Quill
Privacy Policy
Last updated: 22 October 2026
Quill is a desktop application that runs on your own computer. Your financial data (bank statements, transactions, categories, notes) is stored on your device, not on our servers. We do not operate a server that stores your financial information, and we cannot see it. Without the optional AI features, no financial data leaves your computer. With them, only the AI provider you choose receives what it needs to answer you.
1. Who we are
Quill is published by Visioneers Studio ("we", "us"). If you have any privacy question or request, contact support@quillfinance.app.
2. What stays on your device
Everything that matters. When you import a PDF statement, Quill reads it on your computer and stores the results in a SQLite database file on your own drive. The following data is processed and stored on your machine and is never transmitted to us:
- Bank and credit-card statement PDFs you import
- Parsed transactions, balances, amounts, dates and descriptions
- Your category overrides, notes, rules, and Personal / Business assignments
- Receipts you attach, which are read on your computer (Apple Vision on Mac, Windows OCR on Windows)
- Reports you generate (P&L, debt planner, subscriptions, QuickBooks .QBO exports)
- Passwords for each person on the computer, stored only as scrypt hashes
The only way any of this data leaves your computer is the optional AI features in section 3(f), which send it to the AI provider you choose, never to us. Quill does not encrypt its own database file; it relies on your computer's disk encryption (FileVault on Mac, BitLocker on Windows), and Settings shows whether that is turned on.
3. Every network connection Quill makes
Quill reads and stores your statements without an internet connection. It does connect to the internet in the situations below. Only the optional AI features in (f) ever carry your financial data.
(a) License activation & validation (Polar)
When you enter a license key, Quill contacts our payment processor, Polar, to activate it. After that, Quill checks the key with Polar again when it starts, at most about once a day. These requests send:
- Your license key
- A device label / identifier and your computer's hostname (so a license can be tied to a device and deactivated later)
No financial data, statements, or transactions are included in license requests. Polar acts as our payment processor and sub-processor for licensing.
(b) Your device list
When you view or manage the devices on your license in Settings, or when an activation needs to check your device limit, Quill sends your license key to our website (quillfinance.app), which asks Polar for the devices on that key. Nothing else is sent.
(c) Update checks (GitHub)
Each time Quill starts, and whenever you choose Check for Updates, it asks GitHub (where our releases are hosted) whether a newer version exists. An update downloads only when you press the button to get it. GitHub receives ordinary request details such as your IP address. No personal or financial data is sent.
(d) Emailed codes (only if you use passwords with an email address)
If you add an email address to a person in Quill, or reset a forgotten password, Quill sends that email address, the person's name and a one-time 6-digit code to our website, which emails the code to you through Resend. No financial data is included.
(e) Connecting a Claude or ChatGPT subscription (one-time downloads)
If you connect your Claude subscription and Claude's program is not yet on your computer, Quill downloads Anthropic's installer from claude.ai. If you connect your ChatGPT subscription and no ChatGPT or Codex desktop app is installed, Quill downloads OpenAI's Codex program once from the npm registry and checks it before use. You sign in on Anthropic's or OpenAI's own page; Quill never sees your password.
(f) Optional AI features
Quill's core features (reading statements, categorization, the debt planner, P&L, subscription tracking and QuickBooks export) work without any AI. The AI assistant and the AI buttons are optional. Every AI option is a cloud service: your Claude subscription, your ChatGPT subscription, or your own Anthropic, OpenAI or Google API key.
Quill sends nothing to an AI until you ask the assistant something or press an AI button. Then it sends the following to the AI provider you chose, directly from your computer and never through us:
- When you ask the assistant something: your question, a summary of your finances (totals, trends, top categories and merchants, largest charges, subscriptions, debts with balances and rates) and any charges it looks up to answer you
- When you ask AI to read a statement (or turn on "Read tricky statements during sync", which is off until you switch it on): the text of that statement
- When you ask AI to sort uncategorized charges: the charges it is asked about
Your PDF files themselves and your receipts are never sent to an AI. What is sent is handled under that provider's privacy policy and terms, using your own account. If you never use the AI features, none of this data is sent anywhere.
(g) The website
Visiting quillfinance.app involves ordinary web hosting requests (HTML, images) to our host, Netlify, and font requests to Google Fonts. To offer the right download, the page asks GitHub which installers the latest release has. The site has no analytics and no tracking scripts. We do not set advertising cookies and do not build a profile of you. Checkout and download links take you to Polar (payments) and GitHub (release downloads), each governed by its own privacy policy. After a purchase, the page you land on asks Polar, through our website, for your license key so it can show it to you. If you sign up for the newsletter, your email address goes to Beehiiv (our mailing list) and Resend (which sends the welcome email).
4. Sub-processors
| Provider | Purpose | What it receives |
|---|---|---|
| Polar | Payment processing & license activation/validation | Payment details you enter at checkout; license key, device label and hostname during activation and the daily check |
| Netlify | Hosting the website and the small functions behind it (device list, license lookup after purchase, emailed codes, newsletter sign-up) | Standard request metadata (IP, user agent); your license key for the device list and license lookup; email address, name and code for emailed codes |
| GitHub | Hosting the app installers and the app's update checks | Standard download request metadata (IP, user agent) |
| Resend | Sending emailed codes and the newsletter welcome email | Your email address, name (codes only) and the code |
| Beehiiv | Newsletter list, only if you sign up | Your email address |
| Google Fonts | Website fonts | Standard request metadata (IP, user agent) |
| AI provider you choose (optional) | The AI assistant and the AI buttons, only when you use them | What you ask and what it needs to answer, as listed in section 3(f), using your own subscription or API key |
5. Analytics
There is no website analytics and no in-app telemetry. We previously evaluated analytics but have removed it. We do not collect usage statistics, event tracking, or behavioural data from the app or the site. If Quill hits a problem, it writes a report to a folder on your computer; it is only sent to us if you email it yourself.
6. Your rights, data access and deletion
Because your financial data lives on your device, you are in full control of it. To delete it, remove the app's data folder or uninstall Quill. For data we do hold as a result of a purchase (handled through Polar, such as your email and license record), or a newsletter sign-up, you may request access, correction, or deletion (a DSAR) by emailing support@quillfinance.app. We will respond within the timeframe required by applicable law.
7. Children
Quill is not directed to children and is not intended for use by anyone under 16.
8. Changes to this policy
If we change how Quill handles data, we will update this page and the "last updated" date above. Material changes will be reflected in the app or on the website.
9. Contact
Questions or privacy requests: support@quillfinance.app.