Our Terms of Service and Privacy Policy each have a common core that applies to every user, followed by country annexes — United States, Australia and New Zealand — setting out the rights, response times and complaint routes that apply where you live. Where an annex applies to you, it prevails over the common core to the extent of any inconsistency. If you are in a country without an annex, the common core applies together with any rights your local law gives you.
01 Acceptance of Terms
You accept these Terms by affirmatively indicating your agreement during onboarding — for example, by checking the "I accept the Terms and Privacy Policy" box — before you use the Quitory mobile application (the "App"). If you do not agree, do not use the App. You represent and warrant that you are at least 18 years of age. Quitory is operated by Quitory LLC, a limited liability company organized in California, United States. These Terms have a common core, followed by country annexes. Where an annex applies to you, it prevails over the common core to the extent of any inconsistency.
! Medical & Wellness Disclaimer
QUITORY IS A GENERAL WELLNESS AND HABIT-CHANGE APP, PROVIDED ON AN "AS IS" BASIS FOR INFORMATIONAL, SELF-HELP, AND ENTERTAINMENT PURPOSES ONLY. QUITORY IS NOT A MEDICAL DEVICE, A DIAGNOSTIC INSTRUMENT, OR A TREATMENT SYSTEM. IT DOES NOT DIAGNOSE, TREAT OR CURE ANY CONDITION, AND DOES NOT PROVIDE MEDICAL ADVICE OR PRESCRIPTIONS.
- "A.R.I.A." is a fictional, scripted character within the App's science-fiction narrative. Its messages are pre-written by us and are not generated by artificial intelligence and not provided by a medical professional. It does not give medical advice, diagnosis, triage, or therapy.
- Any dose-reduction plan is created and controlled by you: you enter your own starting amount, choose your own pace, and move to the next step yourself. The App does not prescribe a dose and does not decide anything for you.
- Health metrics, timelines, and recovery stats are averaged, educational models based on public sources (such as WHO benchmarks). They are informational only and do not reflect your individual medical condition.
- ALWAYS CONSULT A QUALIFIED HEALTHCARE PROFESSIONAL BEFORE MAKING SIGNIFICANT CHANGES TO YOUR NICOTINE OR CHEMICAL DEPENDENCY STATUS, OR IF YOU EXPERIENCE WITHDRAWAL OR HEALTH PROBLEMS.
03 User Content ("Beacon" Module)
The Beacon feature lets users submit short public text messages.
- Content Rules: Offensive, discriminatory, threatening, sexual, unlawful, or infringing content (including third-party copyrighted text such as song lyrics or book excerpts) is prohibited.
- Human Pre-Moderation: All Beacon submissions are reviewed and moderated by us before they appear, and are added to the App with an update.
- Report & Block: you can report any signal via the "⋮" menu on the message, and hide an author so their signals no longer reach you and their messages disappear from your history. We review reports within 24 hours and remove content that breaks these rules. You can also write to support@quitory.app.
- Enforcement: Repeat violations may result in a permanent block of your Beacon access.
- Copyright: If you believe content in the App infringes your copyright, email support@quitory.app and include: identification of the copyrighted work; identification of the content and where it appears in the App; your contact details; and a statement that you have a good-faith belief the use is not authorized by the copyright owner, its agent, or the law. We review such notices promptly, remove infringing content, and terminate repeat infringers. All Beacon submissions are reviewed by us before they appear.
04 Intellectual Property
All functional architecture, source code, interface designs, narrative content, the A.R.I.A. character, and brand marks are the exclusive property of Quitory LLC (California, US) and are protected under United States and international copyright law.
05 Subscriptions & Auto-Renewal
- A 7-day free trial may be offered on the annual plan to eligible new subscribers (as determined by the App Store and Google Play; typically users who have not previously used a trial or subscription for this app). Eligibility, availability and the price and period after any trial are shown on the purchase screen before you confirm. After the trial, access to premium features requires a paid subscription.
- Auto-renewal: Subscriptions renew automatically. The price and billing period are shown on the purchase screen before you buy. Payment is charged at the start of each period. The "Lifetime" purchase incurs no recurring charges.
- What "Lifetime" means: a one-time purchase that gives you premium access for as long as Quitory remains commercially available as a product — it is not tied to your lifespan, and it is not a promise that the App will run forever. We will not withdraw the App from service without notice. If we ever discontinue Quitory, we will give at least 90 days' notice in the App and by email where we have your address, and lifetime purchasers who bought within the preceding 12 months may request a pro-rata refund by writing to support@quitory.app.
- Cancel anytime: You can cancel at any time in your app store settings, or in one tap via Settings → "Manage Subscription" in the App. Cancelling stops the next renewal — you are not charged again. Your premium access continues until the end of the period you have already paid for; it is not revoked immediately. No reason, call or email is required.
- Purchases and billing are processed by the Apple App Store and Google Play. Card and banking data are handled by Apple, Google, and their payment processors under PCI-DSS; we never receive, log, or store your card or banking information.
- Refunds are governed by the policies of the relevant store (Apple App Store / Google Play), together with any rights you have under the consumer law of your country.
- Slip Protection: If you relapse, your premium access and unlocked content remain intact. A setback is data, not a penalty.
06 Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, QUITORY LLC DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. QUITORY LLC PROVIDES NO GUARANTEE OF CESSATION SUCCESS.
- The App is provided on an "As-Is" and "As-Available" basis.
- IN NO EVENT SHALL QUITORY LLC BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF YOUR USE OF THE APP.
- Your journal and logs are stored on your device. We are not liable for loss of on-device data if the App is uninstalled or the device is changed without exporting a backup.
- This clause applies only to the extent permitted by the law of your country. See the annex for your country below.
07 Dispute Resolution & Governing Law
Please contact us first at support@quitory.app — most issues are resolved that way.
These Terms are governed by the laws of the State of California, United States, without regard to conflict-of-law principles, except where the law of your country of residence gives you rights or protections that cannot be excluded by agreement; in that case those rights and protections apply and prevail over this clause. The country annex for your country sets out how disputes are resolved where you live. Nothing in these Terms limits your right to complain to a regulator in your country. We may update these Terms; for material changes we will provide notice in the App and, where required, ask for your renewed agreement.
United States
Applies if you use the App in the United States.
A1. Arbitration and class action waiver
Any dispute, claim, or controversy arising out of or relating to these Terms or the App shall be resolved through binding, individual arbitration in the State of California, USA, and not in a court of law. You waive any right to participate as a plaintiff or class member in any class action or representative proceeding against Quitory LLC.
Australia
Applies if you use the App in Australia.
B1. Australian Consumer Law
Our services come with guarantees that cannot be excluded under the Australian Consumer Law. Nothing in these Terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded, restricted or modified. Where our liability can be limited, it is limited (at our option) to resupplying the services or paying the cost of having them resupplied.
B2. Disputes and governing law
The arbitration clause and class action waiver in Annex A do not apply to you. You may bring proceedings in the courts of Australia, and you keep the benefit of any mandatory protections of Australian law. Nothing in these Terms requires you to arbitrate in the United States or to give up any right to participate in representative proceedings available to you under Australian law.
B3. Limitation of liability
Clause 06 (Limitation of Liability) applies to you only to the extent permitted by the Australian Consumer Law.
B4. Cancelling your subscription
You can cancel at any time in your app store settings, or in one tap via Settings → "Manage Subscription". Cancelling stops the next renewal; access continues until the end of the period you have already paid for. Refunds are handled under the policies of the relevant app store and under your rights in the Australian Consumer Law.
B5. Complaints
Contact us at support@quitory.app. You may also contact the Australian Competition and Consumer Commission (accc.gov.au) or your state or territory consumer protection agency.
New Zealand
Applies if you use the App in New Zealand.
C1. Consumer Guarantees Act and Fair Trading Act
Where you acquire the App as a consumer, you have rights under the Consumer Guarantees Act 1993 and the Fair Trading Act 1986 that cannot be excluded. Nothing in these Terms excludes, restricts or modifies those rights.
C2. Disputes and governing law
The arbitration clause and class action waiver in Annex A do not apply to you. You may bring proceedings in the courts of New Zealand and keep the benefit of any mandatory protections of New Zealand law.
C3. Limitation of liability
Clause 06 (Limitation of Liability) applies to you only to the extent permitted by the Consumer Guarantees Act 1993.
C4. Cancelling your subscription
You can cancel at any time in your app store settings, or in one tap via Settings → "Manage Subscription". Cancelling stops the next renewal; access continues until the end of the period you have already paid for.
C5. Complaints
Contact us at support@quitory.app. You may also contact the Commerce Commission (comcom.govt.nz) or Consumer Protection (consumerprotection.govt.nz).
01 Our Privacy Approach
Quitory is built to be privacy-protective. Your journal, notes and letters are stored on your device and never sent to us.
Two different things happen with the rest: (1) REQUIRED — a small amount of technical data is always processed so the App can run and stay stable: crash diagnostics and app configuration. You cannot turn this off while using the App. Required crash diagnostics do not independently collect your journal or quit-journey data; if you separately opt in to usage analytics, recent quit-journey events may be included in crash reports as breadcrumbs (see below). (2) OPTIONAL — usage analytics, including quit-journey events, are processed ONLY if you opt in. This is off by default, the App works fully without it, and you can turn it off at any time.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising. This Policy also covers our website (quitory.app) and our support email: our site is static, our hosting/CDN provider processes standard server logs (IP, browser, requested page, timestamp) to deliver it and for security, and we use no advertising cookies or advertising analytics (our hosting provider Framer provides cookie-free, privacy-oriented aggregate website analytics using short-lived, non-persistent measurements); the delete-data page collects only what you type into it; and if you email support@quitory.app we receive your address and whatever you include (if you describe your quit journey there, you may be sending health information voluntarily — we use it only to reply, via our email provider as processor). The App is intended for users 18 and older.
This Policy has a common core that applies to every user, followed by country annexes (United States, Australia, New Zealand) setting out the rights and contacts that apply where you live. If you are in a country without an annex, the common core applies together with any rights your local law gives you.
02 Information We Process
- On-device data: Your journal entries, craving logs, relapse history, "Letters to the Future," SOS notes, milestones, and achievements are stored locally on your device. If you delete the App or switch devices without exporting, this data is permanently lost.
- Crash diagnostics (always on) & usage analytics (optional): We use Google Firebase Crashlytics to detect and fix crashes — it collects a pseudonymous installation identifier, device model, OS version and crash stack traces. This is necessary to keep the App stable and cannot be turned off; The crash report itself does not contain your journal, notes or letters, and does not independently gather quit-journey data. However, if you have opted in to usage analytics, some of your recent quit-journey events may be attached to a crash report as "breadcrumbs" — these are covered by your analytics opt-in. If you have not opted in, no such events exist and none are attached. Crash reports linked to your device are retained for only about 90 days, after which they are automatically deleted (see the Consumer Health Data Policy). Separately, we use Google Firebase Analytics (a pseudonymous app-instance ID, approximate country/region-level location derived from IP, device and OS information, and in-app events). Some events relate to your quit journey (for example, that a craving or relapse was logged, its intensity and trigger, the nicotine product type, or dose-reduction progress) and are used to understand how the App is used, to improve it, and to develop future features, including a predictive craving-support model. This collection is OFF by default and starts only if you opt in during onboarding; you can turn it off at any time in Settings → "Your Privacy Choices". See our separate Consumer Health Data Privacy Policy for how we handle this.
- App configuration: We use Google Firebase Remote Config to roll out features and settings. It uses a pseudonymous Firebase installation identifier to decide which configuration your device receives. It does not collect your journal or health data.
- Purchases: Handled by the Apple App Store and Google Play under PCI-DSS. We never receive or store your card or banking information. We use RevenueCat, Inc. as our processor to manage subscriptions; it receives a pseudonymous app user ID and subscription information from the stores — product identifiers, purchase and renewal dates, trial/introductory status, expiration and transaction identifiers. On iOS, if you installed the App after tapping one of our ads in the App Store, Apple's AdServices framework provides a one-time attribution token identifying the advertising campaign you came from; we pass this token to RevenueCat so we can tell which campaigns bring people who find the App useful. The token is issued by Apple, is not an advertising identifier, does not identify you, cannot be used to track you across other apps or websites, and carries no information about your nicotine use. It does not receive your journal, cravings, relapse details or tapering parameters. Whether purchase or subscription information is itself "consumer health data" can depend on context; we treat it conservatively and never use it for advertising.
- Beacon: A message you post is linked to a pseudonymous in-app identifier generated on your device (used for spam prevention, moderation and the block feature). It is not your name, email, or a hardware identifier, and we hold no account for you — but because it is persistent, several messages by the same author can be linked together. An optional nickname, if added, is shown publicly. Your product type and days quit are attached only if you switch that option on yourself. Submitting a message does not depend on your analytics choice: if you declined analytics, a message you chose to publish is still sent. Messages are reviewed by us before they appear. Anything you publish is public: do not include information you would not want others to see, including details about your health. To remove a message, email support@quitory.app — we remove it from moderation and pending content; if it has already been published, it stops being distributed from the next update onward, but copies already delivered to other devices cannot be recalled.
- Motion / steps (Premium): If enabled, step data is read via CoreMotion and remains on your device; it is not transmitted to us.
03 Google's Role (Data Processor)
Google acts as our data processor, under Google's data-processing terms and not for its own advertising, for: (i) analytics and crash diagnostics (Firebase Analytics, Crashlytics); (ii) storage and human moderation of Beacon messages you submit, held in Google Cloud Firestore before publication — if a message contains health information, Google processes it as our processor for this purpose; and (iii) app configuration (Remote Config) purposes. We have disabled Google's advertising features, ad personalization, and Google Signals for this project, and we do not use advertising SDKs. Because Google acts as our processor, these disclosures are not sales or "shares" of your personal information.
04 We Do Not Sell or "Share" Your Data
We do not sell your personal information and do not "share" it for cross-context behavioral advertising. Who is who:
- Google (Firebase Analytics, Crashlytics, Remote Config, Cloud Firestore) and RevenueCat, Inc., together with Zoho (email) and Framer (website hosting), act as our processors / service providers — they process data on our behalf, under contract, and not for their own purposes. Disclosures to them are not sales or "shares". Attribution tokens from Apple's AdServices framework are passed to RevenueCat for campaign measurement only. We do not use them for advertising targeting or personalization, and we do not combine them with your quit-journey data.
- The Apple App Store and Google Play, when they process your purchase and operate your store account, act under their OWN terms and for their own purposes — not as our processors. What they collect is governed by Apple's and Google's privacy policies, not by this one. From the stores we receive your purchase and subscription information (such as whether a subscription is active, its product, dates and renewal status) as needed to provide premium access.
05 Your Privacy Choices & Rights
Wherever you are, you can opt out of usage analytics at any time, ask us for a copy of the personal information we hold about you, ask us to correct it, and ask us to delete it. Additional rights, response times and complaint routes depend on your country — see the annex for your country below. To exercise your choices:
- In the App: open Settings → "Your Privacy Choices" to turn usage analytics on or off at any time. It is off unless you opt in. Turning it off does not delete your on-device data.
- Delete your data: use the in-app deletion option, or our data deletion request page at quitory.app/delete-data.
- Requests & questions: email support@quitory.app. We will not discriminate against you for exercising these rights, and we verify requests as required by law.
- Much of what you enter — your journal, craving and relapse history, letters and SOS notes — is stored only on your device. We do not hold a copy and cannot provide, correct or delete it for you.
06 Data Retention
- On-device data: kept on your device until you delete it or remove the App.
- Analytics & diagnostic data: usage analytics (Google Analytics) is retained for up to 14 months, then deleted or aggregated. Crash reports and their identifiers are retained by Google for approximately 90 days. The Firebase installation identifier (used by Crashlytics and Remote Config) is retained until a deletion request is made; removal from live and backup systems can take up to 180 days.
- Beacon moderation data: retained only as long as needed for spam prevention and moderation.
- Other processors: Beacon submissions (Cloud Firestore) are kept until you delete your data or ask us to remove a message; support emails (Zoho) and website form submissions (Framer) are kept only as long as needed to handle your request, then deleted; RevenueCat records are kept where required for subscription management and legal or accounting obligations; website server logs are kept by our hosting provider for a short period for security.
07 Security, Children & Breach Notice
- Security: we use reasonable technical and organizational measures. No method of transmission or storage is completely secure.
- Children: the App is for users 18 and older and is not directed to children. We do not knowingly collect data from children; if we learn we have, we delete it.
- Breach notification: if a breach of security affecting your data occurs, we will notify affected users and the relevant regulators as required by the law of your country. See the annex for your country below.
08 International Transfers
We are based in the United States, and our service providers process data outside your country. Google LLC, RevenueCat, Inc. and Zoho Corporation are located in the United States; Framer B.V. is located in the Netherlands. Each acts as our service provider under contract and not for its own purposes. Country annexes below describe what this means under your local law.
United States
Applies if you use the App in the United States.
A1. State privacy rights
Depending on your state, you may have the right to access, delete, or correct your personal information, to opt out of analytics, and to limit the use of sensitive (health-related) data. We do not sell your personal information and do not "share" it for cross-context behavioral advertising, as those terms are defined under the CCPA/CPRA and similar state laws.
A2. Consumer health data
Our separate Consumer Health Data Privacy Policy below applies, as required by the Washington My Health My Data Act, Nevada SB 370, Connecticut law and similar state laws.
A3. Response times and appeals
We respond to requests within 45 days and may extend by a further 45 days where reasonably necessary, telling you why. If we deny a request we will explain why and how to appeal; email support@quitory.app with "Appeal" in the subject line.
A4. Breach notification
If a breach affecting your data occurs, we will notify affected users and regulators as required by the FTC Health Breach Notification Rule (without unreasonable delay and no later than 60 days) and applicable state laws.
A5. Complaints
You may complain to the attorney general of your state. Washington residents may use atg.wa.gov/file-complaint.
Australia
Applies if you use the App in Australia.
B1. Applicable law
We handle your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). We treat information about your nicotine use, cravings, relapses and dose reduction as sensitive information and health information under that Act, and we collect it only with your consent.
B2. Consent to collect sensitive information
Usage analytics, including the quit-journey events described above, are collected only if you give separate, affirmative consent. This is off by default, the App is fully functional without it, and you can withdraw consent at any time in Settings → "Your Privacy Choices". Withdrawal stops future collection.
B3. Overseas disclosure (APP 8)
We disclose personal information to service providers located outside Australia, principally in the United States: Google LLC (analytics, crash diagnostics, app configuration, Beacon moderation storage), RevenueCat, Inc. (subscription management), Zoho Corporation (support email) and Framer B.V., which is located in the Netherlands (website and deletion-request page hosting). Each acts as our service provider under contract and not for its own purposes. By consenting to analytics you consent to this overseas disclosure. Where consent is not the basis, we take reasonable steps to ensure these recipients handle your information consistently with the APPs.
B4. Access and correction
You may request access to the personal information we hold about you (APP 12) and ask us to correct it (APP 13). Email support@quitory.app. We aim to respond within 30 days. Much of what you enter — your journal, craving and relapse history, letters and SOS notes — is stored only on your device; we do not hold a copy and cannot provide or correct it.
B5. Data breaches
If a data breach is likely to result in serious harm, we will notify you and the Office of the Australian Information Commissioner (OAIC) as required by the Notifiable Data Breaches scheme.
B6. Complaints
Contact us first at support@quitory.app; we will respond within 30 days. If you are not satisfied, you may complain to the Office of the Australian Information Commissioner: oaic.gov.au, 1300 363 992.
B7. No direct marketing
We do not use your personal information for direct marketing and we do not use advertising SDKs.
New Zealand
Applies if you use the App in New Zealand.
C1. Applicable law
We handle your personal information in accordance with the Privacy Act 2020 and the Information Privacy Principles (IPPs).
C2. Privacy Officer
Our Privacy Officer can be reached at support@quitory.app (subject line: "Privacy Officer").
C3. Disclosure outside New Zealand (IPP 12)
We disclose personal information to service providers located outside New Zealand, principally in the United States: Google LLC, RevenueCat, Inc. and Zoho Corporation, and in the Netherlands: Framer B.V. Each acts as our service provider under contract and is required to protect the information in a way that, overall, provides comparable safeguards to those in the Privacy Act 2020.
C4. Access and correction
You may ask for access to the personal information we hold about you (IPP 6) and ask us to correct it (IPP 7). Email support@quitory.app. We will respond as soon as reasonably practicable and no later than 20 working days after receiving your request. Your journal, craving and relapse history, letters and SOS notes are stored only on your device; we do not hold a copy.
C5. Privacy breaches
If a privacy breach has caused, or is likely to cause, serious harm, we will notify you and the Office of the Privacy Commissioner as soon as practicable.
C6. Complaints
Contact us first at support@quitory.app. If you are not satisfied, you may complain to the Office of the Privacy Commissioner: privacy.org.nz, 0800 803 909.
01 Scope
This policy describes how Quitory LLC collects, uses, and shares consumer health data, as required by the Washington My Health My Data Act (MHMDA), Nevada SB 370, Connecticut law, and similar U.S. state privacy laws. It applies to users in the United States and supplements our general Privacy Policy. If you are in Australia or New Zealand, the country annexes to our Privacy Policy above describe how we handle health information where you live.
02 What Consumer Health Data We Collect
This distinction matters: much of what you enter never reaches us at all.
(a) Stays on your device — we do not receive it, cannot read it, and hold no copy: your journal and withdrawal notes; "Letters to the Future"; SOS session notes; the detailed history of your cravings and relapses; achievements and progress.
(b) We receive only if you opt in to usage analytics — as events, through our processor:
- that a craving was logged: intensity, trigger, whether you overcame it, which tool you used;
- that a relapse was logged: product type, trigger, days since your quit date;
- dose-reduction (tapering) progress: current, baseline and target dose, phase, plan compliance;
- your product type, quit stage, cessation method and subscription status.
If you do not opt in, none of this is sent.
(c) You publish voluntarily — Beacon: if you write something about your health in a public message (for example "I relapsed today"), you are voluntarily submitting consumer health data and we do receive it: it is transmitted to our servers, read by a human moderator before it can appear, stored, and if approved published to other users with a later update. This does NOT depend on your analytics opt-in. Please do not include health details you would not want to be public. To remove a message you sent, email support@quitory.app — we remove it from moderation and from pending content bundles; if already published, it stops being distributed from the next update onward, but copies already delivered to other devices cannot be recalled.
03 How & Why We Collect It
We receive the information described in sections (b) and (c) above directly from you; the information in section (a) remains solely on your device, and we neither receive nor can read it. If — and only if — you opt in, limited quit-journey events (for example, that a craving or relapse was logged, its intensity and trigger, the nicotine product type, and dose-reduction progress) are processed through our analytics provider, acting as our processor, to understand how the App is used, to improve it, and to develop future features, including a predictive craving-support model. We do not use consumer health data for advertising, and we do not sell it.
04 Consent
We collect consumer health data for the purposes above — including to develop future features such as a predictive craving-support model — only with your separate, affirmative opt-in consent, requested during onboarding as a distinct choice from our Terms of Service and other acknowledgments. This consent is entirely OPTIONAL: if you decline, the App remains fully functional and no consumer health data is sent to our analytics provider. You may grant or withdraw consent at any time via Settings → "Your Privacy Choices". Withdrawal stops future collection.
05 Who We Share It With
We share consumer health data only with service providers/processors acting on our behalf under contract:
- Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043) — for analytics and crash diagnostics, and for storage, human pre-publication moderation, and deletion/content management of Beacon messages held in Google Cloud Firestore. If a Beacon message you submit contains health information, Google processes it as our processor for this purpose. Configured without advertising features.
- RevenueCat, Inc. (San Francisco, CA) — for subscription management. It does NOT receive your journal, cravings, relapse details or tapering parameters. It receives pseudonymous purchase and subscription information (product identifiers, purchase, renewal and expiration dates, trial status, transaction identifiers, and on iOS an Apple AdServices attribution token identifying the ad campaign an install came from — it contains no health information and is used only to measure which campaigns work), which we treat as sensitive in the context of a nicotine-cessation app and never use for advertising.
- Zoho Corporation — our email provider. If you email support@quitory.app and describe your quit journey, any health information you include is processed by Zoho as our processor solely so we can respond to you.
- Framer B.V. — our website hosting provider, which also serves our data-deletion request page. Any health information you type into that page is processed by Framer as our processor solely to transmit your request to us.
- We do not sell consumer health data, and we do not share it with third parties for their own purposes.
- We do not use geofencing around any health care facility, and we do not collect location to infer health-facility visits.
06 Your Rights & How to Exercise Them
You have the right to access the consumer health data we have, request its deletion, and withdraw consent.
When you delete your data in the App we: (a) delete everything stored on your device; and (b) reset your analytics identifier and delete your Firebase installation identifier, which stops further events being linked to the previous ones. Resetting the identifier does not, by itself, erase events already received by our analytics provider.
To have those earlier events erased as well, the App offers to send us a deletion request containing your previous analytics identifier (you can also email it to support@quitory.app). On receiving it we submit a server-side deletion request to our analytics provider. If you do not send the request, the events remain in pseudonymous form and are automatically deleted or aggregated after 14 months.
Crash reports are pseudonymous and are retained by our crash provider for only about 90 days, after which they are automatically deleted. When you delete your data, we reset your identifier so that future crash reports are not linked to previous ones. Beacon messages you submitted are deleted from our storage when you delete your data in the App, and you can ask us to remove a specific message at any time. Purchase records held by Apple, Google and RevenueCat are retained where required for subscription management and legal or accounting obligations. If you contacted us by email or used our deletion page and included health information, on your deletion request we also delete that support correspondence held by our email provider (Zoho) and any form submission held by our hosting provider (Framer), and instruct these processors to delete it, subject only to short retention required by law or for security/backup purposes.
To exercise these rights:
- In the App: Settings → "Your Privacy Choices" (opt out / withdraw consent) and the in-app deletion option;
- Online: our deletion request page at quitory.app/delete-data;
- Email: support@quitory.app.
We respond to requests within 45 days. Where reasonably necessary we may extend this period by a further 45 days and will tell you why.
Appeal. If we deny your request, we will tell you why and how to appeal. To appeal, reply to our decision or email support@quitory.app with "Appeal" in the subject line. We will respond to an appeal within 45 days. If we deny the appeal, you may submit a complaint to the Washington State Attorney General (atg.wa.gov/file-complaint) or to the attorney general of your state.