Quire
Quire — Privacy Policy
Last updated: 13 September 2026 Applies to: Quire for Android (app.quire.android), all versions.
The short version
Quire collects nothing about you. It has no accounts, no analytics, no advertising, no crash reporting, and no server of its own. Your books, your place in them, the passages you save and the minutes you read stay on your phone.
This is not only a promise. Quire does not hold the INTERNET permission, so Android will not let it open a network connection at all — not for telemetry, not for updates, not by accident through a library it depends on. See Why "no network" is stronger than a promise.
What Quire collects
Nothing. There is no sign-up, no login, no profile, no device identifier, no advertising ID, and no usage or diagnostic data of any kind sent anywhere.
Quire has no way to know that you exist.
What Quire stores, and where
All of it is on your device, inside Quire's own private app storage, which no other app can read:
| What | Why it is kept |
|---|---|
| A copy of each book you import (EPUB, PDF or TXT) | So a book stays readable after you move or delete the original file |
| The text extracted from each book, and its chapters | So the book can be reflowed, searched by chapter and paginated |
| A cover image, taken from the book itself | Shown in your library |
| Your place in each book | So it opens where you left it |
| Bookmarks and highlighted passages | The list under Bookmarks |
| Minutes read per day, your reading streak and daily goal | The habit screens |
| Your settings: theme, typeface, text size, justification | So the app looks the way you left it |
Two things follow from that:
- Uninstalling Quire deletes all of it. There is no copy anywhere else, and no way to recover it. Keep your original book files if they matter to you.
- None of it is backed up. Quire sets
android:allowBackup="false", so Android's automatic backup does not copy your library to Google Drive.
What Quire never does
- No account, no login, no email address collected.
- No analytics, product telemetry, or usage measurement.
- No advertising, and no advertising or tracking SDK in the app.
- No crash or error reporting sent off the device.
- No location, contacts, camera, microphone, photo library or health data — Quire does not request any of those permissions, and a test in the codebase fails the build if one ever appears.
- No sale or sharing of anything, because there is nothing to sell or share.
- No cloud sync.
Permissions Quire holds, and why
This is the complete list, taken from the manifest that is actually packaged into the release build. There are five, and none of them can move a byte off your phone.
| Permission | Why |
|---|---|
WAKE_LOCK | Keeps the CPU awake while a large book is being processed, so importing a long PDF survives the screen turning off |
FOREGROUND_SERVICE | Backs that same import work when Android runs it as expedited |
RECEIVE_BOOT_COMPLETED | Lets an interrupted import resume after a restart instead of leaving a half-imported book |
ACCESS_NETWORK_STATE | Read-only. Requested by Android's WorkManager library, which inspects it for every background job it schedules. It reveals whether a network exists; it cannot use one |
app.quire.android.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION | Generated by Android itself. It stops other apps from sending messages to Quire's internal broadcast receivers |
Quire does not hold INTERNET, and it holds no storage permission either: books arrive through Android's own file picker, which hands Quire one file you chose and nothing else.
Why "no network" is stronger than a promise
Every Android app's permission list is assembled from its own manifest and from every library it uses. Libraries can add INTERNET for their own reasons — a logging or diagnostics backend bundled several levels down, for instance — and the app's author may never notice.
Quire explicitly removes INTERNET from the merged result. An automated test (NoNetworkPermissionTest) reads the packaged manifest back on every build and fails if the permission reappears, or if any permission appears that has not been reviewed. With the permission absent, the operating system itself refuses the connection, whatever any part of the app might intend.
The two moments anything leaves your device
Both require you to tap something, and in both cases Quire hands off to an app you pick — it never sends anything itself.
1. Share. When you share a passage, a reading streak or a book, Quire builds either a piece of text or a single PNG image and passes it to Android's share chooser. You choose where it goes. The image is written to Quire's temporary cache, and the app you pick is granted permission to read that one file, for that one hand-off; the folder is emptied the next time you share. The envelope contains the passage and the book it came from, and no identifier of any kind — a test asserts exactly that.
Save writes the same image to your device's Pictures folder, in a Quire album, where it is yours like any other photo.
Copy puts the passage on your clipboard. Android may show a notification that an app copied something; that is the system, not Quire.
2. The author's site. The line at the foot of Settings opens https://gajananrathod.in in your browser. From that moment you are on that site and its privacy policy applies, not this one. Quire — having no network permission — could not send anything there even if it wanted to. It only asks Android to open a web address.
If a website, source-code or contact link is shown in Settings in a future version, it works the same way: Quire asks your browser or mail app to open an address.
Children
Quire is not directed at children and collects no data from anyone, of any age.
Your rights
There is no personal data held by the author or by anyone else, so there is nothing to request, export, correct or delete. The data on your own device is entirely under your control: remove a bookmark in the app, or uninstall Quire to erase everything it has stored.
Changes to this policy
If this policy changes, the date at the top changes with it, and the updated version replaces this one at the same URL.
Contact
Questions about this policy, or anything Quire does with your books: open an issue on the project's GitHub, which is public and monitored.
Where this is published
The hosted copy is <https://gajanansr.github.io/quire/privacy.html>, generated from this file by scripts/build-site.py when the site is deployed — so the page a reader sees and the document in the repository cannot drift apart. Edit this file; the page follows.
The same URL belongs in two places in the Play Console, and both must match it:
- Play Console → Store listing → Privacy policy
- Play Console → App content → Data safety → Privacy policy URL
Play also asks for a contact email address in the store listing itself. That is separate from this document and has to be a real mailbox.