QuillbookQuillbook Privacy Policy
Last updated: 7 November 2026
Quillbook is a cash book and expense tracker for businesses and their teams. This policy explains what information the app handles, why, and the choices you have. The app is provided by Quillsail ("we"). Questions: hello@quillsail.com.
Information we collect
- Your Google account basics when you sign in: your name, email address and an account ID. We never see your Google password.
- Business data you or your team enter: business and book names, cash in and cash out entries (amount, date, remark, category, payment mode, contact names, custom fields), bill photos, and team members' names, emails and roles.
- Crash reports (only if "Send crash reports" is on, which is the default): the app version, phone model, Android version and technical details of the crash. They contain no entries, amounts or photos. You can turn this off in Settings.
- App integrity checks: Google Play Integrity confirms requests come from the genuine app on a genuine device. It does not give us your personal information.
We do not collect your location, contacts list, or anything outside the app. Photos are only taken when you choose to attach a bill, and their location data is removed before upload.
Voice entry is optional. When you tap the microphone, your phone's speech service (usually Google's) turns what you say into text. Quillbook receives only that text, never the recording.
How we use it
- To run the app: store your books, sync them between your team's phones, and enforce each person's role.
- To fix bugs, using crash reports.
- To protect the service from abuse, using integrity checks.
We do not show ads, sell your data, or use it for marketing or profiling.
Who can see your data
- Your team: members of a business see what their role allows (for example, a Data Operator may be limited to their own entries). Admins of a business can see all of its books.
- Google: data is stored and processed by Google Firebase (Cloud Firestore, Authentication, Crashlytics, App Check) on our behalf. Business data is stored in Google's Mumbai (asia-south1) region.
- Quillsail: data is not end-to-end encrypted, so the people who run the service can technically reach it. We only look when you ask us to fix a problem or the law requires it.
- We disclose information only if required by law.
Security
Data is encrypted in transit (HTTPS) and at rest by Google. Server-side security rules check every read and write against the person's role, so a modified app cannot bypass them. You can also turn on App Lock (fingerprint, face or phone PIN), which also keeps the app out of screenshots and the recent-apps view. Invite links work only for the Google account they were made for.
Keeping and deleting data
Business data is kept while the business exists. Deleted books and entries can be restored for 30 days. Deleting the business permanently removes its books, entries, photos, members and invites. Only an empty placeholder stays (its ID, the owner's account ID and the date it was created) so the business can't be re-created by someone else.
- Delete your account in the app: Settings → Delete Account. Businesses you own alone are deleted with all their books; you leave other businesses, and entries you made there stay with that business, as part of its records.
- Delete a business: the Primary Admin can use Settings → Delete Business.
- Without the app: see how to request deletion.
Crash reports are kept by Google for up to 90 days.
Children
Quillbook is for businesses and is not directed at children under 13.
Changes
If this policy changes we will update the date above and, for significant changes, tell you in the app.