Legal

Privacy Policy

Last updated 22 September 2026

In short: your trips, day counts and profile live on your iPhone and in your own iCloud account — we can't see them. We use a small amount of product analytics (no location, no trip details), which you can turn off in the app. We don't sell data or show ads.

Who we are

Quota is made by Formula Labs (“we”, “us”). We are responsible for the personal data described here. Contact us at hello@formula-lab.co.

Data that stays on your device and in your iCloud

Your trips, notes, limits, day counts and profile answers (such as passports held and home country) are stored on your iPhone. If iCloud is on, they sync through your private iCloud database (Apple CloudKit) so they survive a reinstall or a new phone. That database belongs to your Apple account — Formula Labs has no access to it.

Permissions you can grant

Location

Used to work out which country you are in so Quota can start or end trips. With “Always” access and automatic border detection turned on, Quota uses Apple’s low-power location monitoring in the background. The country is worked out on your device; to suggest a trip when you open the app, your coordinates may be sent to Apple’s geocoding service to look up the country. We never receive your location.

Photos

If you import past trips, Quota reads only the date and location attached to your photos, on your device, to propose trips for you to review. Photo locations may be sent to Apple’s geocoding service to find the country. Your photos are never uploaded, copied or changed.

Calendar

If you import from your calendar, Quota reads events that have a location to propose trips. Nothing in your calendar is changed and nothing is uploaded.

Notifications

Limit alerts are scheduled on your device from your own data.

Data we collect

WhatWhyWho processes it
App usage events (e.g. screens reached, features used, onboarding steps) and your onboarding survey answers (traveller type, goals, how you tracked days before)To understand how Quota is used and improve itPostHog (EU servers); Superwall
Device and app information (model, iOS version, app version, language, a random app identifier)To make the app and paywall work reliablyPostHog; Superwall
Subscription status and purchase eventsTo unlock Quota Pro and show the right offerApple; Superwall
If you choose Sign in with Apple: your Apple user ID, and the name and email Apple shares (which may be a private relay address)To recognise your account across devices and to contact you about QuotaPostHog; Superwall

We do not collect your location, your trips, the countries you visit, your nationality or your photos. Analytics events never include them.

You can turn analytics off at any time in Profile (the person icon on Today) → Privacy → Share usage analytics. Subscription handling through Superwall continues, because it is needed to provide Quota Pro.

Payments

Subscriptions are sold and billed by Apple. We never see your payment details. Apple’s privacy policy applies to purchases.

What we don’t do

Legal bases (UK and EU GDPR)

We process data to provide the app and your subscription (contract), to improve Quota through analytics you can switch off (legitimate interests), and to contact you if you signed in with Apple (legitimate interests; you can opt out at any time).

How long we keep it

Data on your device and in iCloud stays until you delete it. Analytics and subscription records are kept only as long as needed for the purposes above, and for no more than 24 months after your last use of the app, unless the law requires longer.

Your choices and rights

International transfers

PostHog stores analytics in the EU. Superwall and Apple may process data in the United States; where they do, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Children

Quota is not intended for children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is significant.