Legal

Privacy Policy

Last updated 6 October 2026

In short: your trips, day counts and profile live on your iPhone and in your own iCloud account — we can't see them. We use a small amount of product analytics (no trips, no countries you visit), which you can turn off in the app. We measure which of our own ads bring people to Quota, and only use your device’s advertising identifier if you allow tracking when iOS asks. We don't sell data or show ads in the app.

Who we are

Quota is made by Formula Labs (“we”, “us”). We are responsible for the personal data described here. Contact us at hello@formula-lab.co.

Data that stays on your device and in your iCloud

Your trips, notes, limits, day counts and profile answers (such as passports held and home country) are stored on your iPhone. If iCloud is on, they sync through your private iCloud database (Apple CloudKit) so they survive a reinstall or a new phone. That database belongs to your Apple account — Formula Labs has no access to it.

Permissions you can grant

Location

Used to work out which country you are in so Quota can start or end trips. With “Always” access and automatic border detection turned on, Quota uses Apple’s low-power location monitoring in the background. The country is worked out on your device; to suggest a trip when you open the app, your coordinates may be sent to Apple’s geocoding service to look up the country. We never receive your location.

Photos

If you import past trips, Quota reads only the date and location attached to your photos, on your device, to propose trips for you to review. Photo locations may be sent to Apple’s geocoding service to find the country. Your photos are never uploaded, copied or changed.

Calendar

If you import from your calendar, Quota reads events that have a location to propose trips. Nothing in your calendar is changed and nothing is uploaded.

Notifications

Limit alerts are scheduled on your device from your own data.

Data we collect

What	Why	Who processes it
App usage events (e.g. screens reached, features used, onboarding steps) and your onboarding survey answers (traveller type, goals, how you tracked days before)	To understand how Quota is used and improve it	PostHog (EU servers); Superwall
Device and app information (model, iOS version, app version, language, a random app identifier) and an approximate location worked out from your IP address (city or country level)	To make the app and paywall work reliably, and to show prices and offers for your region	PostHog; Superwall
Subscription status and purchase events	To unlock Quota Pro and show the right offer	Apple; Superwall
Ad measurement: which ad or search led to your install (Apple Ads, Meta), app opens, and when a free trial or subscription starts or renews — with your device’s advertising identifier only if you choose “Allow” when iOS asks about tracking	To see which of our ads work, so we stop paying for the ones that don’t	AppsFlyer; Meta; Apple; Superwall (which passes subscription renewals to AppsFlyer)
If you choose Sign in with Apple: your Apple user ID, and the name and email Apple shares (which may be a private relay address)	To recognise your account across devices and to contact you about Quota	PostHog; Superwall

We do not collect your precise location, your trips, the countries you visit, your nationality or your photos. Analytics and advertising events never include them.

You can turn analytics off at any time in Profile (the person icon on Today) → Privacy → Share usage analytics. This also stops ad measurement through AppsFlyer and Meta from the app. Subscription handling through Superwall continues, because it is needed to provide Quota Pro.

Payments

Subscriptions are sold and billed by Apple. We never see your payment details. Apple’s privacy policy applies to purchases.

What we don’t do

We don’t sell or rent personal data.
We don’t show ads in Quota.
We only link your activity with other companies’ data for ad measurement if you allow tracking when iOS asks. You can change this at any time in iOS Settings → Privacy & Security → Tracking.
We never send your trips, the countries you visit or your location to advertising partners.
We don’t use your data to make automated decisions about you.

Legal bases (UK and EU GDPR)

We process data to provide the app and your subscription (contract), to improve Quota through analytics you can switch off (legitimate interests), and to contact you if you signed in with Apple (legitimate interests; you can opt out at any time).

How long we keep it

Data on your device and in iCloud stays until you delete it. Analytics and subscription records are kept only as long as needed for the purposes above, and for no more than 24 months after your last use of the app, unless the law requires longer.

Your choices and rights

Delete everything on your side: Profile → Privacy → Delete all data erases your trips and profile from your device and iCloud, and resets your analytics and subscription identities to anonymous.
Turn off analytics: Profile → Privacy.
Access, correct, delete, restrict or object: email hello@formula-lab.co and we will respond within one month. You can also complain to your data protection authority (in the UK, the ICO).

International transfers

PostHog stores analytics in the EU. Superwall, AppsFlyer, Meta and Apple may process data in the United States or elsewhere; where they do, transfers rely on appropriate safeguards such as Standard Contractual Clauses.

Children

Quota is not intended for children under 13, and we don’t knowingly collect their data.

Changes

If we change this policy we will update the date above, and tell you in the app if the change is significant.