Privacy

QuotePaint keeps your work on your own device. This page lists everything it stores and everything it sends.

What is stored, and where

• Your quotes, clients, price book and settings are stored in your browser on the phone or computer you use (the browser's own storage, called IndexedDB).
• Your quotes aren't stored on a server, except a quote you send and, with the full app, your automatic backup. The quote is encrypted on your phone before it's sent. We store only the scrambled copy for 90 days and can't read it.
• Automatic backup (full app). Your backup is encrypted on your device before it's uploaded. We store the encrypted copy so you can recover your work if you change devices or lose your browser data. The key that encrypts it is made from your licence key on your device and never leaves it, so we can't read your backup. Only your device can update it: each backup carries a code made from your licence key, and we refuse changes without it. Anyone with your licence key could restore it, so keep the Gumroad email to yourself. If a purchase is refunded, its backup is deleted 30 days later.
• A backup file you save yourself is yours. It stays wherever you put it, such as your phone, Google Drive or iCloud. It includes your licence key so a new device can be unlocked in one step.

What is sent

• Your licence key, to check it. When you activate a key, about once a week after that when you're online, and once when your automatic backup is first set up, the app sends the key to quotepaint.com, which asks Gumroad whether it's valid. Only the key is sent: no quotes, no names, no device details.
• Your backup, with the full app. About 30 seconds after you change something, the app encrypts everything (quotes, jobs, price book, settings and your licence key) on your device and uploads the encrypted copy to quotepaint.com. Nothing readable is sent: not your quotes, not your name. The very first upload also sends your licence key once, so quotepaint.com can check with Gumroad that it's a real purchase before it keeps anything; the key isn't stored, and the check doesn't count as a device. The free plan uploads nothing.
• Quotes you send yourself. The quote is encrypted on your phone before it's sent. We store only the scrambled copy for 90 days and can't read it. The app scrambles the quote with a new random key and sends only the scrambled copy to quotepaint.com, which deletes it after 90 days. The key is in the link, after the #, and browsers don't send that part to any server. The quote can be read only by someone who has the link, for example the WhatsApp chat you send it to. If the app can't reach quotepaint.com, it sends a longer link that carries the quote inside it instead, and nothing is stored. A link can't be recalled once sent, so don't put anything confidential in a quote.

No analytics, no cookies

There are no analytics, tracking scripts or ads, and no cookies. Apart from the quotes and settings above, the app's own storage keeps one small note: that you've already seen the welcome page, so it isn't shown again on this device.

Others involved

• Gumroad handles payment when you buy, under its own privacy policy, and sends us your order details so we can help with your licence or a refund.
• Cloudflare hosts the site and keeps the scrambled copies of sent quotes for 90 days and the encrypted backups. Like any web host, it handles the requests your browser makes to load the pages.

Contact

Questions about privacy, or anything else: [email protected].