The short version
Your quote photos are read in memory and never stored, on your phone or on our server. To read them, we send them to an AI provider that turns the picture into text, then the picture is discarded.
What we do save on our server is the text we read from the quote, the details you entered (car, region, shop type, mileage), the result, and an anonymous device id. There is no account, no email, no name, and no tracking. Your history of past checks lives on your phone.
1Who we are
Quardo is an iPhone app operated by OpsaFlow (full legal entity, address, and registration to confirm). If you have any question about your data, email support@quardo.app.
2What we collect, and what we don't
When you run a check, our server receives and stores:
- The text read from your quote: the line items, prices, hours, the shop name if printed, and any work description on the document, kept as written.
- The details you enter: car make, model and year, country and region, shop type, and mileage.
- The result we produced: the per-line verdict, the summary, and the suggested questions.
- An anonymous device id and timestamps (see section 5).
Because the text is copied from the quote as written, it can include personal details if they are printed on the document, such as a name, address, or licence plate. You can crop those out before sending (section 3). We do not ask for them and we do not use them.
We do not collect:
- No account, login, password, or email address.
- No real name. The optional greeting name in Settings stays on your phone and never reaches us.
- No location. Country and region are things you type, not your GPS.
- No contacts, calendar, microphone, or advertising identifiers.
- No analytics, advertising, or tracking SDKs. We do not profile you or sell data.
3Your quote photos
Photos are handled with care because they are the most sensitive part:
- They are never stored, not on your phone after the check, and not on our server. No file, no copy, no URL.
- They exist only in memory for the few seconds a check takes, then they are discarded.
- To read them, the photo is sent to an AI provider (section 4). It is not kept there for us.
- The app can crop the photo on your phone before it is sent, so anything you crop out (a name, an address, a plate) never leaves your device.
4The AI that reads your quote, and who else is involved
Quardo's rule is that the AI only reads and rephrases; a database decides what is fair. To do the reading, we rely on a few providers:
- AI reading (OpenAI): we send the quote photo, the individual text lines read from it (to match them to known repairs), and the finished verdict figures (to write the plain-language summary). The provider reads and structures the text and returns it to us. In some configurations an alternative provider (Anthropic) may perform the same reading step.
- Reference look-ups: when our database is missing a typical price or labour time, we ask a web-search tool a short question built only from the repair name and the car's year, make and model. Your photo, the shop name, and your device id are not sent to this search.
- Hosting: our server and database run on cloud infrastructure in the European Union (Germany). Exact hosting and database provider to confirm.
The AI providers process data on their own systems, which may be outside the EU. Transfer safeguards (for example Standard Contractual Clauses) to confirm before launch. We do not permit them to use your quote to train their models beyond what their standard API terms allow, and we ask you not to submit documents containing more personal information than the repair details require.
5Your device id, and no account
Instead of an account, each app install has an anonymous device id (a random identifier from your device). We use it to cap how many checks a device can run per day, and it is stored alongside each check on our server. That means checks made from the same device are linked together, and it is how we can find your records if you ask us to delete them. It is not tied to your name or any real-world identity, and we do not use it to track you across other apps or the web.
6What stays on your phone
Some things never leave your device at all:
- Your history of past checks (the text result only, never the photo).
- The optional greeting name, the last car and region you used, and whether you have completed onboarding.
You can delete any past check by swiping it away in the app, which removes it from your phone.
7How long we keep it
Photos are kept only in memory during a single check and are never retained. Check records and the anonymous price data on our server are currently kept until removed on request; a fixed retention period is to be set. You can ask us to delete the records linked to your device id at any time by emailing support@quardo.app.
8Anonymous price data
To keep improving how we judge quotes, each priced line from a completed check is added to an anonymous price table: the repair, the region, the shop type, and the amount. This table is not linked to your device id or to any single check, and it never contains photos or the free text from your quote. It is aggregate market data, not a record about you.
9Your choices and rights
Depending on where you live, you may have rights to access, correct, or delete your data, or to object to its use (for example under the EU GDPR or California's CCPA). Because we hold so little and it is tied only to an anonymous device id, the simplest ways to exercise them are:
- Delete your on-device history in the app.
- Email support@quardo.app to ask what is stored for your device id, or to have it deleted.
Lawful basis, EU representative, DPO, and the specific US state rights honoured to confirm.
10Payments
Quardo does not currently process any payments. If we introduce paid features, they will be handled by the Apple App Store under Apple's terms, and Apple, not Quardo, would receive your payment details. We never see or store card information.
11Security
Data travels between the app and our server over an encrypted HTTPS connection. Photos are only ever transmitted, never written to disk. No system is perfectly secure, but we keep the amount of data we hold deliberately small to limit any risk.
12Children
Quardo is a tool for car owners and is not directed at children. We do not knowingly collect data from anyone under 16.
13Changes to this policy
If we change how we handle data, we will update this page and its "last updated" date. Significant changes will be highlighted in the app.
14Contact
Questions, requests, or concerns: support@quardo.app.