The short version
Quotely operates without user accounts, analytics trackers, advertising, or external company servers. Your saved quotes, studio drafts, exported images, and app settings remain on your phone.
The only exception is completely optional: if you choose to enter your personal Gemini or OpenRouter API key to generate quote drafts with AI, the prompt text you send travels directly over HTTPS to that provider. If you never configure an API key, the app never transmits data anywhere.
1. What the app stores, and where
All information created within Quotely is kept on your device. Zeno Canvas runs no application servers and maintains no cloud database for this app.
| Data | Where | Purpose |
|---|---|---|
| Quotes you type, save, or mark as favourites | App-private database (Room) | Maintains your quote library |
| Designs in progress (drafts) | App-private database (Room) | Allows leaving the Studio and resuming your layout later |
| Export history and styling settings | App-private database (Room) | Lets you reopen a past export to re-edit styling |
| Exported image files | Device gallery (Pictures/Quotely) |
Standalone PNG images you own and share |
| AI prompt history | App-private database (Room) | Displays your previous prompt requests in the AI pane (only if you use AI Compose) |
| App preferences and brand kit text | App-private preferences (DataStore) | Stores interface preferences and your custom brand text |
| Custom brand logo (if added) | App-private files directory | Drawn onto exported images when your brand kit is enabled |
| Gemini or OpenRouter API keys (if provided) | EncryptedSharedPreferences (Android Keystore) | Authenticates your AI composition requests directly with the selected provider |
Photos you select for custom canvas backgrounds are accessed strictly through Android's system photo picker. This grants Quotely temporary read access to that individual file without scanning your photo library.
The clipboard is only accessed upon direct user action: tapping Paste on an API key field reads the clipboard once to populate that input, while tapping Copy on an AI quote writes that specific quote text to the clipboard. Quotely never reads the clipboard in the background.
Android cloud backup is turned off (allowBackup="false"), preventing app-private files from copying to Google cloud backups.
2. What the app does not do
- Does not require account sign-ups, profile setups, or logins.
- Does not include analytics, telemetry, or crash reporting software development kits.
- Does not contain advertising SDKs, banner placements, or advertising identifiers.
- Does not process digital transactions, billing, or in-app purchases.
- Does not access contacts, device location, camera, microphone, or broader device files.
- Does not embed personal metadata in exports: output PNG files contain raw pixel and color data without EXIF tags, GPS coordinates, or device markers.
- Does not force third-party watermarks onto your work. Quotely never stamps its own brand on your export.
- Does not log API keys. Release builds disable cleartext network traffic and HTTP interception.
3. Permissions
| Permission | Purpose | Scope & Behavior |
|---|---|---|
INTERNET |
Sends user-directed prompt requests to Google Gemini or OpenRouter. | Active only when an API key is configured. If no key is entered, no network requests are made. |
ACCESS_NETWORK_STATE |
Checks active network availability before sending an AI request. | Lets the app notify you if you are offline rather than waiting for request timeouts. Cannot read packet content. |
WRITE_EXTERNAL_STORAGE |
Saves rendered PNG images to Pictures/Quotely on older Android releases. |
Requested only on Android 8.0 through Android 9 (API levels 26 to 28). Android 10 and newer rely on scoped storage and do not require this grant. |
com.zenocanvas.quotely.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION |
Internal broadcast security. | Signature-level permission injected by AndroidX to keep internal component broadcasts private from other apps. Never requested from or visible to users. |
4. Third-party services
Quotely establishes external network connections solely when you activate the optional AI feature using your own credentials.
| Service | When Contacted | Data Sent | Provider Terms |
|---|---|---|---|
| Google Gemini API generativelanguage.googleapis.com |
When generating quotes with Gemini selected as your primary or fallback provider. | The topic you typed, count, language preference, reference text if requesting similar quotes, and your personal API key. | Google Privacy Policy & Gemini API Terms |
| OpenRouter openrouter.ai |
When generating quotes with OpenRouter selected as your primary or fallback provider. | The topic you entered, count, language preference, reference text if requesting similar quotes, and your personal API key. | OpenRouter Privacy Policy |
Prompt text is transmitted directly to the configured provider over encrypted HTTPS. Avoid submitting sensitive or personal information into the prompt field. Data retention and processing by third-party providers are governed by their respective privacy terms and your individual developer account agreements.
Typography assets (DM Serif Display, Jost, Archivo, and Space Mono) are bundled directly inside the application installation. Version 1.0.0 makes no network requests to download external fonts.
5. Actions leaving the app on user request
- Sharing exports: Tapping Share passes your rendered PNG file to Android's system share sheet. You choose which recipient or third-party application receives it.
- Reporting AI output: Tapping Report on an AI-generated quote opens your email client with a pre-filled draft addressed to
info@zenocanvas.online. It contains the quote text and model identifier. The message is transmitted only when you send the email. - Support and diagnostic logs: Contacting support or tapping Export crash log triggers an email or share sheet. Diagnostic output consists of six general technical metrics: app version, Android version, hardware model, last render time, last export size, and renderer self-check status. It contains no quotes or user content.
- External links: Tapping links for developer documentation, open-source licences, or Google Play opens those pages in your default browser.
6. Children
Quotely is not directed at children under the age of 13. The application does not intentionally gather or process personal information from children or any other user demographic.
7. Managing and deleting your data
You maintain full direct control over information stored locally:
- Clear API keys: Open Settings → Privacy & security → Clear API keys to delete stored keys from secure hardware storage.
- Clear AI history: Open Settings → Privacy & security → Clear AI history to wipe previous generation prompt records.
- Full reset: Open Settings → Privacy & security → Clear everything to wipe all preferences, brand kit details, keys, and history, returning Quotely to its initial install state.
- Delete exports: Open Settings → Library & storage → Delete all exports to remove all exported images created on the device.
- Uninstalling Quotely: Removing the app from your device immediately purges all application-private database files and preferences. Exported PNG files stored in
Pictures/Quotelyremain in your gallery until deleted manually.
Because Zeno Canvas maintains no central database or accounts, there is no server-side copy to remove. Inquiries regarding data processed by Gemini or OpenRouter can be managed directly through your personal account consoles with those services.
8. Changes to this policy
If updates to Quotely introduce new features that affect data storage or transmission, this policy will be revised at this address with an updated revision date prior to public distribution.
9. Contact
For questions regarding this privacy policy or application practices:
Zeno Canvas
Dhaka, Bangladesh
Email: info@zenocanvas.online
Last updated: 5 October 2026