Privacy Policy

Effective Date: March 6, 2026

1. Who We Are

QuitSmoke Pro (“we,” “our,” or “us”) is the developer and publisher of the QuitSmoke Pro mobile application available on iOS and Android. This Privacy Policy explains how we collect, use, share, and protect information about you when you use our app and related services (collectively, the “Service”).

For questions, please contact us at privacy@quitsmokeapp.com.

2. Information We Collect

2.1 Information You Provide

• Account information: Email address and password (hashed) when you register. Guest users may use the app without an account, but data will not sync across devices.
• Profile data: Age range, quit date, daily cigarette count, price per pack, preferred currency, and smoking type (cigarettes, vape, cigars, etc.).
• Daily logs: Number of cigarettes smoked, craving intensity (1–10), triggers selected (e.g., stress, coffee), optional mood, optional notes, and time of log entry.
• Reminder preferences: Notification times and types you configure within the app.
• Support communications: Any emails or messages you send to our support team.

2.2 Information Collected Automatically

• Device information: Device type, operating system version, app version, and a device identifier used for push notifications.
• Usage events: Anonymous analytics events (e.g., “log saved,” “achievement unlocked”) to help us understand feature usage and improve the app. These events do not include the content of your logs.
• Crash reports: Technical error data to diagnose and fix bugs.

2.3 Information from Third Parties

• Payment processors: When you subscribe to Premium, RevenueCat and the Apple App Store or Google Play Store process your payment. We receive only a subscription status and expiry date — not your full payment card details.
• Push notifications: Firebase Cloud Messaging (FCM) provides a push token we use solely to deliver reminders and motivational notifications you have enabled.

3. How We Use Your Information

We use the information we collect to:

• Provide and improve the Service, including calculating health milestones, streaks, money saved, and achievements.
• Personalize your experience, such as tailoring AI coach responses to your quit journey and trigger patterns.
• Send push notifications and reminders that you have explicitly enabled.
• Verify subscription status and unlock premium features.
• Respond to support requests.
• Detect, prevent, and address technical issues, abuse, and violations of our Terms of Use.
• Comply with legal obligations.

We do not use your health data (quit date, cigarette logs, craving data) for advertising purposes, and we do not sell your personal data to third parties.

4. Health Data

QuitSmoke Pro processes health-related information such as your smoking history, quit date, and craving patterns. This data is processed solely to power the features you use within the app. We treat this data with the highest level of care.

The app is not a medical device and does not provide medical advice. Quit journey data is for personal tracking and motivational purposes only.

If your jurisdiction requires special handling of health data (e.g., HIPAA in the US, or health-specific provisions under GDPR), please contact us before creating an account.

5. Data Sharing and Disclosure

We share personal data only in the following limited circumstances:

• Service providers: Cloudflare (infrastructure & CDN), Neon (cloud PostgreSQL database), RevenueCat (subscription management), and Firebase (push notifications). Each is contractually required to protect your data and use it only to provide services to us.
• Legal requirements: If required by law, court order, or governmental authority, we may disclose information to comply with applicable legal obligations.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction. You will be notified via email and/or a prominent notice in the app.
• With your consent: We may share your information for any other purpose with your explicit consent.

We do not share your data with advertisers, analytics brokers, or data aggregators.

6. Data Retention

We retain your account data for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., subscription payment records for tax compliance, retained for up to 7 years in some jurisdictions).

Anonymized, aggregated usage statistics may be retained indefinitely as they cannot identify you.

7. Your Rights and Choices

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update inaccurate or incomplete data through the Profile screen in the app.
• Deletion: Delete your account and associated data via Settings → Profile → Delete Account.
• Export: Download your logs and progress in CSV or text format via Settings → Export Data.
• Portability: Receive your data in a machine-readable format upon request.
• Opt-out of communications: Disable push notifications via Settings → Reminders or your device notification settings.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, email privacy@quitsmokeapp.com. We will respond within 30 days (or as required by applicable law).

8. Cookies and Tracking Technologies

The mobile app itself does not use browser cookies. Our website (this page) may use essential cookies required for operation (e.g., session management). We do not use tracking or advertising cookies on our website.

9. Children's Privacy

QuitSmoke Pro is not intended for, and does not knowingly collect personal data from, children under the age of 13 (or 16 in the European Economic Area). If you believe a child has provided us with personal data, please contact us immediately at privacy@quitsmokeapp.com and we will promptly delete that information.

The App Store and Google Play Store age ratings reflect the mature theme of tobacco addiction. The app is intended for adults and young adults aged 13 and older.

10. Data Security

We implement industry-standard security measures including:

• TLS/HTTPS encryption for all data in transit
• Bcrypt password hashing (passwords are never stored in plain text)
• JWT tokens with short expiry windows (15 minutes) and refresh token rotation
• Sensitive data stored in encrypted, secure device storage (iOS Keychain / Android Keystore)
• Regular security reviews and dependency audits

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please disclose it responsibly to security@quitsmokeapp.com.

11. International Data Transfers

Our servers are operated by Cloudflare and Neon, which may store and process data in the United States and other countries. If you are located in the European Economic Area, United Kingdom, or Switzerland, your data may be transferred to countries that may not provide the same level of data protection as your home country. We rely on Standard Contractual Clauses or other lawful transfer mechanisms to protect such transfers.

12. California Privacy Rights (CCPA)

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know, delete, and opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at privacy@quitsmokeapp.com.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Effective Date” above and, for material changes, notify you via in-app notification or email. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.

14. Contact Us

For privacy-related questions, requests, or concerns, please contact:

QuitSmoke Pro
Email: privacy@quitsmokeapp.com
Support: support@quitsmokeapp.com