Privacy policy

What Quota keeps, why, and who can see it.

Last updated 2026-11-02

Quota is run by its two co-founders, Ari Marants and Justin Smith. Contact: hello@hitquota.app. This says what Quota holds about you, why it holds it, and who else can see it.

What the app asks your phone for

• The camera and microphone, only when you tap to record proof, a story, or a picture of yourself. Nothing is recorded until you do.
• Your photos, only when you choose a picture for your profile or a group, or save a recap. Proof can never come from your photos.
• Notifications, only if you turn them on.

Saying no to any of these leaves the rest of the app working, and your phone's Settings can change the answer at any time.

What Quota keeps

• Your account. Your email address, a username, and a password stored only as a hash — nobody, including whoever runs Quota, can read it back. Your email is used to confirm the account and to reset your password, and is never shown to anyone else.
• About you. Your full name and date of birth, which you give when you finish signing up. Accounts made before October 2026 may also have a gender on them, which is no longer asked for.
• Signing in with Apple or Google. If you use one of them, it tells Quota your name and email address. If you choose to hide your email from Apple, Quota only ever sees the forwarding address Apple gives it.
• Your profile. A display name, a bio and a picture, if you add them, and which of your groups you have chosen to show on it.
• What you post. Proof clips and pictures, the amount and the metric, the caption, the day, and whether you put it on your profile.
• What you write. Comments, stories, and the words on them.
• What you tap. Likes, reactions, and which stories you have watched.
• Your groups. Names, goals, quotas, active days, wheels, spins and results.
• Friends and invites. Who you are friends with, and invitations sent or received.
• Your time zone, so that a spin-day reminder arrives in your morning and not somebody else's.
• A push subscription, only if you turn notifications on. Turning them off deletes it.
• When you last read each chat. The people in that chat can see it, as "Seen" under what they sent you. Turn off Seen in Settings and nobody can, and you no longer see theirs.
• When you last opened the app. One time per account, written over each time, used only to count how many people are using Quota on a given day. Nobody but the people who run Quota sees even the count.
• Reports and blocks. If you report something, what you reported and why. If you block somebody, who.
• A record of agreeing. Each time you agree to these terms, the guidelines and this policy: when, which version, your username and email at the time, and the network address and browser it came from. It is proof that you agreed, and nothing else.

What Quota does not do

There are no adverts, no analytics services, no tracking pixels and no third-party trackers of any kind. Nothing here is sold, and nothing is handed to anyone for marketing. No profile of you is built for any purpose other than showing you the app.

Who can see it

• Your proof, captions, comments and results are visible to the members of the group you posted them in, and to nobody else.
• Anything you tick onto your profile is visible to anyone who can open your profile.
• Your stories are visible for 24 hours to the people you share a group with. Whoever posted a story is shown who watched it.
• Your username, display name and picture are visible to anyone searching for somebody to add.
• Your password is visible to nobody.

Who else handles it

Three companies hold the data on Quota's behalf and are not allowed to use it for anything else:

• Supabase — the database, the sign-in, and the storage your clips and pictures sit in.
• Vercel — serves the app itself, and keeps ordinary server logs (an address, a time, a page) for a short period.
• Resend — sends the emails with your codes in them, so it sees your email address and the code.

If you turn notifications on, the message is delivered by your phone's own push service — Apple's or Google's, depending on the phone. They see that a message is going to your device.

How long it is kept

Posts, comments and profiles are kept until you delete them or delete your account. Deleting a post deletes its file, and deleting your account (Settings → Delete account) deletes everything in it straight away, files included. A report is kept after the account it is about is gone, for as long as it takes to deal with it. The record of you agreeing to the terms and this policy is kept after the account is deleted too, because it is the proof of what was agreed if that is ever in question; it holds nothing but what is listed above, and nobody can change it. A story stops being shown 24 hours after it goes up, but the row and the file behind it stay until the story is deleted.

What you can ask for

You can delete your account and everything in it yourself, from Settings. You can also ask for a copy of everything held about you, or for it to be corrected: email hello@hitquota.app and it will be done within 30 days.

Age

Quota is not for anyone under 13. If you know of an account belonging to someone younger, email the address above and it will be removed.

Where it is

The database and the files are on Supabase's servers and the app is served from Vercel's. Both operate internationally, so your data may be stored or processed outside your own country.

Changes

If this changes in a way that matters you will be asked to read and agree to it again before carrying on. The date at the top says when it last changed.

Cookies and storage

Quota does not use cookies

No cookies are set by Quota, for any purpose, and there are no third-party cookies either — nothing on this page is loaded from an advertising or analytics company. That is why there is no banner asking you to accept any.

What is kept on your phone instead

A few things are held in the app's own storage on your phone. None of it is sent anywhere, and none of it identifies you to anybody:

• Your sign-in. A token that keeps you logged in, so the app does not ask for your password every time. Logging out removes it.
• Dark mode, so the app opens the way you left it.
• Which camera you used last, front or back.
• How fast your last upload went, so the next progress bar can estimate itself.
• Whether you have already been asked about notifications, about the camera, and about adding Quota to your home screen — so you are not asked twice.
• Which milestones have already been celebrated, so the same run is not celebrated twice.

The offline copy

Quota keeps a copy of the app itself — the code and the icons — on your phone so that it opens without a connection. It holds the app, not your data.

Clearing it

Logging out removes your sign-in; deleting the app, or deleting your account, removes all of it. Nothing you have posted is affected by anything but deleting it or your account.