I don't know if you can actually tell how much has gone specifically to that user. But what you can do is an alternative that a lot of people do.
You create a database that houses some info like: client username, client password, client file, date/time ordered/available. Now, you read the date/time from the database, and if that time is over, let's say a week, then you don't allow them to download it. If not, then they can.
Most companies I know that "customize" downloads per person, do it this way. They allow you to download it between a time-frame (usually 4 - 7 days).
That would be my best guess at how to do it.
~Brett