Privacy policy
Privacy policy
Effective date: 6 October 2026
This policy explains how RegenBlau OG (“we”) handles personal data when you use Quitt, the app at app.quittapp.com, and the site at quittapp.com. We do not sell personal data.
1. Who is responsible
RegenBlau OG
Schnirchgasse 9/2608, 1030 Wien, Austria
Email: office@regenblau.at
Phone: +43 (0)650 3750516
2. What we process
Account. If you sign in, we store your email address. There is no password. We email you a one-time code (and a sign-in link) through our auth provider.
Guest use. Someone can join a group from an invite without an email. We then store a display name, an anonymous account id on that phone, and what they do in the group. If they later add an email, that address is stored too.
The group and the bill. Group name, members, who paid, line items, who claimed which item, balances, and invite links. Display names are visible to the other people in that group.
Receipt photos. When you scan a receipt, the photo is sent to a model so the items can be read, and the photo is then stored with that bill so the group can open “Original bill” later. The photo can show whatever was on the paper, including a merchant name and, if it was in the frame, payment details. Do not photograph a card number if you can avoid it.
Purchases. If you buy a scan pack, Stripe processes the payment and collects the billing address in order to add VAT. We receive the fact of the payment, the pack, the group it was for, the email Stripe has for the receipt, and the time you agreed that the scans are supplied immediately and that you lose your right of withdrawal. We do not receive or store your card number.
Technical data. Our hosts keep short-lived access logs (such as IP address, time, and the page requested) to deliver the site and to investigate abuse. The app does not run an advertising pixel.
3. Why we process it, and the legal basis
Purpose | Legal basis |
|---|---|
Creating your sign-in, running the group, storing the bill, reading a receipt you asked us to scan, and delivering a scan pack you bought | Contract, Art. 6 (1) (b) GDPR |
Keeping invoices and tax records for a purchase | Legal obligation, Art. 6 (1) (c) GDPR |
Security logs, rate limits, and stopping abuse of invites or scans | Legitimate interest in a stable and safe service, Art. 6 (1) (f) GDPR |
You can object to processing that is based on legitimate interest. We will stop unless we have a compelling reason to continue, or we need the data for a legal claim.
4. Who else receives data
We use these processors to run Quitt:
Supabase hosts the database and sign-in. The Quitt database is in the EU (AWS region eu-west-1, Ireland).
PowerSync syncs the group to the phones in it.
Vercel hosts the app. If a receipt is read through Vercel’s AI Gateway, the photo passes through that service to the model.
The receipt model (currently Google Gemini, or OpenAI if that is the configured fallback) receives the photo for the single purpose of extracting the line items. We do not use your photos to train a model of our own.
Stripe takes payment for scan packs and sends the receipt email.
Framer hosts the marketing site at quittapp.com. Framer may process technical access data and can use subprocessors outside the EU. Framer relies on Standard Contractual Clauses for those transfers.
People you invite can see the group, the bills, and a receipt photo stored on a bill. That is the product, not a side disclosure.
Where a provider processes data outside the EU, we rely on an adequacy decision or Standard Contractual Clauses.
5. How long we keep it
The bill, its items, and its receipt photo stay until someone in the group deletes that bill, or until we delete the account that holds them.
A scan pack purchase is kept for as long as Austrian tax and accounting rules require (generally 7 years).
Security logs on the marketing site follow the host’s usual short retention. We do not build a separate marketing profile of you.
Guest data stays with the group. If a guest never adds an email, the practical way to delete it is to email us and tell us the group and the display name.
Backups can hold a deleted record until the backup is overwritten. A restore will not put a deleted account back on purpose.
6. Deleting your data
Email office@regenblau.at from the address you used to sign in and ask us to delete the account. We will delete the sign-in, the profile, and the bills that account created, unless we must keep a purchase record for tax. There is no delete button in the app yet.
7. Your rights
You can ask us for access, correction, deletion, restriction, and a copy of your data, and you can object to legitimate-interest processing. You can also complain to the Austrian data protection authority:
Österreichische Datenschutzbehörde
Barichgasse 40–42, 1030 Wien
dsb@dsb.gv.at
8. The marketing site
quittapp.com is a Framer site. It links to the app. Opening an external profile such as Instagram leaves our site, and that platform’s policy applies from there. If we later turn on analytics or a marketing pixel, we will ask for consent first and update this policy.
9. Changes
If this policy changes in a way that matters, we will update the date at the top and, for a signed-in user, the next time they open the app.
