Privacy statement

Version 2026-10-25 · effective October 25, 2026

This is a translation, provided as a courtesy. Only the Dutch privacy statement is legally binding; where the two differ, the Dutch text prevails.

QuoteUs exists to keep what gets said inside a small circle. That means handling your data with care: we only collect what QuoteUs needs to work, we don’t track you and we don’t sell anything. In this statement you can read what data we store, why, for how long, who can see it and what your rights are.

This statement applies to the QuoteUs app, the website quoteus.eu and the web version of QuoteUs.

Who we are

QuoteUs is a service of Proxeuse, registered with the Netherlands Chamber of Commerce under number 72311967, located at Loosduinsekade 209, 2571 BX The Hague, the Netherlands. Proxeuse is the controller of the personal data in this statement.

Questions about your privacy or a request about your data? Email privacy@quoteus.eu.

What we store and why

Your account

• Name and email address. We show your name to the members of your groups. We use your email address to send you login codes, invites and important messages about your account. Other members don’t see your email address.
• Language and notification preferences. So the app and our emails speak your language and you only get the push notifications you want.
• Passkeys. QuoteUs has no passwords. Of a passkey we only store the public part and when it was last used. The secret part never leaves your device.
• Sessions and devices. For every signed-in device we store a session, when it was last used and, if you allow push notifications, that device’s push token. This lets you see in the app where you’re signed in and end sessions.

Legal basis: this data is needed to provide the service you create an account for (performance of a contract).

What you put in QuoteUs

• Groups: name, members, their role and whether you muted a group.
• Quotes: the text, who said it (the author), who saved it, when it was said and any photos or videos.
• Comments on quotes.
• Friends: requests you send and receive, and who your friends are.
• Notifications in your inbox, such as being quoted or receiving a friend request.
• Join codes you create, and the email addresses of the people you invite with them.

Legal basis: performance of a contract. Data about others that you put in QuoteUs, such as a quote from someone without an account or the email address of someone you invite, we process on the basis of our legitimate interest and that of your group: keeping memories together and inviting people to join.

Security and abuse

• Login codes, stored irreversibly encrypted.
• Technical logs of our servers, including your IP address, the time and the type of device or browser.

Legal basis: legitimate interest. We use this data to keep QuoteUs secure, to prevent abuse such as requesting codes in bulk, and to fix outages. When someone signs in to your account with a login code or adds a passkey, we let you know.

Contacting us

When you email us, we keep your message, your email address and our reply in our helpdesk, so we can handle your question and later see what we agreed on. Legal basis: legitimate interest, or performance of a contract when your question is about your account.

Reports

When you report a group, quote, comment or user, we keep:

• Who reported it: your name, your email address, the reason you choose, your explanation, the time and the group you reported from.
• What you reported, as it was at that moment. For a quote, the text, the author, who saved it, when it was said, saved and edited, and a copy of its photos and videos. For a comment, the text, who wrote it and which quote it belongs to. For a group, the name, the description, the number of members, the owners and the group’s image. For a user, the name, the email address, since when the account exists, the profile photo and the names and member counts of the groups you share.

That snapshot remains when the content is later edited or deleted, so we can judge what was there. We handle reports in our own helpdesk. From there we send you a confirmation of receipt and, later, our decision. If the helpdesk is temporarily unavailable, the report reaches us by email.

Legal basis: legal obligation, because as a provider of a hosting service the Digital Services Act requires us to handle reports carefully and to give reasons for our decisions. In addition, legitimate interest: keeping QuoteUs safe for everyone.

What we don’t do

• We don’t collect analytics or crash reports and don’t use trackers or advertising networks, in the app or on the website.
• We don’t sell your data or use it for advertising.
• We don’t build profiles of you or make automated decisions about you.
• We never rely on consent as the legal basis for processing your data. Only for push notifications does your device itself ask for permission. You can always withdraw it in your device’s settings.

Who can see what

QuoteUs is not a public network. Quotes, comments, photos and videos can only be seen by the members of the group they are saved in. Search, too, only works within your own groups.

• Group members see your name, your role in the group, the quotes you are the author of or saved, and your comments.
• Administrators and owners of a group can manage members and guests and, depending on their permissions, delete other people’s quotes and comments.
• Friends see your name.
• We can technically access the data. We only do so when it is needed to help you, fix an outage, investigate abuse or because the law requires us to.

When you leave a group, your quotes stay in that group. They are a shared memory of the whole group.

When you report something, only we see it. Other members see nothing of it, and whoever you report never learns it was you. When we act, we tell them what we decided and why.

If you are in QuoteUs without an account

Members can save quotes of people who don’t have an account themselves. Such a person appears in the group as a guest, with a name and sometimes an email address. Someone can also invite you to a group by entering your email address. We then receive your data from that member, not from you.

We process this data on the basis of the group’s legitimate interest in keeping memories together. You have the same rights as everyone with an account. Email us at privacy@quoteus.eu if you want to know what has been stored about you, or if you object.

If you ask us to delete your data, we:

• replace your name with “Deleted account” and erase your email address, so the quotes can no longer be traced back to you through your name;
• delete photos and videos that show you;
• additionally delete individual quotes when your interest outweighs that of the group, for example when a quote is hurtful or clearly about you even without your name.

We only use an email invite to send you that one invite. We don’t send you advertising.

Who processes your data

We run QuoteUs ourselves as much as possible, and within the European Union. With every party that processes data on our behalf, we conclude a data processing agreement.

• Hetzner Online GmbH (Germany). Their servers run, under our own management, the API, the database, search, the storage of photos and videos, our helpdesk, the website and the backups.
• Cyso (the Netherlands). Sends our emails, such as login codes and invites, through their European email service.
• Apple. Delivers push notifications on iPhone and iPad through the Apple Push Notification service. A push notification never contains the text of a quote or comment, only who did what in which group, for example “Sanne quoted you in Family”. Apple may process this data in the United States. That transfer is based on the EU-US Data Privacy Framework, under which Apple is certified. What Apple otherwise does with your device is described in Apple’s privacy policy.

We don’t share your data with anyone else, unless the law requires us to, for example by court order.

How long we keep data

• Your account we keep for as long as you use it. When you request deletion, you are signed out everywhere and we permanently delete your account after 7 days. Signing in within those 7 days stops the deletion. After deletion, quotes you are the author of stay in their group under the name “Deleted account”, and quotes you saved stay without your name. Your comments, the photos and videos you added and the join codes you created are deleted. Note: we never rewrite the text of quotes, so if your name appears in the text itself, it stays.
• Deleted quotes and groups are permanently erased 30 days after deletion. Until then, nobody can see them.
• Join codes are valid for at most 30 days. Email addresses of invitees are erased as soon as the code is used, expires or is revoked, and no later than 30 days after it was sent.
• Notifications in your inbox are deleted after 90 days.
• Login codes are valid for 10 minutes and deleted afterwards.
• Sessions expire after 90 days without use, or after 30 days when you signed in with a login code.
• Technical logs are kept for 14 days.
• Helpdesk messages are kept for up to 2 years after your question was resolved.
• Reports are kept for 2 years and then deleted, in the app and in our helpdesk. That also applies when what you reported disappears. If you delete your account, the report remains but is no longer linked to your account.
• Backups are overwritten after 30 days. Data we delete is therefore also gone from our backups no later than 30 days later.

We also keep which version of the terms and this privacy statement you accepted or read, and when, for as long as your account exists. We don’t store an IP address or device with it.

Cookies

The app doesn’t use cookies. The website only sets a lang cookie when you choose a language yourself, so we remember it. That cookie is valid for one year and contains nothing but your language choice. In the web version of QuoteUs we use a cookie to keep you signed in. These are functional cookies, for which we don’t need to ask permission. We don’t use tracking or advertising cookies.

How we protect your data

• Every connection to QuoteUs is encrypted.
• You sign in with a passkey, so there is no password that can leak. Someone who signs in with a login code on an account that has a passkey cannot change your email address, delete your passkeys or delete your account.
• Only we have access to our servers.

If something does go wrong with your data, we report it to the Dutch Data Protection Authority and, if the risk to you is high, to you as well.

Minimum age

You must be at least 16 years old to create an account. If we find out that someone younger has an account, we delete that account.

Your rights

You have the right to:

• access your data and get a copy;
• take your data with you: you get it in a common, machine-readable file (JSON);
• have incorrect data corrected. You change your name and email address yourself in the app;
• have your data deleted. You delete your account yourself in the app, under Account, Privacy center;
• object to processing based on legitimate interest;
• have processing restricted, for example while we look into an objection.

To use any of these rights, email privacy@quoteus.eu from your account’s email address. We respond within one month. Sometimes we first ask you to confirm that you are who you say you are, so we don’t give your data to anyone else.

Do you disagree with how we handle your data? Let us know first, and we’ll look for a solution together. You always have the right to file a complaint with the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.

Changes

When we change this statement, we publish the new version on this site. When something changes that matters to you, we let you know in the app before it takes effect. Earlier versions remain available on this site.