Privacy Policy

1Who we are

Quardo is an iPhone app operated by Opsaflow, 60 rue François Ier, 75008 Paris, France. If you have any question about your data, email support@quardo.app.

2What we collect, and what we don't

When you run a check, our server receives and stores:

• The text read from your quote: the line items, prices, hours, the shop name if printed, and any work description on the document, kept as written.
• The details you enter: car make, model and year, country and region, shop type, and mileage.
• The result we produced: the per-line verdict, the summary, and the suggested questions.
• An anonymous device id and timestamps (see section 5).

Because the text is copied from the quote as written, it can include personal details if they are printed on the document, such as a name, address, or licence plate. You can crop those out before sending (section 3). We do not ask for them and we do not use them.

We do not collect:

• No account, login, password, or email address.
• No real name. The optional greeting name in Settings stays on your phone and never reaches us.
• No location. Country and region are things you type, not your GPS.
• No contacts, calendar, microphone, or advertising identifiers.
• No analytics, advertising, or tracking SDKs. We do not profile you or sell data.

3Your quote photos

Photos are handled with care because they are the most sensitive part:

• They are never stored, not on your phone after the check, and not on our server. No file, no copy, no URL.
• They exist only in memory for the few seconds a check takes, then they are discarded.
• To read them, the photo is sent to an AI provider (section 4). It is not kept there for us.
• The app can crop the photo on your phone before it is sent, so anything you crop out (a name, an address, a plate) never leaves your device.

4The AI that reads your quote, and who else is involved

Quardo's rule is that the AI only reads and rephrases; a database decides what is fair. To do the reading, we rely on a few providers:

• AI reading (OpenAI): we send the quote photo (so the text on it can be read) and, later, the finished verdict figures (so the plain-language summary can be written). Matching the lines to known repairs happens in our own database, on our own server — it is not part of what the provider sees. In some configurations an alternative provider (Anthropic) may perform the same reading step.
• Reference look-ups: when our database is missing a typical price or labour time, we ask a web-search tool a short question built only from the repair name and the car's year, make and model. Your photo, the shop name, and your device id are not sent to this search.
• Hosting: our server and database run on cloud infrastructure in the European Union (Germany). The database is managed by Rivestack.

The AI providers process data on their own systems, which may be outside the EU. These transfers rely on the European Commission's Standard Contractual Clauses. We do not permit them to use your quote to train their models beyond what their standard API terms allow, and we ask you not to submit documents containing more personal information than the repair details require.

5Your device id, and no account

Instead of an account, each app install has an anonymous device id (a random identifier from your device). We use it to cap how many checks a device can run per day, and it is stored alongside each check on our server. That means checks made from the same device are linked together, and it is how we can find your records if you ask us to delete them. It is not tied to your name or any real-world identity, and we do not use it to track you across other apps or the web. The identifier is kept in your device's secure Keychain, so it survives deleting and reinstalling the app — that is how the one free check per device is enforced. The app may also use Apple's App Attest and DeviceCheck services to confirm that requests come from a genuine copy of Quardo and to remember that the free check was used; these Apple services do not give us any personal information about you.

6What stays on your phone

Some things never leave your device at all:

• Your history of past checks (the text result only, never the photo).
• The optional greeting name, the last car and region you used, and whether you have completed onboarding.

You can delete any past check by swiping it away in the app, which removes it from your phone.

7How long we keep it

Photos are kept only in memory during a single check and are never retained. Check records and the anonymous price data on our server are currently kept until removed on request; check records are automatically deleted after at most 90 days. You can ask us to delete the records linked to your device id at any time by emailing support@quardo.app.

8Anonymous price data

To keep improving how we judge quotes, each priced line from a completed check is added to an anonymous price table: the repair, the region, the shop type, and the amount. This table is not linked to your device id or to any single check, and it never contains photos or the free text from your quote. It is aggregate market data, not a record about you.

9Your choices and rights

Depending on where you live, you may have rights to access, correct, or delete your data, or to object to its use (for example under the EU GDPR or California's CCPA). Because we hold so little and it is tied only to an anonymous device id, the simplest ways to exercise them are:

• Delete your on-device history in the app.
• Email support@quardo.app to ask what is stored for your device id, or to have it deleted.

Our lawful basis is the performance of the check you ask for and our legitimate interest in providing and improving Quardo. As we are established in the European Union (France), we are not required to appoint an EU representative, and the small scale of our processing does not require a Data Protection Officer. Wherever you live, including US states with privacy laws such as California, you can exercise these rights by emailing support@quardo.app.

10Payments

Payments are handled entirely by the Apple App Store under Apple's terms. Apple, not Quardo, receives your payment details, and we never see or store card information. Our server receives only a confirmation that a purchase or subscription is active, linked to your anonymous device id, so your access keeps working across reinstalls.

11Security

Data travels between the app and our server over an encrypted HTTPS connection. Photos are only ever transmitted, never written to disk. No system is perfectly secure, but we keep the amount of data we hold deliberately small to limit any risk.

12Children

Quardo is a tool for car owners and is not directed at children. We do not knowingly collect data from anyone under 16.

13Changes to this policy

If we change how we handle data, we will update this page and its "last updated" date. Significant changes will be highlighted in the app.

14Contact

Questions, requests, or concerns: support@quardo.app.