Privacy Policy

1. Who is responsible for your data

The data controller is Pablo García Aldehuela, an individual based in Germany. See also our Legal notice (Impressum).

• Address: Friedenstr. 97, 10249 Berlin, Germany
• Email: support@pablocoding.dev

Write to this address for any privacy question or request. You can write in English, Spanish or German.

2. What data Quote Community uses, and why

For each use, the table shows the legal basis under the GDPR:

• Contract: we need the data to provide the app you signed up for.
• Legitimate interest: we have a justified reason that doesn't outweigh your rights, and you can object to it.
• Legal obligation: the law requires it.
• Consent: you said yes, and you can take that back at any time.

We don't use your data for any other purpose. We don't sell it, and we don't build profiles of you for our own purposes.

3. What is public

Everyone using Quote Community in your language can see:

• your username and profile picture;
• your quotes, with their votes and positions;
• your wins and featured achievements;
• who you follow and who follows you.

People you have blocked, and people who have blocked you, don't see your quotes or profile.

Anyone can share a quote outside the app (the share text includes the quote and username), and anyone can take a screenshot. Please don't write anything personal in your quotes. The rules forbid posting anyone's personal information.

4. Usage and crash data

We use Firebase Analytics and Firebase Crashlytics (Google) to see which features are used and to fix crashes.

• You can turn this on or off at any time in Settings > Share usage & crash data.
• For users in the EU, UK and Switzerland, Google uses the IP address only to work out an approximate location, then discards it.
• Google processes this data for us under its data processing terms. We have switched off sharing this data with Google for Google's own purposes.

5. Advertising

The app shows ads from Google AdMob. To show and measure ads, Google may use:

• your device's advertising ID (Android advertising ID; on iPhone, the IDFA, only if you allow tracking);
• your IP address and approximate location;
• device information;
• how you interact with ads;
• your consent choices.

For personalised ads, Google acts as an independent controller under its own privacy policy: How Google uses information from sites or apps that use its services.

• EU/EEA, UK and Switzerland: the app shows Google's consent form the first time you open it. You can change your choices at any time in Settings > Privacy settings. If you don't consent, Google may show non-personalised or limited ads, which use less data.
• iPhone: the app asks your permission (App Tracking Transparency) before the advertising identifier can be used. If you say no, ads are not personalised with it. You can change this in iOS Settings > Privacy & Security > Tracking.
• Android: you can reset or delete your advertising ID in your device settings.

6. Push notifications

If you allow notifications, we use Firebase Cloud Messaging (Google) and, on iPhone, Apple's push service, to deliver them. Notifications can show usernames, for example when someone you follow posts a new quote. You can switch each type of notification on or off in the app, or turn them all off in your device settings.

7. Who we share data with

Service providers that process data for us, only on our instructions and under data processing agreements:

• Supabase: database, sign-in and server functions. Data is hosted in the European Union (Ireland).
• Google (Firebase): usage statistics, crash reports, push notifications.
• GitHub (Microsoft): stores our encrypted daily database backups.
• Cloudflare: hosts this website and forwards messages sent to our email address to our mailbox provider.
• Resend: sends moderation alert emails to us, which can include reported content and user IDs.

Companies that act as independent controllers, under their own privacy policies:

• Google AdMob (ads);
• Apple and Google when you sign in with them.

Authorities: only when the law requires it, for example a court order, or when someone's life or safety is at risk.

Transfers outside the EU: some of these companies are based in the United States or may process data there. When that happens, the transfer relies on the EU-US Data Privacy Framework (for certified companies) or on the European Commission's Standard Contractual Clauses.

8. Backups and deletion

We make an encrypted backup of the database every day and keep each backup for 30 days. When you delete your account, your data is removed from the live database straight away and disappears from the backups within 30 days.

9. Your rights

You can ask us to:

• see your data and get a copy;
• correct it;
• delete it;
• limit how we use it;
• receive it in a portable format.

You can also object to uses based on legitimate interest, and withdraw your consent at any time (in Settings, or by writing to us). Withdrawing consent doesn't affect what was done before.

Write to support@pablocoding.dev. We will answer within one month. We may ask for information to confirm that the account is yours. You can delete your account yourself in Profile > Settings > Delete Account.

If you think we have not respected your rights, you can complain to the data protection authority where you live or work, or to the authority responsible for us: the Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit, www.datenschutz-berlin.de).

10. Age

Quote Community is for people aged 18 or older. We don't knowingly collect data from younger people. If we learn that an account belongs to someone under 18, we delete it. If you think this has happened, please tell us.

11. Automated decisions

We don't make decisions with legal or similarly significant effects about you based only on automated processing.

• Our automatic filters can stop a quote from being published, and you can rewrite it.
• A quote reported by 3 different people within 24 hours is hidden automatically until a person reviews it.
• Every removal is decided by a person. A posting block starts automatically once 3 of your quotes have been removed, as explained in section 7.5 of the Terms, and you can ask a person to review it.

12. Security

We protect your data with encrypted connections, access rules in the database that only let each user change their own data, restricted administrator access, and encrypted backups. No system is perfectly secure. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.

13. Changes to this policy

If we change this policy in a way that matters to you, we will tell you in the app before the change applies. The date at the top always shows the latest version.

14. Our other apps

Sections 1, 9, 12 and 13 also apply to our other apps. Each app uses only the data it needs:

• Local-only apps (for example Parking Reminder) work without an account. Data such as the GPS location of your parked car is stored only on your device and is never sent to us. You delete it by clearing the app's data or uninstalling the app.
• Apps with accounts (for example Adventourism) store your account and the content you create with our service providers, such as Firebase Authentication and Firestore (Google), to provide the app (contract). Data is kept until you delete your account.
• Location and camera: some apps ask for your location, for maps through Mapbox or to save places, or for your camera, to scan barcodes on your device with Google ML Kit. They are used only for that feature, only after you allow them, and not for tracking.
• Ads and statistics: apps that show ads or collect statistics use Google AdMob and Firebase as described in sections 4 and 5.

15. This website

pablocoding.dev is hosted by Cloudflare and does not use analytics or advertising cookies. To display the pages, your browser loads fonts from Google Fonts and a style script from cdn.tailwindcss.com. These services receive your IP address as part of the request.