Quire Privacy Policy

Version 2026-09-03 · Effective on first publication

Supersedes version 2026-09-02, which was never published. Two things changed. A bug report can now carry a screen recording you attached, where before every recording stayed on your device — section 2.1. And bug reports now expire: a year for the report, 90 days for anything attached to it, where before neither had an end date — section 6. Nothing else in this document changed.

Written against the code as it stands on 3 September 2026, not from memory or from a template. Every claim below was checked against the source, the database migrations and the Edge Functions before it was written down. Where the app does something this document does not describe, this document is wrong and should be corrected rather than explained away.

This is a factual description of what Quire collects and what happens to it. It is a different document from our Terms of Service — the Terms are the agreement between us, this is the disclosure. Where the two overlap they are meant to say the same thing; if they ever disagree, treat this as the accurate one about data and tell us so we can fix it.

Quire is published by Venture98 LLC, a Virginia limited liability company.

The short version

• Your notes never leave your iPad unless you send them. Not the text, not the handwriting, not the titles, not the folder names. There is no sync service and no account.
• There is no account. No email address, no password, no profile. Nothing in Quire asks who you are.
• Three things leave the iPad, and all three are things you do on purpose: filing a bug report, creating a share link, and asking the online tutor a question.
• Nothing is collected in the background. No analytics, no telemetry, no advertising identifiers, no tracking of any kind.
• We do not sell anything about you, and there is nothing to sell.
• Anyone who has a share link can read what it points to. That is what a link is for, and it is the one place in Quire where your writing leaves your control.

1. What stays on your iPad

Your notes. Every note is an ordinary file in a folder you chose, on your iPad or in whatever cloud folder you pointed Quire at. The words, the handwriting, the pressure and tilt of every stroke, the titles, the folder names, the version history. We never receive any of it.

Your library. There is no index and no database of your notes anywhere but your own device. What we would need to know your library exists, we do not have.

Your Anthropic key, if you use your own. It is held in the iPad's Keychain. It is never sent to us, and we could not read it if we wanted to.

Crash logs. When Quire crashes it writes what happened to a file on the iPad — the app version, the device model, the install's random id, which fault it was, the last few controls used, and the call stack. It never sends them. They reach us only if you later choose to file a bug report, and only then.

Deleting the app deletes all of this, along with the random install id described below. Your notes are files and survive, because they are yours.

2. What leaves the iPad, and only when you do something

2.1 When you file a bug report

Help → Report a problem sends:

• What you typed. Up to 8,000 characters, exactly as written.
• What the app was doing. The version, the device model, which tools and settings were in use, counts of strokes and blocks, and the last few things pressed. Never note text, never titles, never file names, never handwriting.
• A random id made once when you installed Quire. It is not you and it is not your device. It exists so that six reports from one iPad can be told apart from six iPads with one report each, which changes what a bug means. It is deleted when you delete the app.
• Screenshots, only if you attached them yourself. Never automatically. A screenshot of Quire contains whatever was on the page — your handwriting, your note, your file names — so the app never takes one on its own, and the report screen says so above the Send button.
• One screen recording, only if you attached one yourself, and only if it is under 25MB. Never automatically. A recording is the most revealing thing you can send us: it is everything that was on your screen for the whole length of it, including anything you scrolled past on the way. The app takes one only when you attach it, sends at most one per report, and the report screen tells you which one is going before you press Send. A second recording, or one over the size limit, stays on your device.

This changed on 3 September 2026. Before that date no recording was ever sent. It changed because a recording is the only attachment that shows a sequence, and some faults — a stutter, a flicker, something that appears and then goes — cannot be shown any other way.

2.2 When you create a share link

Creating a share link uploads the note itself — the complete file, including the handwriting — so that the link has something to open. Also stored: the title, whether it is a note, a notebook or a folder, its size, a version number, the random install id so the app can list and revoke your own links without an account existing, and two random tokens.

Understand what a link is. Anyone who has it can read what it points to, without signing in, for as long as it exists. That is the entire purpose. A read-only share has no write token at all — not a disabled one, an absent one — so a read link cannot be turned into an edit link.

You can revoke a link at any time from inside the app, which deletes the row and the note with it. Links also expire on their own after one year.

2.3 When you ask the online tutor a question

The on-device tutor sends nothing, ever. It is exact arithmetic running on your iPad and it works with the network off.

The online tutor is a separate thing you switch on yourself, and asking it is a deliberate act on one question — there is no setting that sends anything by itself. When you ask, one line of maths goes out and nothing else. Not the note it came from, not the rest of the page, not your library.

There are two routes and they are genuinely different:

• Your own Anthropic key. The question goes from your iPad straight to Anthropic. It does not pass through us and we never see it.
• Quire's tutor service. The question passes through our server on its way to Anthropic. We do not store the question. What we store is described in section 3.

3. If you subscribe to the tutor service

We store one row per subscriber per month containing: an identifier Apple minted for the subscription, the month, how many questions were asked, and how many tokens they used.

That is the whole record. No email address, no name, no account, no questions, no answers. The identifier is Apple's originalTransactionId. It is stable for the life of the subscription and means nothing outside the App Store — if this table leaked, it would tell somebody how many maths questions an anonymous iPad asked in August.

Apple handles the payment. We never see your card, your Apple Account, or your name.

4. The one optional thing, and it is off

Sharing tutor answers for review is off until you switch it on. If you do, the question you asked and the answer you got are sent to us so that poor answers can be found and fixed, along with which tutor answered, whether you typed or wrote it, which method produced the answer, whether it was right, the app version and device model, and the random install id.

It is off by default, switching it off never breaks anything, and what is already stored is deleted after 30 days.

5. Who else is involved

• Anthropic — answers the online tutor's questions. Either your key or ours; either way the question reaches them.
• Supabase — hosts our database and the small server programs behind reports, shares and the tutor.
• Apple — handles subscriptions and payment. We never see your payment details.
• Cloudflare — holds our encrypted-in-transit database backups.

We do not use analytics, advertising, attribution or crash-reporting services. There are none in the app and none in the server.

6. How long things are kept

7. What we do not do

• We do not sell or rent personal information, and never have.
• We do not show advertising.
• We do not track you across apps or websites.
• We do not build a profile of you.
• We do not read your notes. We cannot — we do not have them.
• We do not use what you write to train anything.

8. Children

Quire is a notebook with a maths tutor in it, and some of the people using it will be students. We do not knowingly collect personal information from children, and the design makes it difficult to: there is no account, no profile, no name, no email address, and nothing that asks a person who they are.

The two things a child could send are a bug report and a share link, and both require deliberately choosing to send them.

If you believe a child has sent us something that identifies them, write to us at the address below and we will delete it.

9. Your choices

• Everything optional is off by default, and switching it off never breaks a feature.
• Revoke any share link from inside the app, at any time. The link stops working and the copy is deleted.
• Delete the app and the random install id, the crash logs and every local trace go with it. Your notes remain, because they are your files.
• Ask us to delete a report or a shared answer. Include the date and enough detail to find it; there is no account for us to look you up by.

10. Changes to this policy

When the app changes what it collects, this document is rewritten in the same change, not afterwards. Each version is dated, kept on file, and says what changed and why. We will not quietly repurpose something already collected.

11. Contact

Venture98 LLC
8401 Mayland Dr, Ste A
Richmond, VA 23294, USA

legal@venture98apps.com