Privacy policy

What the apps handle

When you request an export, the extension reads book titles, authors, Amazon book identifiers, book and cover URLs, highlights, related notes, available page/location information and export metadata from your signed-in Amazon notebook.

Google authorization gives the apps access to your selected Drive account identifier and email address, and limited access to files this integration creates or opens. The apps use Google’s drive.file permission, not access to all of your Drive files. Google manages sign-in; you do not enter your Amazon or Google password into Quote Reel.

Why and where data is used

The extension uploads a complete JSON snapshot to your selected Google Drive account, in Kindle Quotes/latest.json. A successful export replaces that file. This legacy folder name remains so existing installs keep working.

The Android app reads that export to display highlights and notes and keeps the last validated snapshot in private app storage for offline reading. The saved snapshot is bound to the selected Drive account and excluded from Android backup and device transfer. Account identity and the last successful sync time are stored locally.

The extension stores selected account identity, status and export summaries locally, and keeps one pending export in local IndexedDB for retry. Its access token is held in browser session storage; Android handles access tokens in memory. The apps do not log tokens or send them to Amazon cover hosts.

Favorites and sharing

The Android app saves favorite highlight identifiers locally, separately for each connected Drive account. Favorites are not uploaded to Drive or sent to analytics.

When you choose Share, the app creates a quote image and a caption containing the book title, author and Amazon book link. Your personal note is omitted. Android lets you choose the receiving app or person; that recipient receives the content you share under its own privacy practices.

Share images are held in private temporary app cache. Images older than 24 hours are removed when another share is prepared, or you can remove them by clearing app data or uninstalling. Disconnecting removes local favorites and the saved snapshot; it does not remove temporary share images or content already shared.

Services that receive data

Amazon receives notebook requests made through your existing signed-in browser session. Google receives authorization and Drive API requests, account-related information and the snapshot you choose to upload. Android requests book covers from Amazon image hosts; those hosts receive ordinary network request information, such as your IP address and the requested image URL.

These services process information under their own policies: Google Privacy Policy and Amazon Privacy Notice. There is no Quote Reel developer server receiving your highlights or notes. We do not sell your reading data or use it for advertising. The browser extension has no analytics. Android version 0.5.0 and later includes usage analytics, described below; earlier versions have no analytics integration. Current development builds enable analytics and diagnostics by default, with a setting to turn them off.

Quote Reel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google data is used to provide the export and reading functionality you request.

Optional Android usage analytics

Released Android versions 0.5.0 through 0.7.0 require an analytics opt-in. Builds with default-on collection, including current development builds, enable Amplitude usage analytics and Firebase Crashlytics diagnostics automatically without a startup consent prompt. You can turn both off in Help improve Quote Reel. A previous explicit choice to turn collection off remains respected. Analytics helps us understand onboarding and reading features. Events describe app starts/backgrounding, onboarding page views and button actions, successful connections/imports, reader sessions, highlight views/pauses, manual navigation, book taps and menu actions.

Events include a random installation identifier, timestamps and session identifiers, app/build and SDK versions, platform, OS/device information and language. Depending on the event, they include first-recorded-use flags, feed mode, button/menu choices, navigation direction, import source, text word count, whether a note exists, and foreground duration. They do not include highlight or note text, book titles/authors/identifiers, Google email/account identity, Drive file identifiers, or authorization tokens. We disable advertising/app-set identifiers, location and IP-based analytics enrichment, automatic screen/interaction capture, diagnostic telemetry and session replay. Amplitude still receives normal network request information when events are sent.

Amplitude processes these analytics in its US region. See the Amplitude Privacy Notice. You can turn off future collection in Help improve Quote Reel (Usage analytics in older builds), available from the reader menu or onboarding information dialog. The app may upload events previously collected while collection was enabled; changing the setting or disconnecting Google Drive does not erase previously collected analytics. Installation analytics settings remain separate from Drive/account settings.

Analytics is retained by Amplitude under the applicable plan and service retention controls until removed. To request deletion of your analytics, email s@productleadership.io with the Analytics ID shown in Help improve Quote Reel (Usage analytics in older builds). We use this ID to locate the installation data and submit a deletion request through Amplitude. Uninstalling or clearing app data removes the local identifier, so save it before doing so if you want to request deletion. The Android app works without allowing analytics.

Optional Android crash and error diagnostics

Builds with diagnostics enabled send reports to Google Firebase Crashlytics. In default-on builds this starts automatically, unless you previously turned collection off. Firebase is initialized only when the Help improve Quote Reel setting is on. Diagnostic reports contain technical stack frames, app version, OS/device and app-state information, a few app-action markers, and random installation/session identifiers. A separate random Diagnostics ID helps locate reports for support; it is not your Google account identity. Firebase's installation and session services support crash reporting and quality metrics.

Quote Reel strips exception messages, causes and suppressed exceptions from app-reported errors and uncaught Java crashes because these may contain private content. Action markers contain action names, not event properties. We do not intentionally attach highlights, notes, book details, account information or tokens. No Google Analytics SDK, advertising integration, session replay or screenshot capture is added. Google receives ordinary network request information when diagnostics are sent. See Privacy and Security in Firebase.

The single Help improve Quote Reel setting controls both services. Turning it off stops future app events and error reports, disables Crashlytics automatic reporting and requests deletion of pending local crash reports. Previously collected or already uploading reports may still be processed; turning it off does not erase reports already received by either service. Firebase may keep technical crash information locally after initialization. Firebase Crashlytics documents 90-day retention for crash traces and associated identifiers before removal begins; installation and other service identifiers follow Google's applicable retention controls. Contact s@productleadership.io with the Diagnostics ID shown in Help improve Quote Reel for diagnostic privacy requests.

Report a problem opens your own email app with app version, Android version, device model and prompts to describe the issue. It does not automatically attach your export or logs. You review the message, choose any screenshot and send it yourself. Support receives only what you choose to send.

Retention and deletion

• A pending browser export remains until a successful upload, replacement by a later export, or disconnect. Disconnecting the extension removes its pending export and connected account settings and stops future uploads.
• The Android snapshot remains until replaced by a successful sync, disconnected, or removed with app data/uninstallation. A failed sync keeps the last valid copy. Disconnecting Android deletes its saved snapshot and account preferences.
• Drive files remain in your account until you delete them. Disconnecting or uninstalling does not delete those files. Google may retain previous versions or deleted items according to its retention controls.
• Disconnect does not revoke Google’s authorization. Revoke it in your Google Account’s third-party access settings if desired. The extension and Android app use the same Google Cloud project, so revocation can affect both.

This website and contacting support

This static website has no sign-in, forms, tracking scripts or analytics. GitHub Pages hosts it and may process standard request logs under the GitHub Privacy Statement.

If you email support, your email address and message are handled to respond to your request. Avoid sending passwords, authorization tokens or full personal exports. If a small excerpt is needed to investigate a bug, remove private text first. You can request deletion of support correspondence by emailing the address above, subject to any applicable retention obligations.

Changes and questions

Updates to this policy will be posted here with a revised effective date. For questions about privacy or help removing your data, email s@productleadership.io.