Privacy Policy

patolabs is an independent, one-person studio operated from France. This policy covers the apps published under the patolabs name — today, Souffle for iPhone and Quotaly for iPhone, Apple Watch and Mac — and this website, patolabs.dev. The short version: the apps work without an account and keep your data on your device, and the website does not use advertising or cross-site tracking.

1. Souffle#

Souffle has no account, no backend and no third-party analytics SDK. There is no server of ours for your data to be sent to.

• Sessions, programs, favourites and settings. Stored locally on your iPhone. They are included in your own device backups if you have them enabled; we have no access to them.
• Apple Health. If you grant permission, Souffle writes your breathing sessions to Apple Health as mindful minutes. Souffle only writes this data: it is never sent to us or to anyone else, and it is not used for advertising or marketing. You can revoke the permission at any time in the Health app.
• Reminders. The daily reminder is a local notification scheduled on your device.
• Tips. Souffle is free. The optional tip is a one-time in-app purchase processed by Apple; it unlocks nothing. We never receive your payment details or your Apple Account.
• Diagnostics. If you chose to share analytics with app developers in your iOS settings, Apple provides us with aggregated crash and usage reports that are not linked to your identity.

2. Quotaly#

Quotaly (iPhone, Apple Watch and Mac) shows the usage limits of AI services you already use. It has no account of ours, no backend and no third-party analytics SDK: there is no patolabs server for your data to be sent to.

• Your service credentials. The tokens, session cookies or API keys you add (Claude, ChatGPT · Codex, Cursor, GitHub Copilot, Venice AI, OpenRouter, OpenAI API, Anthropic API) are stored in the iOS Keychain of your iPhone, restricted to that device. Quotaly sends each credential only to the service it belongs to, directly from your device, to read your usage: claude.ai, api.anthropic.com, platform.claude.com, chatgpt.com, auth.openai.com, api.openai.com, cursor.com, github.com, api.github.com, api.venice.ai and openrouter.ai. Those services process the request under their own privacy policies. Unless you turn off "Service outages", Quotaly also reads, without any credential, the public status pages of the services you use: status.claude.com, status.openai.com, status.cursor.com, www.githubstatus.com and veniceai-status.com.
• Sign-in. When you sign in to Claude or ChatGPT inside the app, the page is the provider's own, shown in a separate web view; Quotaly never sees your password and keeps only the session cookie or token. GitHub Copilot uses GitHub's device sign-in, read-only profile access.
• Usage history and settings. Stored in the app's container on your device (30 days in the free version, up to 90 days with Quotaly Pro). Widgets, the Live Activity and Control Center read the same local data.
• Apple Watch. Your iPhone sends your quotas (account names, percentages, reset times) to your paired Apple Watch over Apple's WatchConnectivity. No credential is ever sent to the watch.
• Mac app and iCloud Keychain sync. The optional Mac app reads, on your Mac only, the credentials of Claude Code, the Codex CLI and Cursor to show your quotas. If you turn on sync, it shares those access credentials (never their refresh tokens) with Quotaly on your iPhone through your iCloud Keychain, which Apple protects with end-to-end encryption. Turning sync off removes the shared items. The Mac app's "Local usage" section reads, on your Mac only, the session logs of Claude Code and the Codex CLI to count tokens and estimate a cost: it keeps only numbers (tokens, model, project folder name), never reads conversation content and sends nothing off the Mac.
• Notifications. Alerts (low quota, reset, predictive warnings, API budget and spend spikes, service outages) are local notifications computed on your device, on the iPhone and on the Mac.
• Purchases. Quotaly Pro is sold through the App Store and processed by Apple. We never receive your payment details or your Apple Account.
• Diagnostics. If you chose to share analytics with app developers in your iOS settings, Apple provides us with aggregated crash and usage reports that are not linked to your identity.

3. This website#

• Audience measurement. We use Vercel Web Analytics and Vercel Speed Insights to count page views and measure loading performance. Both work without cookies and produce aggregated statistics; they are not used to identify you or to follow you across other sites.
• Hosting logs. The site is hosted by Vercel, which processes technical data such as your IP address and browser type to deliver pages and keep the service secure.
• Preferences. Your language is remembered with a cookie (NEXT_LOCALE) and your light or dark theme with your browser's local storage. Both are strictly functional.
• Beta page. If you connect a wallet on the Beta page, your public wallet address is sent to our server to check on the Base blockchain that you hold a Patolabs OG token. The result is cached for about 30 seconds, and the signature you approve is kept in your browser for a few minutes so you are not asked again. These checks go through blockchain RPC providers (Alchemy and PublicNode), which see your wallet address and IP address. Blockchain transactions are public and permanent by nature.

4. Support correspondence#

If you email us, we keep your message and the information you share in it so we can reply and follow up.

5. Service providers#

• Apple — App Store distribution, TestFlight, in-app purchases, Apple Health, WatchConnectivity and iCloud Keychain. See Apple's privacy policy.
• Vercel — website hosting, audience and performance measurement, and the short-lived cache used by the Beta page. See Vercel's privacy policy.
• Alchemy and PublicNode — blockchain access for the Beta page.
• The AI services you connect to Quotaly (Anthropic, OpenAI, Cursor, GitHub, Venice AI, OpenRouter) — they receive Quotaly's requests for your usage, sent directly from your device with your credentials, under their own privacy policies. We have no contract with them and receive nothing from them.

We do not sell personal information, we do not run advertising, and we do not use your content to train machine-learning models.

6. Data retention#

Data created in Souffle and Quotaly stays on your device for as long as you keep the app and its data. Aggregated diagnostics and audience statistics are kept for up to 12 months. Support emails are kept for up to 24 months unless you ask us to delete them sooner.

7. Your rights#

Depending on where you live (EEA and UK under GDPR, California under CCPA/CPRA, and similar frameworks), you have the right to access, correct, delete, restrict, or export your personal data, and to lodge a complaint with your local data protection authority — in France, the CNIL.

Most of the data described here never reaches us, so the fastest control is often on your device: deleting Souffle or Quotaly removes its local data (and Quotaly's credentials), and the Health app lets you delete what Souffle wrote. For anything else, email support@patolabs.dev. We reply within 30 days.

8. Children#

Our apps are not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children.

9. International transfers#

patolabs is operated from France. Vercel, Apple and the blockchain providers may process the limited data described above outside the European Economic Area, under their own safeguards such as the EU Standard Contractual Clauses.

10. Security#

The website is served over HTTPS. Souffle and Quotaly keep their data inside the app's sandbox on your device, protected by your device's own security; Quotaly stores credentials in the iOS Keychain.

11. Changes to this policy#

When this policy changes materially, we update the effective date at the top of this page.

12. Contact#

Questions, requests, or complaints: support@patolabs.dev. You can also reach our support page.