Privacy Policy for QuietQuote
Last Updated: March 1, 2026
1. Data Controller
The data controller responsible for processing personal data under GDPR and German BDSG is:
Faruk Orman 24105 Kiel, Germany Email: ofolabs@gmail.com
No Data Protection Officer is required as fewer than 20 persons engage in automated data processing.
2. Overview of Data Processing
Legitimate interest (Art. 6(1)(f)): We process technical data — specifically your IP address, which is transmitted to the Quotable API via standard HTTP requests — for quote fetching as a legitimate interest in providing core app functionality.
Local app data (favorites, theme preference, pinned quote, widget data) never leaves your device and does not constitute personal data under GDPR. It is used solely for app personalization and functionality.
QuietQuote is designed with privacy by default. No accounts, no analytics, no advertising, and no server-side data storage. All user preferences are stored locally on your device only.
3. Detailed Processing Activities
3.1 Quote Fetching
The app retrieves inspirational quotes from the Quotable API (quotable.io) via standard HTTP requests. Your device's IP address is inherently transmitted as part of these network requests. No other personal data is sent. The API provider may log IP addresses as part of standard server operations per their own privacy practices.
3.2 Local Data Storage
The following data is stored exclusively on your iOS device using native app storage. This data never leaves your device and is not accessible to us or any third party:
- Favorites: Quotes you have marked as favorites
- Theme preference: Your selected visual theme
- Pinned quote: The quote you have pinned for display
- Widget data: Data necessary to display quotes on your home screen widget
This data can be deleted at any time by uninstalling the app or clearing the app's data in your device settings.
3.3 Share Functionality
When you share a quote, the app uses your device's native iOS share sheet. Shared content goes directly to the app or service you select. QuietQuote does not track or store information about your sharing activity.
4. Third-Party Service Providers
Quotable API (quotable.io) provides quote fetching. Your IP address is exposed via standard HTTP requests.
Apple App Store (Apple Inc., USA) handles app distribution and the in-app review mechanism. Standard App Store data is processed per Apple's privacy policy.
No Data Processing Agreements (Art. 28 GDPR) are required as no personal data is transferred to processors on our behalf. The Quotable API receives only incidental IP address exposure inherent to HTTP communication.
5. International Data Transfers
When the app fetches quotes from the Quotable API, your IP address is transmitted as part of the HTTP request. The Quotable API servers may be located outside the European Economic Area (EEA). As only IP addresses are incidentally exposed through standard internet protocol communication, the transfer is based on Art. 6(1)(f) GDPR (legitimate interest in providing core functionality). The data exposure is minimal and limited to what is technically necessary for network communication.
6. Cookies & Local Storage
QuietQuote is a native iOS application. Per § 25 TTDSG:
- Favorites list — stores your favorited quotes; strictly necessary for requested functionality; exempt under § 25(2) TTDSG
- Theme preference — remembers your selected visual theme; strictly necessary for requested functionality; exempt under § 25(2) TTDSG
- Pinned quote — displays your pinned quote; strictly necessary for requested functionality; exempt under § 25(2) TTDSG
- Widget data — displays quotes on your home screen widget; strictly necessary for requested functionality; exempt under § 25(2) TTDSG
All items are strictly necessary for the service explicitly requested by the user and are exempt from consent requirements under § 25(2) TTDSG. No advertising, analytics, or tracking storage is used.
7. Provision of Personal Data
No personal data is required to use QuietQuote. The app functions fully without any account, registration, or personal information. The only data exposure (IP address via API requests) is a technical necessity of internet communication, not a voluntary provision.
8. Data Subject Rights
Under GDPR and BDSG, you have:
- Right of access (Art. 15 GDPR, § 34 BDSG) — we do not store personal data; IP addresses are not logged by us
- Right to rectification (Art. 16 GDPR) — not applicable as no personal data is stored
- Right to erasure (Art. 17 GDPR, § 35 BDSG) — locally stored data can be deleted by uninstalling the app or clearing app data
- Right to restriction (Art. 18 GDPR) — not applicable as no personal data processing occurs
- Right to data portability (Art. 20 GDPR) — not applicable as no personal data is stored
- Right to object (Art. 21 GDPR, § 36 BDSG) — you may object to IP address transmission by not using the app; no other processing occurs
- Right to withdraw consent (Art. 7(3) GDPR) — not applicable as no consent-based processing occurs
Contact ofolabs@gmail.com to exercise rights. Response within one month per Art. 12(3) GDPR.
9. Automated Decision-Making
No automated decision-making or profiling producing legal effects or significantly affecting you occurs per Art. 22 GDPR.
10. Right to Lodge a Complaint
Lodge complaints with data protection supervisory authorities per Art. 77 GDPR. Competent authority for Kiel, Schleswig-Holstein:
Unabhängiges Landeszentrum für Datenschutz Schleswig-Holstein (ULD) Holstenstraße 98, 24103 Kiel, Germany Website: https://www.datenschutzzentrum.de
You may also contact supervisory authorities in your EU member state of habitual residence, work, or alleged infringement location.
11. Data Retention
- Local app data (favorites, theme, pinned quote, widget data): Stored on your device until you delete it or uninstall the app. We have no access to this data.
- Server-side data: None. We do not operate servers or store any user data.
- IP address logs: We do not log IP addresses. The Quotable API provider may retain server logs per their own retention policies.
12. Children's Privacy
QuietQuote does not collect personal data from any user, including children. The app is suitable for use by individuals of all ages. Per Art. 8 GDPR and § 25 TTDSG, no special protections are triggered as no personal data collection occurs.
13. Security Measures
Per Art. 32 GDPR, appropriate measures include:
- Privacy by design: no personal data collection, no accounts, no server-side storage
- All local data protected by iOS device security features (passcode, Face ID, Touch ID)
- Standard HTTPS communication for API requests (where supported by the API)
14. Changes to This Policy
Privacy policy may update reflecting practice or legal changes. "Last updated" date indicates most recent revision. Changes are effective when posted. We encourage periodic review.
15. Contact
For privacy inquiries or exercising data subject rights:
Faruk Orman 24105 Kiel, Germany Email: ofolabs@gmail.com