The short version: your relationships are private. Quill stores your relationship data on your device. Sync goes through your own private iCloud — never through us. We have no backend that can read your data. We never sell ads. You can export or delete everything at any time.
1. Who We Are
Quill is developed by Anchori Intel, a sole-trader app studio operated by Stuart McMillan, registered in Australia (ABN 51 277 394 323). Questions about this policy: anchoriintel@gmail.com.
2. What Quill Collects, and Where It Goes
Quill has four categories of data. Each goes to a different place.
Your relationship data — the people you add, the interactions you log, your notes, memories, milestones, reflections, and nudge history.
- Stored on-device using Apple's SwiftData with at-rest encryption.
- Synced via Apple's CloudKit, in your private iCloud database. Only you can read it. Anchori Intel cannot.
- Never transmitted to a server we control. We have no backend that holds this data.
Your authentication identity — provided by Sign in with Apple.
- Apple gives us an opaque user identifier (a random string) and, on first sign-in, optionally your first name and email (relay email if you choose).
- We store these in your device's secure Keychain, locally only. They never leave your device.
- We do not maintain a user account on a server. There is no email list.
Anonymous product analytics — to know which features people use.
- Provided by PostHog. Events include "opened nudge feed", "completed onboarding", "tapped paywall" — never names, never relationship data, never message contents.
- An anonymous random UUID identifies your install. There is no way to map this back to your identity.
- You can turn analytics off entirely in Settings → Privacy Dashboard.
Crash and performance reports — to fix bugs.
- Provided by Sentry. Includes the file and line where a crash happened, device model, and iOS version.
- Does not include your relationship data, names, notes, or any user-entered content.
3. What We Never Do
- We never sell your data. To anyone. Ever.
- We never show advertising. Quill has no ad inventory.
- We never share your relationship data with a third party.
- We never train an AI model on your relationship data. AI suggestions in Quill run on-device using Apple Intelligence or local templates.
- We never use tracking identifiers (IDFA, ATT prompts) — Quill opts out of tracking entirely.
4. Sign in with Apple
Quill uses Sign in with Apple for the same reason we use everything Apple-native — it keeps your data on your device, in your control. Apple may relay an anonymous email address to us; that's fine, because Quill has no email list and no marketing to send.
5. iCloud Sync (CloudKit Private Database)
If you have iCloud enabled, your Quill data syncs between your own devices using Apple's CloudKit private database. This is your iCloud, not ours. We don't have credentials to read it. Apple's documentation calls it a "private database scope" — meaning only the authenticated user can read or write it.
If you sign out of iCloud, sync stops. Your local data stays on the device.
6. Third-Party Services
Quill uses these third-party services to operate:
- Apple iCloud — your private CloudKit database, holds your relationship data. Apple Privacy →
- RevenueCat (revenuecat.com) — subscription management. Receives an anonymous subscriber ID and your subscription status from Apple's App Store. No relationship data. RevenueCat Privacy →
- PostHog (posthog.com) — anonymous product analytics only. No personally identifiable information. PostHog Privacy →
- Sentry (sentry.io) — crash and performance reporting. No user content. Sentry Privacy →
7. Your Rights
You can, at any time, from inside the app:
- Export everything — Settings → Privacy Dashboard → Export. Generates a JSON file with all your local data.
- Delete everything — Settings → Privacy Dashboard → Delete All Data. Wipes the local SwiftData store and your CloudKit records.
- Turn analytics off — Settings → Privacy Dashboard → Analytics toggle.
- Cancel your subscription — Settings → Manage Subscription opens Apple's standard subscription management screen.
Depending on where you live, you may have additional rights over your personal data. To exercise any of these, contact us at anchoriintel@gmail.com and we will respond within 30 days.
8. Data Retention
Anchori Intel does not retain your data because we never have it. CloudKit data lives in your iCloud account for as long as you keep it there. Local data on your device persists until you delete it (via the in-app control above, by uninstalling the app, or by erasing the device).
9. Children
Quill is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has used Quill, please email us and we will help ensure any associated CloudKit records are deleted from their device.
10. International Users
Quill is built in Australia and operates under Australian privacy law. Because we don't transfer your relationship data outside your device, there is no international data transfer to worry about. Anonymous analytics may be processed in the United States by PostHog; this is covered by their privacy policy.
11. Changes to This Policy
If we change this policy materially, we'll update the date at the top of this page and announce the change in the next app update's release notes. We never change it retroactively in a way that reduces your protections.
12. Contact
- Email: anchoriintel@gmail.com
- Studio: Anchori Intel, Australia (ABN 51 277 394 323)
We read every email and reply personally.