional: you can always add a purchase by hand.

• Only the image you choose is sent to an external AI service provider, which reads it and returns the purchase details. Our server does not keep the image after reading it. The AI service provider may keep it for a limited time under its own terms.
• You review every detail before saving. Nothing becomes part of your data until you save it.
• When you are signed in, the receipt image stays attached to the purchase in your account. As a guest, the purchase is saved but the receipt image is not kept.
• A receipt can show your name, address, customer number or payment details. Hide or crop anything you do not want read or stored before you scan.
• AI can misread a receipt. Check the result before saving.

Import from screenshots works the same way: only the screenshots you choose are sent to the AI service provider to read the item details and you review them before saving.

Import history (in Profile) does not go through our AI service. The app gives you instructions to use in an AI assistant of your choice. What you share with that assistant is covered by its own terms. The app then reads the text you paste back, on your phone and you confirm the purchases before they are saved.

6. Daily Reflection

The Daily Reflection is an optional short text written each day by an AI, from your own journey. It is offered for enjoyment and reflection, not as advice. It requires an account.

What is sent to our server and then to an external AI service provider when a reflection is written: your purchases (item names, categories, dates and amounts), your boutique visits and the boutique names you recorded, your notes, your Quota Bag and dream items, your "About you" text, the preferences you asked the app to remember, your recent reflections and replies, the mood you choose and the message you write that day. Before sending, we try to remove email addresses, phone numbers, street addresses and names that follow a title (such as "Mr." or "Mrs.") from your notes. This filter can miss something, so avoid writing details you do not want shared.

What we do not add: your profile name, your email, your Sales Associate's name and your photos. If you wrote a name in a note or in your "About you" text, it may be sent with that text.

• You can stop sharing your journey in Profile, under Daily Reflection. The reflection is then written only from the mood and message you give it.
• Your content passes through a service that routes it to the AI model. In our settings with that service, content logging and the use of your content to train AI models are turned off. We request zero data retention from the AI model provider where it is available; where it is not, that provider may keep the content for a limited time under its own terms.
• Your reflections and replies are saved in your account so you can read them again. You can delete a day from the reflection screen.
• The text is written by an AI and can be wrong. It is not a prediction and not a recommendation.

7. Usage Statistics

The app sends anonymous usage statistics to a privacy-focused usage statistics provider. They record things like which screens are opened and which features are used, sometimes with a rough count. They are not linked to your account and do not include your name, email, amounts, item details or note text.

The website uses two privacy-first analytics services, Cloudflare Web Analytics and Umami, to count page views, referring sites, approximate location (country, region, city) and time spent on the site. They set no cookies, keep no persistent identifier and do not follow you across other websites. To estimate location, your IP address is read briefly when the page loads; according to these providers, it is not stored.

The app and the website do not respond to Do Not Track signals, because they do not track you across other apps or websites.

8. How We Use Your Information

We use your information to run the app for you:

• to save your data and, when you are signed in, keep it in your account across devices
• to calculate your Purchase Ratio and other figures shown in the app
• to read receipts and screenshots you choose to scan
• to write your Daily Reflection, if you use it
• to keep the app secure and working, fix problems and answer support requests
• to understand, through anonymous usage statistics, which features are used

Figures and texts in the app are for your personal information. They do not reflect any brand policy and do not guarantee any offer, allocation or access to any product.

9. Who Receives Your Information

We do not sell your data. We share it only with the service providers that run the app for us and only for that purpose:

• Supabase, our cloud hosting provider: database, account, photo storage and server functions
• Apple and Google: sign-in
• OpenRouter (an AI routing service) with the AI model provider it passes content to (Google, for the Daily Reflection): the images and screenshots you choose to scan and the Daily Reflection content described above
• Aptabase: anonymous app usage statistics
• Cloudflare Web Analytics and Umami: website statistics
• Netlify: website hosting and the newsletter, Android list and contact forms

We may also disclose information if the law requires it, to protect the safety or security of the app and its users, or as part of a merger or sale of the business, in which case this policy continues to apply.

These providers may process your information outside your province or country, including in the United States and the European Union. When information is transferred, we rely on the safeguards these providers offer, such as standard contractual clauses.

10. Deleting Your Data

• Delete account (in Profile) deletes your account and your data from our servers: your name, email, purchases, Quota Bag, boutique visits, notes, photos, receipts and reflections. We do not keep an anonymized or aggregated copy. If a step fails on our side, your account is marked for deletion, its text content is cleared and we finish the deletion as soon as we can.
• Reset this device (in Profile) clears your data from the phone and, when you are signed in, from your account, while keeping the account itself.
• You can delete a single purchase, visit, note, dream item, photo or reflection at any time.
• Receipt images saved on your phone can remain in the app's storage on that phone after you delete your account, until you delete the app.
• Backups kept by our cloud provider for recovery may hold deleted data for a limited time, until they expire.

11. Your Rights

Depending on where you live, you may have the right to access, correct, export or delete your information and to withdraw a choice you made. Most of this can be done directly in the app. Export produces a PDF or CSV on your phone that you share yourself. For anything else, write to us at the address below.

If you are in the European Economic Area, the United Kingdom or Switzerland, we process your information to provide the app you asked for, with your consent for Daily Reflection and on our legitimate interest in keeping the app secure and understanding which features are used and how visitors use this website. We keep your information while your account exists, then delete it as described above. You can also contact the data protection authority where you live; in Quebec, this is the Commission d'accès à l'information.

12. Security

Data travels between the app and our servers encrypted in transit using TLS. Access to your account data is limited to your signed-in account by database rules. No system is perfectly secure and we cannot guarantee absolute security.

13. Children

MyQuotaBag is intended for adults aged 18 and older. If we learn that a child has given us personal information, we will delete it.

14. Changes to This Policy

When this policy changes, we update the "Last Updated" date above. If a change is significant, we will give you notice before it applies, in the app or on this website.

15. Contact Us

MyQuotaBag is published by Sébastien Dion in Quebec, Canada. He is the person in charge of the protection of personal information and can be reached at info@myquotabag.com.

If you have questions about this policy or your information, contact us at:

• Email: info@myquotabag.com
• Website: myquotabag.com
• Mail: PO Box 124, Bromont, QC J2L 1A9, Canada
• Phone: +1 819-678-8624