QuetzalQuote Privacy Policy
On this page
- The short version
- 1. Whose information this policy covers
- 2. Information we collect
- 3. How we use information
- 4. AI processing
- 5. Photos and voice notes
- 6. Your clients' information and Proposal Pages
- 7. Electronic signatures
- 8. How we share information
- 9. How long we keep information
- 10. Deleting your account
- 11. Security
- 12. Where we process information
- 13. Your choices
- 14. Your privacy rights in the United States
- 15. Children
- 16. Changes to this policy
- 17. Contact us
Effective date: October 7, 2026
Last updated: October 7, 2026
QuetzalQuote is operated by Innokido LLC, a New Mexico limited liability company ("Innokido," "we," "us," "our").
This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we keep it, and the choices you have. It applies to:
- the QuetzalQuote app for iPhone (the "App");
- the web pages where your clients view, accept, or decline your proposals (the "Proposal Pages"), currently at sign.quetzalquote.com;
- the emails we send for you and to you; and
- our customer support.
Together, these are the "Service." Our Terms of Service also apply.
A Spanish version of this policy is available. If the English and Spanish versions differ, the English version controls.
The short version
- QuetzalQuote is a business tool for painting contractors who are 18 or older. It helps you create estimates, proposals, and invoices.
- To draft the scope of a job, we use artificial intelligence (AI). We send your job photos, the text of your voice note, and your measurements to our AI provider, Anthropic (Claude). Under Anthropic's commercial terms, Anthropic may not train its models on this data. The App asks for your permission before it sends anything to the AI for the first time.
- AI never sets your prices. Prices come from your own price book, using a fixed calculation. What the AI produces is a draft that you must review.
- Your photos are stored privately. Your client only sees the photos you choose to include in a proposal.
- When your client accepts a proposal, we record electronic signature evidence (name, contact, signature, date and time, IP address, browser, and a digital fingerprint of the document).
- We do not sell your information, we do not share it for targeted advertising, we show no ads, and we do not track you across other companies' apps or websites.
- You can delete your account inside the App at any time.
1. Whose information this policy covers
You (the "User"). You are the contractor who has an account in the App. For your account, business, and usage information, Innokido decides how the information is used.
Your clients. Your clients (for example, homeowners) do not have accounts. When you enter information about your clients, or when they open, accept, or decline your proposal, we process that information on your behalf and following your instructions, as your service provider. You are responsible for having the right to give us that information and for giving your clients any notices the law requires. See Section 6.
2. Information we collect
2.1 Information you give us
| Type | Examples |
|---|---|
| Account | Email address; your Sign in with Apple identifier (Apple may give us a private relay email instead of your real one); your name. |
| Business profile | Your name, company name, city, state, phone number (optional), logo, drawn signature image, brand color, and app language. |
| Price book and settings | Your labor rates, paint products and prices, markup, job minimum, the tax rate you choose, default terms and validity period. |
| Client information | Your client's name, email, phone number, job address, preferred language, and notes you add. |
| Job content | Job photos; voice notes and their transcripts; room measurements; your answers to the AI's questions; estimates and line items; proposal text, photos, and terms; invoices, and the payment status and method you record (for example, "cash" or "check"). We do not process payments between you and your clients. |
| Support | Messages you send us through in-app support. |
2.2 Information collected automatically
| Type | Examples |
|---|---|
| Device and app information | App version, device model, operating system version, language, and a push notification token (so we can send you notifications). |
| Usage events | Limited records of actions in the App, such as "estimate created" or "proposal sent," with details like your plan, state, language, number of photos, or how long something took. We do not put your clients' names, emails, phone numbers, addresses, or your voice-note transcripts into our analytics. |
| Crash and error reports | Technical information about errors, such as the error message, the code involved, device and system version, and app version. |
| Server and security logs | IP address, date and time, and technical details of requests when the App or a Proposal Page contacts our servers. We use them for security, abuse prevention (for example, limiting how many requests can be made), and troubleshooting. |
| AI usage records | For each AI request: the AI model used, number of tokens and images, cost, response time, and whether it succeeded. These records do not contain your photos, transcripts, or the AI's answers. |
2.3 Information from other companies
- Apple (Sign in with Apple): a user identifier, an email address (possibly a private relay address), and your name if you choose to share it.
- Apple and RevenueCat (subscriptions): your subscription status, the product you bought, purchase, renewal, and expiration dates, and whether a purchase was refunded. We do not receive your credit card or other payment details.
2.4 Information from your clients on the Proposal Pages
- When a client opens a proposal: the date and time it was first opened and the number of times it was opened.
- When a client accepts: the full name they type, their email or phone number, their drawn signature, the consent text they agreed to and its version, the date and time (UTC), their IP address, their browser's "user agent" (a technical description of the browser and device), and the document's SHA-256 hash (a digital fingerprint that shows whether the document was changed).
- When a client declines: the optional reason they give.
2.5 What we do not collect
- We do not access your phone's contacts, your precise location, or health data.
- Before photos leave your iPhone, the App resizes them and removes location information stored in the photo (GPS "EXIF" data).
- We do not use face recognition or voice recognition to identify anyone, and we do not create biometric identifiers (such as face or voice prints) from photos, voice notes, or signatures.
- We do not collect payment card information. Apple handles all subscription payments.
3. How we use information
We use information to:
- Provide the Service: create your account, save your work, draft the job scope with AI, calculate estimates from your price book, create PDFs, host Proposal Pages, collect electronic signatures, create invoices, and send reminders and notifications.
- Send messages: proposals, signed copies, and invoices that you choose to send to your clients; and service messages to you, such as login codes and notices when a client opens, accepts, or declines a proposal.
- Manage your subscription: check your free trial, plan, and usage limits.
- Help you: answer support requests.
- Keep the Service safe: prevent fraud, abuse, and security incidents, limit excessive requests, and enforce our Terms.
- Improve the Service: understand which features are used and fix errors, using usage events and crash reports.
- Follow the law: comply with legal obligations and respond to lawful requests.
What we do not do:
- We do not use your information or your clients' information for advertising.
- We do not use your photos, voice notes, transcripts, or client information to train AI models, ours or anyone else's.
- If we ever want to use information we already have in a materially different way (for example, to train AI), we will ask for your permission first.
4. AI processing
When it happens. When you tap "Calculate with AI" (and when you answer the AI's follow-up questions), and when you prepare a proposal, where AI drafts the introduction and section descriptions.
What we send.
- To draft the scope: the photos of that estimate (our servers read them from private storage and send them directly in the request), the text of your voice note (not the audio), your measurements, the job type (interior/exterior), and a few settings from your price book (for example, default number of coats and who supplies the paint).
- To draft the proposal text: your client's name, your company name, the language, and the section names and quantities of the estimate. Prices are not sent.
Who receives it. Anthropic, PBC, through its Claude API. Only our servers talk to Anthropic. The App never sends your data to Anthropic directly.
What Anthropic does with it. Under Anthropic's Commercial Terms of Service, Anthropic "may not train models on Customer Content from Services." Under Anthropic's commercial data retention policy, Anthropic automatically deletes API inputs and outputs within 30 days, except that it may keep them longer (for example, up to 2 years) if they are flagged for a violation of its Usage Policy, or when required by law. See Anthropic's Commercial Terms and data retention policy. We will update this policy if these commitments change.
Your permission. The App asks for your permission before it sends information to our AI provider for the first time. You can withdraw your permission at any time in the App (Settings → Privacy) or by contacting us at privacy@quetzalquote.com. Without it, you cannot use the AI features.
AI output is a draft. AI can make mistakes. For example, it can miss a room, misjudge a size, or misread a photo. You must review and correct the scope, quantities, and proposal text before you send anything. AI never sets prices: the App calculates prices with fixed rules from your own price book, and you can edit every line.
Tip: avoid taking photos of people, documents, or other personal items that are not needed for the estimate.
5. Photos and voice notes
Photos.
- The App resizes each photo and removes location data on your iPhone. Then it uploads the photo to private storage.
- Photos are never public. In the App, you see them through temporary links that expire after 1 hour. To send photos to the AI, our servers read them from private storage and include them in the request. To show them on a Proposal Page, our servers create links that expire after 10 minutes.
- Your client only sees the photos you mark "Include in proposal." Those photos also appear in the proposal PDF.
- Anyone who has a proposal link or the PDF can see those photos. Share proposal links only with your client.
Voice notes.
- The App turns your voice note into text on your iPhone, using Apple's speech recognition. If on-device recognition is not available on your iPhone, Apple may process the audio on its servers under Apple's Privacy Policy.
- You can review and edit the transcript. We store the transcript with your estimate. Only the transcript (not the audio) is sent to the AI.
- The audio recording stays on your iPhone and is not uploaded to our servers, unless server transcription is turned on. If we turn on server transcription, the audio file is uploaded to our private storage and sent to our transcription provider, Deepgram, Inc., to convert it into text. We will tell you in the App before this applies to you.
6. Your clients' information and Proposal Pages
Your responsibility. You decide what client information to enter and what to send. You are responsible for having the right to share it with us and for giving your clients any notices required by law. Our Terms of Service explain this in more detail.
Our role. We use your clients' information only to provide the Service to you, and for security and legal purposes. We do not sell it, use it for advertising, or contact your clients for our own marketing.
Proposal links. Each proposal has a long, random link that is hard to guess. Anyone with the link can open the proposal, so share it only with your client. The Proposal Page shows only what your client needs to decide: your business details, the introduction, section totals, selected photos, tax and total, terms, validity date, and your signature. It never shows your internal line items, rates, or notes. When you send an updated version, the old link points to the new version.
Emails to your clients. Emails are sent from "[Your company] via QuetzalQuote," with your email as the reply-to address.
Requests from your clients. If one of your clients asks us about their information, we will refer them to you and help you respond.
7. Electronic signatures
How it works. On the Proposal Page, your client can accept by typing their full name, drawing their signature, giving an email or phone number, and checking a box to agree to use electronic records and signatures, as allowed by the federal E-SIGN Act and state electronic transactions laws (UETA).
What we record. The information listed in Section 2.4. We then create a signed PDF with a certificate page that shows the signer's name and contact, the date and time, the IP address, the document hash, the proposal ID, the consent text, and the signature. We email the signed PDF to you and to your client (if your client gave an email address). If your client gave only a phone number, they can download the signed PDF from the confirmation page.
Why. To keep a record of who accepted what and when, for you and your client, and for security.
Innokido is not a party to the agreement between you and your client. We provide the tool only.
How long. Signature records and signed PDFs are kept until you delete your account (see Sections 9 and 10). While your account exists, the App does not let you delete an estimate your client has accepted, to protect this evidence. When you delete your account, they are deleted too: before that, the App warns you and offers to download all your signed PDFs in one file. Your client received a copy by email when they signed (if they gave an email address) and could download it from the confirmation page. We recommend that you and your client each keep a copy of the signed PDF.
8. How we share information
We do not sell personal information. We do not share personal information for cross-context behavioral (targeted) advertising. We do not show ads, and we do not share information with data brokers. We do not "track" you as Apple defines it, so the App does not ask for tracking permission.
Service providers. We use the companies below to run the Service. They receive only the information they need to provide their services to us. They are bound by agreements that require them to protect it in a way that is equal to the protections described in this policy, and to use it only to provide services to us.
| Provider | What they do for us | Information involved |
|---|---|---|
| Supabase, Inc. | Database, private file storage, login, and server functions | All App data described in this policy |
| Anthropic, PBC | AI that drafts the job scope and proposal text | Photos, transcripts, measurements, job type, some price book settings, client name, company name |
| Resend | Sending and receiving emails | Email addresses, names, email content and attachments (proposals, signed PDFs, invoices, login codes, support messages) |
| Cloudflare, Inc. | Hosting the Proposal Pages and network security | IP address and technical request data |
| Expo (650 Industries, Inc.) and Apple | Push notifications and app updates | Push token and notification text (for example, your client's name and the proposal total); a random app-installation ID, app version and update information, and IP address when the app checks for updates |
| RevenueCat, Inc. and Apple | Subscriptions and purchases | Your account ID and purchase information |
| PostHog, Inc. | Product analytics | Your account ID, usage events, device and app information |
| Functional Software, Inc. (Sentry) | Crash and error reports | Technical error data, device and app information, and your account ID |
| Deepgram, Inc. | Server transcription of voice notes, only if turned on (see Section 5) | Voice-note audio |
| Apple Inc. | Sign in with Apple, App Store, speech recognition when it is not on-device | As described in Apple's own policies |
Your clients. We share information with your clients when you send them a proposal, invoice, or signed copy.
Legal reasons. We may share information if we believe in good faith that it is required by law, a subpoena, or a court order, or needed to protect the rights, property, or safety of our users, the public, or Innokido.
Business changes. If Innokido is involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that deal. The new owner will have to keep protecting it as described in this policy.
With your permission. In other cases, only if you ask us to or agree to it.
De-identified or aggregated information. We may share statistics that do not identify you or your clients.
9. How long we keep information
We keep information only as long as we need it for the purposes in this policy, unless the law requires us to keep it longer.
| Information | How long we keep it |
|---|---|
| Account and business profile, price book, logo, your signature | Until you delete your account |
| Clients, estimates, photos, transcripts, uploaded audio (if any), AI questions and answers, proposals, PDFs, invoices | Until you delete them in the App or delete your account |
| Proposal views, acceptance and decline records, client signatures, signed PDFs | Until you delete the related estimate or your account (an accepted estimate can only be deleted together with your account) |
| Support messages in the App | Until you delete your account |
| Copies of support conversations in our support email inbox | Up to 24 months |
| AI usage records (no content) | Until you delete your account |
| Push tokens | Until you sign out on that device, the token stops working, or you delete your account |
| Subscription transaction records received from Apple through RevenueCat | Up to 7 years, for accounting, tax, fraud prevention, and legal purposes |
| Analytics events | Until you delete your account (we then ask our analytics provider to delete your profile and its events); otherwise up to 7 years, our analytics provider's retention period |
| Crash and error reports | Up to 90 days |
| Database backups | Up to 30 days, then automatically overwritten. Files (photos, PDFs, signatures) are not included in database backups. |
| Data sent to Anthropic | Deleted by Anthropic within 30 days by default (see Section 4) |
10. Deleting your account
How. In the App, go to Settings → Delete account and type the confirmation word. If you cannot access the App, email us at privacy@quetzalquote.com from your account email.
What is deleted right away. All your files (photos, uploaded audio, logo, signature, proposal and invoice PDFs, signed PDFs, and your clients' signature images) and all your data (profile, price book, clients, estimates including accepted ones, proposals, signature records, invoices, support messages, push tokens, AI usage records, and subscription status). Your proposal links stop working. We also ask our analytics provider to delete the analytics profile linked to your account.
What may remain, and why.
- Copies others already have. Your clients keep the emails and PDFs you already sent them.
- Backups. Database backups for up to 30 days, until they are overwritten.
- Subscription records. Limited transaction records (for example, product, dates, and a pseudonymous account ID) for up to 7 years, for accounting, tax, fraud prevention, and legal purposes. Apple and RevenueCat also keep their own purchase records under their own policies.
- Other copies held for a limited time. A record that an account was deleted (with no content); aggregated statistics that do not identify you; support emails as described in Section 9; information held by Anthropic until it deletes it (see Section 4); and service provider logs, until they expire.
- Legal holds. Information we must keep because of a legal obligation or dispute.
Before you delete: the App tells you how many signed proposals you have and offers to download all the signed PDFs in one file. Download them, and any other PDFs you want to keep: after deletion, we cannot recover your data. Your clients keep the copies they already received.
Your subscription is not canceled when you delete your account. Cancel it in your Apple account settings (see our Terms of Service).
11. Security
We use reasonable administrative, technical, and physical safeguards to protect information. For example:
- data travels encrypted (HTTPS/TLS);
- files are kept in private storage and shared only through links that expire;
- database rules let each account see only its own data;
- secret keys stay on our servers, never in the App; and
- Proposal Pages show only the information your client needs and limit repeated requests.
No system is 100% secure, and we cannot guarantee security. Protect your devices and your email account. If a security incident affects your information, we will notify you as the law requires.
12. Where we process information
Innokido is based in the United States, and the Service is intended for use in the United States. We store and process information in the United States. Some of our service providers may process information in other countries, under the protections described in Section 8.
13. Your choices
- Device permissions. You can turn camera, photos, microphone, speech recognition, and notification permissions on or off in your iPhone's Settings. Some features will not work without them.
- AI. You can withdraw your permission to use AI (see Section 4).
- Analytics. You can turn off product analytics in the App (Settings → Privacy → “Share usage data”); from then on, neither the App nor our servers send your usage events. You can also ask us by emailing privacy@quetzalquote.com.
- See and correct. You can see and edit most of your information in the App. You can also ask us for a copy.
- Delete. You can delete items in the App or delete your whole account (see Section 10).
- Emails. We send service emails that are needed to use the Service (for example, login codes and proposal notices). We do not currently send marketing emails. If we do in the future, each one will include a way to unsubscribe.
14. Your privacy rights in the United States
Your rights. Depending on the state where you live (for example, California, Texas, Virginia, Colorado, Connecticut, and other states with privacy laws), you may have the right to:
- know and access the personal information we have about you, and get a copy in a portable format;
- correct inaccurate information;
- delete your information;
- opt out of the sale of personal information, targeted advertising, and certain profiling (we do not do any of these);
- limit the use of sensitive personal information (we do not use sensitive personal information to infer characteristics about you); and
- not be discriminated against for using your rights.
Whether or not a specific state law applies to us, we will respond to these requests from any person in the United States.
How to make a request. Use either of these methods:
- Email privacy@quetzalquote.com with the subject "Privacy request"; or
- Send us a message through Support in the App.
We will verify your identity, usually by confirming that you control the email address of your account. You can use an authorized agent. We may ask the agent for proof of your permission and ask you to confirm your identity. We will respond within 45 days. If we need more time (up to 45 more days), we will tell you why.
Appeals. If we deny your request, you can appeal by replying to our answer with the word "Appeal." We will answer your appeal within 60 days. If you disagree with our answer, you can contact your state attorney general.
If you are a contractor's client. We process your information for the contractor who sent you the proposal. Please contact that contractor first. If you contact us, we will forward your request to the contractor and help them respond.
Additional information for California residents.
- Categories of personal information we collect: identifiers (such as name, email, phone, account ID, IP address, push token); customer records (such as name, address, phone, signature); commercial information (such as subscription purchases); internet or other electronic network activity (such as usage events and logs); audio and visual information (such as job photos, voice recordings when uploaded, and drawn signatures); and professional information (such as your company name and business details).
- Sources: you, your devices, your clients (on the Proposal Pages), and Apple and RevenueCat.
- Purposes: the purposes in Section 3.
- Disclosures: we disclose each of these categories for business purposes to the service providers listed in Section 8. In the past 12 months, we have not sold or shared (for targeted advertising) personal information, including that of people under 16.
- Sensitive personal information: we do not use or disclose sensitive personal information for purposes other than those allowed by law.
- Retention: see Section 9.
- "Shine the Light": we do not disclose personal information to third parties for their own direct marketing.
Do Not Track and Global Privacy Control. We do not track users across other companies' websites or apps, and our Proposal Pages do not use advertising or cross-site tracking tools. Because we do not sell or share personal information for targeted advertising, there is nothing to opt out of. If your browser sends a Global Privacy Control signal, we will treat it as a request to opt out of sale and sharing.
15. Children
The Service is for adults 18 and older using it for their business. It is not directed to children, and we do not knowingly collect personal information from children under 13. If we learn that we have collected personal information from a child under 13, we will delete it. If you think this has happened, email privacy@quetzalquote.com.
16. Changes to this policy
We may update this policy. We will post the new version with a new "Last updated" date. If we make a material change, we will tell you in the App or by email before it takes effect. We will not use information we already collected in a materially different way without your permission.
17. Contact us
Innokido LLC
1209 Mountain Road PL NE, Ste N, Albuquerque, NM 87110, USA
Privacy questions: privacy@quetzalquote.com
General questions: support@quetzalquote.com
Or use Support in the App.