Privacy Policy

Last updated: October 21, 2026

This policy covers the Quiver app and ridequiver.com. It explains what information Quiver receives, how it is used, the service providers involved, retention, and your choices.

What we collect

• Account. If you sign in with Apple or Google, Quiver receives an account identifier and profile information your provider makes available. You may also provide profile details in Quiver.
• Your garage. Quiver stores the bikes, components, specifications, purchase details, photos, tuning and fit notes, and other content you choose to save.
• Forwarded receipts. If you use your Quiver inbox, receipt text is processed to extract purchase information. Quiver stores extracted garage information and the message subject rather than the raw message body.
• Image and PDF intake. If you submit a photo, screenshot, build sheet, invoice, or PDF for bike identification, the file and accompanying text are temporarily sent to our AI provider to transcribe bike-related information. Quiver does not persist the original intake file through this processing path. Resulting text enters the same bike-resolution workflow as typed descriptions.
• Purchases. Apple, Google, and RevenueCat process Quiver Pro transactions. Quiver receives product, entitlement, purchase-date, and account-related purchase information, not payment-card details.
• Product analytics. PostHog and HeyCatch receive app-usage events. Before sign-in these use a random installation identifier. After sign-in, analytics are associated with Quiver's internal account identifier. Events may include screens/actions, app/build/session information, public bike identity, and feature settings. Quiver's analytics guardrails exclude private garage values and personal profile fields.
• Optional bike notifications. If you ask for an update when we add your bike, Quiver stores a push-notification token, your phone platform and time zone, and a one-way coded installation identifier linked to your bike searches. No account is required. After sign-in, the subscription can be linked to your account so your Notifications setting applies. Expo, Google Firebase Cloud Messaging on Android, and Apple Push Notification service on iOS process the token and notification content to deliver the update. These messages are for the bike updates you requested, not advertising. You can turn notifications off in Quiver's Account screen or your phone's Settings. Signing out revokes the phone's subscription; deleting an account removes its associated subscriptions.
• Bikes saved without an account. If you use Quiver without signing in, the app also keeps a copy of your saved bikes on Quiver's server: each bike's brand, model, year and riding type, and each part's category, name, brand and catalog match. It does not include notes, prices, photos, nicknames, serial numbers or dates. The copy is stored under a one-way coded form of the same random installation identifier used for your bike searches, with no name, email, account or network address. Quiver uses it to improve bike and part details and to send bike updates you ask for. It is deleted after 180 days without changes, or 30 days after you sign in on that phone.
• First open. The first time the Quiver app opens on a phone, it sends Quiver's own server the same random installation identifier and whether the phone runs iOS or Android. Quiver stores only a one-way coded form of that identifier, so the same phone is counted once, and uses it to count new installs. It is not linked to your account, garage, or network address.
• Website bike search. When you search the bike catalog on ridequiver.com, your browser sends Quiver's own server the words you searched and how many bikes the page showed. Quiver stores those words with a one-way coded form of your network address, so repeat searches and the same visitor are counted once, and never the address itself. Searches that find nothing tell us which bikes to add to the catalog. They are not linked to an account or garage.
• Website requests. When you press "Request geometry" or "Request stock parts" on a bike page, Quiver stores which bike and which page, with the same one-way coded form of your network address, so one person counts once. Requests decide which bikes we research next. They are not linked to an account or garage.
• Diagnostics. Sentry receives technical error information and sanitized product breadcrumbs. When signed in, diagnostics can be associated with the internal Quiver account identifier to help diagnose failures.
• Website analytics. Google Analytics, PostHog, HeyCatch, and Ahrefs Web Analytics measure visits to ridequiver.com, including public shared-bike pages. They can receive browser identifiers, pages viewed, elements clicked, referring source, approximate region derived from network information, and device/browser information. Quiver does not use these for personalized advertising.
• Advertising measurement on our website. When Quiver is running ad campaigns, ridequiver.com may load the Meta pixel and use AppsFlyer links to measure whether an ad led to someone tapping through to an app store. These services can receive browser identifiers, pages viewed, referring source, campaign tags, approximate region derived from network information, device/browser information, and the fact that a store link was tapped. Meta may use this information to measure and target Quiver's own advertising, including showing Quiver ads to people who visited this site. Bike pages on ridequiver.com don't load the Meta pixel. Instead, after a bike page has been open in your browser for a couple of seconds, a small Quiver script tells Quiver's server, and the server may tell Meta directly which bike page you viewed, for the same purposes. That message includes your network address, your browser type, any Meta cookies or ad-click tag already present, your approximate city, region, postal code and country as estimated from your network address, and a random visitor ID that Quiver stores in a first-party cookie for up to 180 days. Location and the visitor ID are sent in one-way coded (hashed) form. This is not sent if your browser sends a Global Privacy Control signal. Quiver does not send Meta your name, email address, phone number, birth date, or any garage content. Quiver's website stores campaign tags from an ad link in your browser for up to 30 days so a later tap can be credited to the campaign that brought you here. Store and AppsFlyer links can carry campaign identifiers so an install can be attributed to the source that led to it. Browser-level tracking controls and ad-blocking extensions can prevent the pixel, Global Privacy Control stops the bike page signal, and Quiver's website works normally without either.
• Apple Ads attribution. Quiver may use Apple's AdServices attribution through RevenueCat to measure whether installs or purchases resulted from Apple Ads campaigns. Campaign attribution can be associated with Quiver's internal account/analytics identifier after sign-in. Quiver does not use IDFA for this attribution or use it to track people across other companies' apps or sites.

How we use information

• Provide, sync, secure, and support your garage and account.
• Perform bike-identification and receipt-import features you request.
• Improve Quiver, diagnose problems, and prevent abuse.
• Manage Quiver Pro purchases and entitlements.
• Measure and target our own advertising campaigns, including Apple Ads and Meta ads.
• Communicate about important service or account changes.

AI processing

Quiver uses Anthropic for AI-assisted processing. Bike and part descriptions can be sent to Anthropic to extract or match bike-related information. Images and PDFs submitted through intake are sent temporarily to transcribe bike-related text. Forwarded receipt text is sent to extract purchase details. These workflows are used to provide the feature you request, not to advertise to you.

For image/PDF intake, Quiver does not write the submitted file to its own persistent storage as part of the transcription request. Transcribed text may be retained where needed for the bike-resolution and spec-quality workflow. For forwarded receipts, Quiver stores extracted purchase details and the message subject rather than the raw message body.

Helping improve bike details

If you enable Help improve bike details, Quiver may use anonymous specification confirmations and corrections to improve shared bike details. This is limited to bike and specification information and is designed not to include private garage content. You can turn the setting off at any time.

Service providers and sharing

Quiver does not sell personal information and does not show third-party ads. We share information with service providers only as needed to provide, secure, measure, and improve Quiver, process purchases, perform features you request, or comply with law. Providers processing information for us are expected to handle it consistently with their contractual obligations and applicable privacy and security requirements.

• Anthropic: AI processing for descriptions, image/PDF transcription, and receipt extraction.
• PostHog: product and website analytics.
• HeyCatch: product and website analytics.
• Ahrefs: website analytics.
• Sentry: diagnostics.
• RevenueCat: purchase and entitlement management, plus Apple Ads attribution support.
• AppsFlyer: app-install and campaign attribution.
• Apple: sign-in, App Store purchases, and Apple Ads attribution.
• Google: sign-in, Google Play purchases, install-referrer attribution, and website analytics.
• Meta: advertising measurement and targeting for Quiver's own campaigns.
• Infrastructure providers: cloud, database, storage, hosting, and mail-routing services needed to operate Quiver.

Data retention and deletion

We generally keep account and garage data while your account exists. You can permanently delete your account from the Account screen using Delete account, or request deletion by contacting us. Account deletion removes Quiver account and garage records under our control, subject to limited backups, security records, processor retention, or legal obligations. Purchase, analytics, diagnostic, and infrastructure providers may retain records for their configured retention periods or where required for refunds, fraud prevention, accounting, security, or law.

Your choices and rights

You choose whether to create an account, use optional receipt or AI-upload features, and contribute improvements to shared bike details. Depending on where you live, privacy law may provide rights to access, correct, export, delete, restrict, or object to certain processing. Contact hello@ridequiver.com for requests not available directly in the app.

Security and international processing

Quiver uses encrypted connections and reputable infrastructure providers. Information may be processed in countries other than where you live; where required, appropriate safeguards are used for international transfers. No system can be guaranteed perfectly secure.

Children

Quiver is not directed to children and is not intended for anyone under 13. We do not knowingly collect personal information from children under 13.

Retailer and affiliate links

Individual bike and part pages may include disclosed affiliate links. When you follow one, the retailer and its affiliate network may receive your IP address and browser information and use cookies or similar technologies to attribute purchases under their own privacy policies. Quiver does not include your account details in these links or load affiliate tracking pixels on catalog pages.

Changes

We may update this policy as Quiver changes. For material changes we will update the date above and provide additional notice where appropriate.

Contact

Privacy questions or requests: hello@ridequiver.com.