Your aquarium. Your data.

Privacy Policy

No ads. No tracking. No developer-operated account server.

Quotaquarium is an independent Apple Watch and iPhone app. It contains no advertising, cross-app tracking, or analytics SDK.

Effective date: September 19, 2026

Data stored on your devices

To make the app work, Quotaquarium stores:

• Account display information, settings, and the latest quota snapshot in the app container.
• Credentials and account recovery information in synchronizable Keychain.
• The latest quota snapshot in an App Group shared only with the Quotaquarium complication.
• Up to 100 recent diagnostic entries, which you can clear in Settings.
• Local notification schedules for enabled quota and Reset Bank alerts.

Demo mode does not require credentials and does not send account data.

Network services

Quotaquarium sends data when required by a feature you choose:

• Codex accounts. The app uses the ChatGPT device authorization flow and communicates with the corresponding ChatGPT/Codex service to refresh credentials and read quota-window and Reset Bank data. Credentials and account data are not sent to a server operated by the Quotaquarium developer. OpenAI processes this data under its own terms and privacy policy.
• Custom Server. The app contacts the server URL you enter. Its operator determines the server's authentication, logging, retention, and deletion practices.
• Local weather. If you enable local weather and grant location permission, the Watch sends approximate coordinates rounded to two decimal places to Open-Meteo to obtain current weather. Quotaquarium does not operate a server that stores this location. Open-Meteo processes the request under its own terms and privacy policy.

The app uses ephemeral network sessions and does not intentionally retain HTTP cookies or response caches.

Retention and deletion

• Settings, cached snapshots, account display information, and notification schedules remain on the device until replaced, cleared, or the app container is removed.
• Diagnostics retain at most 100 entries. Delete them at any time in Settings → Diagnostics → Clear Logs.
• Keychain items may survive app removal and may synchronize through iCloud Keychain. This allows a reinstall to recover previously configured accounts.
• Deleting an account inside Quotaquarium deletes and verifies its corresponding Keychain credential on that device, removes the account from app storage, cancels or reschedules related notifications, and sends the deletion to the paired device. If the paired device is temporarily unreachable, the deletion is queued for later delivery.

The developer does not operate an account or data server, so there is no additional developer-side account record to request for deletion. Data held by OpenAI, Open-Meteo, or your chosen custom server is governed by that service's own retention and deletion controls.

Permissions and choices

Location and notification permissions are optional and can be revoked in system settings. Motion can be disabled in the app. Quota tracking continues without location access; the aquarium falls back to non-location weather behavior.

You can also remove accounts, clear diagnostics, or disable individual notifications in Settings.

Contact

For privacy or support questions, email zizhaolaisuimuqu.git@gmail.com.

This policy may be updated when app behavior or service integrations change. Material changes will be reflected in the effective date.