Legal
QuoteTradie Privacy Policy
Effective date: 3 October 2026
1. Who we are
QuoteTradie is run by Shivam Pavan Sharma, an individual sole developer based in India (not a registered company), trading as “QuoteTradie”. In this policy, “we”, “us” and “our” mean him.
- Email: [email protected]
- Postal address: available on request (contact us by email first)
- Website: https://quotetradie.app
- This policy: https://quotetradie.app/privacy/
- Delete your account: https://quotetradie.app/delete-account/
This policy covers the QuoteTradie Android app (com.quotetradie.app), our website, and the quote and invoice pages your customers open.
2. Who QuoteTradie is for
QuoteTradie is for solo tradespeople in Australia and New Zealand only, plus a small group of invited testers (including in India) during our pre-launch testing. You must be 18 or over and use it for your business. It is not directed at children. If you believe a child has created an account, email us and we will delete it.
3. The short version
- You sign in with Google. We receive your name, email address and Google account ID.
- We store your business details, customers, quotes, invoices and payments so the app works.
- On the free trial and the Pro plan, your job descriptions and photos are sent to an AI provider to draft quotes. The Basic plan sends nothing to AI. Our AI providers do not use your content to train their models.
- Our database is in Singapore. Some of our providers are in the United States.
- No advertising, no third-party analytics tools, no selling your information. We record a few basic in-app events (such as “quote sent”) to see how the app is used, and use Sentry only to receive crash reports.
- You can export your data at any time, and delete your account in the app or on the web.
4. What we collect
Your account (from Google)
You sign in with Google only. Google gives us your email address, name and Google account ID. We also keep a keyed one-way hash of your Google account ID to check free-trial eligibility (see section 11).
Your business details (you enter these)
Business name, trade, ABN (Australia) or GST number (New Zealand), licence number, address, phone, email, logo, the bank details you choose to print on invoices (account name, BSB, account number), your quote defaults (deposit, validity, terms, GST settings) and your price list.
Your customers’ details (you enter these)
Customer names, phone numbers, email addresses and site addresses. See section 13 for how we handle this on your behalf.
Quotes, invoices and payments
Quotes, quote lines, invoices, the payments you record, and the reminders you set up. When a customer opens or accepts a quote online, we store the time the page was first viewed, the name they type (exactly as typed), the option they chose on a tiered quote, their drawn signature if they choose to draw one, and the time they accepted. We do not record your customer’s IP address, browser details or location. Our hosting providers handle these in their own systems (see section 7).
Job descriptions, voice and photos
- Typed text you enter to describe a job.
- Voice: when you speak, your phone’s own speech service (often Google’s, which may process the audio on its own servers under Google’s terms) turns it into text. QuoteTradie receives only the text, never a recording.
- Photos: job photos are sent to our AI provider to draft the quote. They are not stored on our servers.
Device and security information
- An app-generated device ID, used to stop the same person getting more than one free trial.
- A Google Play Integrity check when you sign in. This is a verdict from Google about whether the app and device are genuine. We use it only to protect the free trial, never to block you from signing in.
Information needed to run the service
How many AI quotes you have used, token and cost counts per AI quote, your trial dates and your plan status.
Usage events
We record a small number of in-app events, such as account created, first quote created, quote sent, quote accepted, invoice created, plans screen viewed, plan bought or cancelled. Each event stores only your account ID, the event name, the time and the related quote or invoice ID; for plan purchases and cancellations it also stores the plan’s product ID, the subscription event ID from RevenueCat, and whether it was a test purchase. We use them to understand how the app is used and improve it. They are kept in our own database (no third-party analytics tool) and deleted with your account.
Crash reports
We use Sentry (Functional Software, Inc., USA) to receive crash reports when the app crashes or hits an error. They contain technical details only: the error stack trace, device model, Android version, app version and a random ID for that app installation (not linked to your account). They don’t contain names, emails, IP addresses, your quotes or your customers’ data. Crash reports are kept for up to 90 days.
What we don’t collect
- No advertising or third-party analytics tools in the app.
- No location tracking.
- No access to your contacts.
- No camera or storage permission: the app uses Android’s own camera and photo picker, which give us only the photo you choose.
Google Play services libraries used by the app (for Google Sign-In, billing and Play Integrity) may send their own diagnostic information to Google under Google’s terms.
App permissions
| Permission | Why |
|---|---|
| Internet | To sync your data and draft quotes |
| Microphone | To describe a job by voice (only when you tap to speak) |
| Notifications | To show payment reminders |
| Run after restart | To keep scheduled reminders after your phone restarts |
| Billing | To buy and manage subscriptions through Google Play |
| Network state | To check whether you’re online, so the app can work offline and sync later |
| Vibrate | To vibrate for payment reminders |
5. How we use your information
| Purpose | Information used |
|---|---|
| Providing the service: quotes, invoices, PDFs, customer links, reminders, and syncing across your devices | Account, business details, customer details, quotes, invoices, payments |
| Drafting quotes with AI (trial and Pro only) | Job descriptions, photos, price list, business context |
| Running the free trial and preventing abuse | Hashed Google account ID, device ID, Play Integrity verdict, AI quote counts, trial dates |
| Subscriptions and billing status | Plan status from Google Play and RevenueCat |
| Support and essential service messages | Your email address and messages you send us |
| Understanding how the app is used and improving it | Usage events (account ID, event name, time, related quote or invoice ID; for plan events, product ID, RevenueCat event ID and test-purchase flag) |
| Finding and fixing crashes and bugs | Crash reports (Sentry): stack trace, device model, Android version, app version |
We keep the hashed Google account ID and device ID after you delete your account because we have a legitimate need to prevent fraud and abuse: without them, the same person could delete and re-create accounts to get unlimited free trials.
We don’t send marketing emails, only replies to your support requests. If that ever changes, it will be opt-in only.
We never sell your personal information and we show no advertising.
6. How AI is used
| Your plan | AI provider | What is sent |
|---|---|---|
| Free trial (including Basic bought during the trial, until the trial ends) | Google Gemini API (paid tier), Google LLC, USA | Job description, job photos, your price list and business context |
| Pro | Anthropic Claude API, Anthropic PBC, USA | Job description, job photos, your price list and business context |
| Basic (after the trial) | None | Nothing is sent to any AI provider |
We use both providers under their paid business terms:
- Google Gemini (paid tier): Google does not use prompts, files or responses to improve its products. It processes them under its data processing terms, logs them for a limited period only to detect abuse and meet legal requirements, and may store them temporarily in any country where Google or its agents have facilities.
- Anthropic: under Anthropic’s Commercial Terms, Anthropic may not train models on our customer content. Anthropic automatically deletes API inputs and outputs within 30 days, except where content is flagged for breaking its usage policy (kept for up to 2 years) or where the law requires longer.
You stay in control. Prices on a quote come from your own price list. The AI chooses items and quantities and writes the wording. You review and edit every quote before you send it. QuoteTradie does not make automated decisions about you or your customers.
7. Quote and invoice links your customers open
You can send a customer a private link to a quote (quotetradie.app/q/…) or an invoice (quotetradie.app/i/…).
- Each link contains a long, random token. Anyone who has the link can view that document, so share it only with your customer.
- The pages show the document and the business details you’ve chosen to include (for invoices, this can include the bank details you print).
- On a quote, your customer can accept by typing their name and, if they choose, drawing a signature. We store these with your quote (see section 4).
- The pages run in your customer’s browser and talk directly to our backend (Supabase). They are hosted by Cloudflare. Our hosting providers may keep standard technical logs, such as IP address and browser type, under their own policies.
- Links stop working when you delete the document or your account.
8. Who we share information with
We share information only with service providers that help us run QuoteTradie, and only what they need. They process it on our behalf.
| Provider | What it does | Location |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions | Singapore |
| Google Sign-In, Gemini API (AI drafting on the trial), Play Billing, Play Integrity | United States and other Google locations | |
| Anthropic | Claude API (AI drafting on Pro) | United States |
| RevenueCat | Subscription status | United States |
| Cloudflare | Website hosting, domain and DNS, Turnstile bot check on the account-deletion page | Cloudflare’s global network |
| Your phone’s speech service (usually Google) | Turns your voice into text on your phone | Under your device provider’s terms |
| Sentry (Functional Software, Inc.) | Crash reports | United States |
Google Play handles all subscription payments in your local currency. We never see your card details. Google Play, RevenueCat and our AI providers keep their own records under their own policies.
We may also disclose information where the law requires it.
9. Sending information overseas
Your information is stored in Singapore and processed by providers in the United States and other countries where Google and Cloudflare operate. We run QuoteTradie from India, so we access your information from India to operate and support the service.
Australian Privacy Principle 8 and New Zealand Information Privacy Principle 12 set rules for sending personal information overseas. We protect it by:
- using providers whose standard terms and data processing addendums (DPAs), which apply automatically through their terms of service, require them to process it only to provide their service to us and to keep it secure;
- encrypting data in transit between your phone, our website and our providers;
- limiting access with account-level access rules and protected operator accounts (see section 10).
The privacy laws of these countries may differ from Australian and New Zealand law.
10. How we protect your information
- HTTPS everywhere (all .app domains require it).
- Encryption at rest by our hosting providers.
- Row-level access rules, so each account can reach only its own data.
- Private random tokens for customer links.
- Operator account access protected by multi-factor authentication (MFA).
No system is perfectly secure. If a data breach is likely to cause serious harm, we will notify affected users and regulators as the law requires, including under Australia’s Notifiable Data Breaches scheme and New Zealand’s Privacy Act 2020.
11. How long we keep your information
| Information | How long |
|---|---|
| Account and business data, customers, quotes, invoices, payments, reminders | Until you delete your account |
| Photos sent for AI drafting | Not stored by us. The AI provider keeps them for the limited period in its terms (section 6) |
| Keyed hash of your Google account ID, and app-generated device ID | Indefinitely, with no link to you, only to stop repeat free trials |
| Security audit log and referral records | Kept indefinitely. The audit log records key events (such as trial started, terms accepted, AI quote made, plan changed, invoice sent, payment recorded, reminder sent) with dates, invoice IDs, payment amounts, referral codes, plan details and the versions of our terms you accepted. It contains no names, emails, phone numbers or quote text. When you delete your account, your account ID is removed from these rows and the invoice IDs no longer point to anything. Referral records keep the referral code and dates, for paying referral partners. |
| Backups | Deleted data may remain in our hosting provider’s backups for up to 7 days before it is permanently overwritten |
| Support emails | Up to 24 months, then deleted |
| Usage events | Until you delete your account |
| Crash reports (Sentry) | Up to 90 days |
12. Exporting and deleting your data
Export. In the app, tap Export my data. You’ll get a ZIP file with all your quote and invoice PDFs, plus CSV files of your quotes, quote lines, invoices, payments and customers. Export is available on every plan and after your trial ends.
Keep your records. Tax law may require you to keep invoices for years (for example, generally 5 years in Australia and 7 years in New Zealand). Export your data before deleting your account. We can’t recover it afterwards.
Delete your account:
- In the app: Profile → Delete account.
- On the web: go to https://quotetradie.app/delete-account/, sign in with Google and confirm. You don’t need to reinstall the app.
- By email: if you can’t sign in, email [email protected]. We only act on a request sent from the Google email address on the account. If it comes from another address, we’ll ask you to use the in-app or web deletion page instead. We will never ask for your password or a code by email.
What is deleted: your profile, business details, customers, price list, quotes, quote lines, invoices, payments, reminders, AI usage records, usage events, device records, plan and entitlement records, logo and stored files. Quote and invoice links stop working.
What is kept: only the items marked in section 11 (the keyed hash and device ID, and the audit log and referral records with no link to you).
Deleting your account does not cancel a Google Play subscription. Cancel it in Google Play → Payments & subscriptions → Subscriptions.
13. Your customers’ information
For customer details you enter, you decide what to collect and why; we process it on your behalf to provide the service. You are responsible for having a lawful reason to use it and for telling your customers how you use it.
If you are a tradie’s customer, you can ask that tradie, or us, to access, correct or delete your information. We will refer requests to the tradie where appropriate.
14. Your rights and complaints
You can ask to access, correct or delete your information, and you can export it yourself in the app. Email [email protected]. We respond within 30 days (for New Zealand access and correction requests, within 20 working days as the Privacy Act 2020 requires).
- Australia: the Privacy Act 1988 and the Australian Privacy Principles. Complain to us first. If you’re not satisfied, contact the Office of the Australian Information Commissioner (oaic.gov.au).
- New Zealand: the Privacy Act 2020. Complain to us first. If you’re not satisfied, contact the Office of the Privacy Commissioner (privacy.org.nz).
- India: we are based in India. India’s Digital Personal Data Protection Act 2023 largely exempts processing of people outside India under contracts with them (section 17(1)(d)), but we still keep reasonable security safeguards in place.
15. Our website and cookies
Our website uses no analytics and no advertising cookies. We use Cloudflare Turnstile for bot protection, which may use strictly necessary browser data or cookies to complete the check; it is not used for tracking. Cloudflare’s Turnstile Privacy Addendum applies to that processing. Customer quote and invoice pages and the deletion page run in the visitor’s browser and talk directly to our backend.
16. Changes to this policy
We’ll post updates on this page with a new effective date, and tell you in the app about significant changes.
17. Contact
Shivam Pavan Sharma, trading as QuoteTradie
Email: [email protected]
Postal address: available on request. Contact us by email first.