Last updated:
Effective date: September 7, 2026
Quotes is a personal reading and reflection app for iPhone, iPad, Apple Watch, widgets, and related Apple experiences. This policy explains what information the app handles, why it is used, where it is stored, who can see it, and the choices available to you.
App: Quotes · Developer and data controller: Jeffrey Hakim, Kentucky, USA · Contact: jeff@jeffreyhakim.com
The short version
Quotes does not contain third-party advertising SDKs and does not use your information for behavioral advertising or cross-app tracking.
Saved thoughts, private reflections, original writing, collections, preferences, and search activity are kept on your devices and, when sync is enabled, in your private iCloud database.
If you use Groups, account, membership, shared content, safety, and notification information is stored on the Quotes service so the group can work across devices and between members.
Location, camera, contacts, photos, notifications, and profile sharing are optional and are used only for the feature you choose.
Quotes does not sell or rent personal information.
Information stored on your device
The app stores your saved quote identifiers, collections, private reflections, original writing, reading history or rhythm, appearance and accent choices, notification preferences, enabled themes, onboarding name, cached editorial content, and other app settings on your device. Search queries and search results are processed locally. If you enable reflection search, your reflections are searched only on that device.
Widgets use an Apple App Group to read a limited cached quote and appearance settings. The Apple Watch app may exchange quote, save, reflection, preference, and recent weather information with the paired iPhone using Apple’s WatchConnectivity service. This information is not sent to Jeffrey Hakim’s server merely because you use a widget or Apple Watch.
Sign in with Apple and your Quotes account
Sign in with Apple is optional for private reading features and required for Groups. When you sign in, Apple provides the app with an app-specific, opaque account identifier. Apple may also provide your name and email address, or an Apple private relay address, depending on your choices and whether Apple has previously provided those fields.
The Quotes service stores the Apple app-specific identifier, optional display name, optional email address, account creation and update dates, and a server session used to keep you signed in. Server sessions expire after 180 days unless they are ended earlier by signing out or deleting the account. Your Apple password is never provided to Quotes.
Private iCloud and CloudKit sync
When account sync is enabled, your profile, profile photo, saved thoughts, collections, private reflections, original writing, reading history, and supported preferences may be stored in your private CloudKit database so they can follow you between your Apple devices and be restored after reinstalling the app. This data is associated with your Apple account and is handled by Apple under Apple’s privacy terms.
Private CloudKit information is not placed in the Quotes group database and is not made visible to other Quotes users. Content you deliberately post to a Group is separate from your private CloudKit library.
Groups and shared content
Groups are private and invitation-only. To operate Groups, the Quotes service stores the group name, summary, icon, creator, membership list, member roles, join dates, group preferences, invitation codes and expiration dates, posts, shared quotes, optional notes, replies, likes, and timestamps. A group member can see the group identity, its members, and content shared inside that group. People outside the group cannot browse its contents through the app.
Your display name is visible to members of Groups you join. Your private profile photo is not shared automatically. If you turn on “Use my photo in Groups,” a separate compressed avatar copy is uploaded to the Quotes service and shown to other members of your Groups. Turning that setting off removes the shared avatar copy.
Invitation codes generally expire after 24 hours and have a limited number of uses. An invitation preview may show the group name, icon, summary, member count, and inviter’s display name before you join, but it does not show group posts.
Group safety, reports, and moderation
If you block someone, report content, or if automated safety checks flag group content, the service stores the information needed to apply that choice and review the issue. This can include the reporting and reported account identifiers, group and post identifiers, selected report reason, optional report note, content involved, moderation status, review timestamps, strikes, and temporary write restrictions.
Blocks are private and are not announced to the blocked person. Reports and flagged content may be reviewed by Jeffrey Hakim as the app administrator. Group owners or administrators may manage membership and group settings according to their role. Group content should not be treated as confidential from the other members of that group.
Notifications and device information
Daily Thought and similar scheduled reminders are normally local notifications created and delivered by iOS on your device. If you enable remote announcements or supported Group and safety notifications, Apple provides an APNs device token. The app sends that token, its sandbox or production environment, the app bundle identifier, app version, enabled status, and a one-way account association when you are signed in to the Quotes service.
The account association is derived from your Apple app-specific identifier using a one-way hash. It lets the service send an account-specific notification without storing that Apple identifier in the device-token table. Notification delivery records may include the device token, delivery status, Apple response identifier, failure reason, and attempt time for delivery troubleshooting. Turning remote notifications off disables the active registration. Apple-invalid tokens are removed from active registrations.
Quote suggestions and feature suggestions
If you submit a quote or feature suggestion, the service receives the text you enter and any optional author, source, theme, name, or email information you choose to include. It may also receive the app version. Suggestions are stored in a private review queue and may be marked new, reviewed, converted, completed, or archived.
To prevent spam, the service creates a one-way fingerprint from limited request information, such as network and device-request details. The fingerprint is used to enforce hourly submission and device-registration limits and is retained with the related record until that record is removed. Raw connection details may also be processed transiently by Cloudflare when the request is delivered.
A quote suggestion may remain after account deletion if it has been accepted or may already be part of the editorial library. When the service can associate a suggestion with the deleted account’s email address, the stored sender name and email are removed. You may also email the address below to request removal of an identifiable suggestion.
Location and Apple Weather
If you enable local weather, Quotes requests location access while you use the app. Your location is sent to Apple Weather to obtain conditions for your area. Quotes does not send that location to Jeffrey Hakim’s server and does not store a location history. A recent weather result may be cached on your devices and shared with your paired Apple Watch to display the feature. You can disable location access in iOS Settings.
Camera, contacts, photos, and sharing
Camera. The camera is used locally to scan a Group invitation QR code. Quotes does not record video or upload camera imagery for this feature.
Contacts. Apple’s contact picker lets you choose a person for an invitation. The selected contact detail is used to address a message you choose to send. Quotes does not upload your address book or continuously access your contacts.
Photos. You may choose a profile image through Apple’s photo picker, save a generated quote image to Photos, or select whether a compressed avatar is visible in Groups. The private profile copy may sync through your private CloudKit database; the optional Group avatar is stored on the Quotes service and visible to fellow Group members.
Share sheet and Messages. When you choose Share or Messages, Apple’s system interface handles the destination. Information you send to another person or service is then governed by that recipient or service.
Service providers and disclosure
Quotes uses Apple services, including Sign in with Apple, iCloud and CloudKit, Apple Push Notification service, Apple Weather, Photos, Contacts, Messages, WatchConnectivity, and related operating-system services. Apple processes information under its own privacy policy. Quotes uses Cloudflare Workers and Cloudflare D1 to deliver the Quotes API and store server-side account, Group, moderation, suggestion, and notification information. Cloudflare processes request and stored information on Jeffrey Hakim’s behalf under Cloudflare’s terms and privacy commitments.
Information may also be disclosed when reasonably necessary to comply with law, respond to valid legal process, investigate abuse or security incidents, enforce app rules, or protect users, the public, or the service. Quotes does not sell personal information and does not share it with advertising networks or data brokers.
Apple Privacy Policy · Cloudflare Privacy Policy
Retention and deletion
On-device information: kept until you remove it, clear the app’s data, or uninstall the app, subject to device backups and Apple’s own retention behavior.
Private CloudKit information: kept in your private iCloud database until you delete the synced data or account, or manage it through Apple’s available iCloud controls.
Account and sessions: kept while your Quotes account exists. Sessions expire after 180 days and can end earlier when you sign out. Expired-session records may be removed during later service activity or maintenance.
Group information: kept while the Group, membership, or content remains. Deleting your account removes your posts, replies, likes, memberships, blocks, and applicable moderation records. A Group you own may transfer to another member rather than being deleted; an empty Group is deleted.
Suggestions: kept while needed for review, publishing, support, abuse prevention, and maintaining the editorial library. Identifiable suggestion information can be removed upon request where reasonably possible.
Notification information: active registrations remain while enabled or until invalidated or deleted. Limited historical delivery records may be retained for operational and security auditing.
Deleting your account and withdrawing permission
You can initiate account deletion inside Quotes from Settings → Manage Account. The deletion process removes the server account and associated server-side data as described above and deletes the app’s private CloudKit records. Some local content may remain on your current device so you do not unexpectedly lose private writing; you can remove it separately or uninstall the app.
Deleting the Quotes account does not automatically remove Quotes from the apps listed under Sign in with Apple for your Apple account. You can revoke that authorization separately in your Apple account settings. You can also disable notifications, location, camera, contacts, and photo access through iOS Settings, stop sharing a Group avatar in Quotes, leave a Group, delete eligible content, or sign out at any time.
Security
Quotes uses Apple authentication, private CloudKit storage, encrypted network connections, role-based Group permissions, administrator authentication, scoped service credentials, and other technical and organizational safeguards. No storage or transmission method is guaranteed to be completely secure. If you believe your account or Group has been compromised, contact Jeffrey Hakim promptly.
International processing
Apple and Cloudflare operate services internationally. Depending on your location and how those providers route or store information, app information may be processed in the United States or other countries where they operate, subject to their contractual and legal safeguards.
Children
Quotes is not directed to children under 13 and does not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact Jeffrey Hakim so it can be reviewed and deleted where appropriate.
Your choices and requests
Depending on where you live, you may have rights to request access, correction, deletion, or a copy of personal information, or to object to or restrict certain processing. You may also withdraw optional permissions through the app or iOS Settings. To make a request, email jeff@jeffreyhakim.com. Reasonable identity verification may be required before responding. Requests are generally answered within 30 days, subject to applicable law and necessary extensions.
Changes to this policy
This policy may be updated when the app, its services, or legal requirements change. The current version will be posted at this URL with a revised effective date. If a change materially affects how information is used, additional notice may be provided in the app where appropriate.
Contact
Jeffrey Hakim
