Privacy policy

1. Who is responsible

ClickQuit is made and published by Ruslan Zaripov Development, referred to in this policy as we, us, or the developer. Where data protection law calls for a controller, we are the controller for the limited processing described here.

This policy covers the ClickQuit mobile app for iOS and Android and this website. It does not cover the App Store, Google Play, or any other service you reach from the app, each of which has its own policy.

2. What the app stores on your device

ClickQuit works by keeping a record of your own habit. That record is written to a database inside the app's private storage on your phone. It includes:

• What you told the app when you set it up: what you use (cigarettes, vape, or another form), how much per day, how long you have used it, your date of birth if you chose to give it, how many times you have tried to quit, how committed you feel, your reasons for cutting down, an optional note in your own words, and your target quit date.
• Every tap session: how many taps that one cost you, the highest count you reached, when the dial unlocked, when the session ended, and whether you chose to smoke or not.
• Your settings: preferences such as your reminder choices and the state of your onboarding, stored in the phone's standard app preference storage.

The app does not read your contacts, your photos, your location, your health app data, or your device identifiers for advertising. It does not contain advertising.

This data stays on your device. As of the effective date of this policy, the app has no feature that uploads your habit history, your onboarding answers, or your notes to us or to anyone else.

One thing to be aware of: if you have turned on iCloud Backup, Google backup, or a similar service, your phone may include app data in those backups. Those backups are run by Apple or Google under their terms and their encryption, not by us, and we have no access to them.

3. Health related information

Some of what you enter says something about your health: how much you smoke or vape, how long you have done it, your date of birth, and anything you write in the optional note. In several jurisdictions that counts as a special or sensitive category of personal data, which is precisely why the app is built to keep it on your device rather than send it anywhere.

We do not receive this information, we do not profile you with it, and we do not sell it. Because it is processed only on your own device by software you control, we do not hold a copy that we could hand over, lose, or be compelled to disclose.

4. No account and no server of ours

ClickQuit has no sign up, no login, no email collection, and no user profile. We do not operate a backend server that stores your personal data. If you install the app on a second device, it starts empty, because there is nothing in the cloud to sync from.

5. Subscriptions and purchases

ClickQuit Plus is an optional subscription. If you buy it, the payment itself is processed by Apple (App Store) or Google (Google Play) under your existing store account. We never see or handle your card number, your billing address, or your store password.

To know whether your subscription is active, the app uses RevenueCat, Inc., a subscription management service. When you open the app or make a purchase, the RevenueCat software in the app can send and receive:

• an anonymous app user identifier that the software generates on your device and that is not linked to your name or email;
• the purchase or receipt information the store returns, such as which product was bought, when, whether it renewed or expired, and the store country;
• basic technical information about the request, such as app version, platform, device model, operating system version, and the IP address the request came from.

RevenueCat acts as our processor for this and holds the data on our behalf. Your habit data is not part of any of it. You can read RevenueCat's privacy policy, Apple's privacy policy, and Google's privacy policy for what each of them does with it.

From the stores we receive aggregated sales reporting, for example how many subscriptions are active in a country. That reporting does not tell us who you are.

6. Notifications

If you allow notifications, reminders are scheduled and delivered by your own device. They are not sent from a server, and no push token or message content reaches us. You can turn notifications off at any time in your device settings or in the app.

7. Crash reports and store statistics

As of the effective date, the app includes no third party analytics or crash reporting tool. What we can see is what Apple and Google show every developer in App Store Connect and the Google Play Console: aggregated figures such as installs, crashes, and performance, and, where you have agreed with Apple or Google to share diagnostics with developers, crash logs that do not identify you to us.

If we ever add an analytics or crash reporting tool, we will describe it here and change the effective date at the top of this page before or when that version ships.

8. This website

This site is a set of static pages. It sets no cookies, runs no analytics, embeds no tracking pixels, and loads its fonts and images from its own server rather than from a third party. Nothing you do here is profiled.

The company that hosts the site keeps ordinary server logs, which typically include the IP address, the page requested, and a timestamp. Those logs exist to deliver the site and keep it secure. If you write to the email address on this site, we will of course have your message and your address, and we will use them to answer you.

9. Legal bases for processing

For people in the United Kingdom, the European Economic Area, and other places with comparable law, the bases we rely on for the limited processing we actually do are:

• Performance of a contract for handling and verifying a subscription you asked to buy.
• Legitimate interests for keeping the app and this website working, secure, and free of abuse, and for understanding aggregated store statistics.
• Consent where your device asks for it, for example the notification permission, which you can withdraw at any time in your settings.

The data on your own device is under your control rather than ours, and we do not process it.

10. How long data is kept

Your habit data stays on your device until you remove it. You can clear it from inside the app, or delete the app, which removes its local database with it. Deleting the app does not cancel a subscription, and cancelling a subscription does not delete your local data.

Purchase records held by RevenueCat, Apple, or Google are kept for as long as those services and the applicable tax and accounting rules require. Emails you send us are kept for as long as needed to deal with the matter and any follow up.

11. Your rights

Depending on where you live, you may have the right to access your personal data, to correct it, to erase it, to restrict or object to processing, to receive it in a portable form, and to withdraw consent. You also have the right to complain to your data protection supervisory authority.

In practice: for everything the app stores on your phone, you already have direct and immediate access, and the fastest erasure is the in app reset or deleting the app. For subscription records, contact us and we will act on your request with our processor, or you can go to Apple, Google, or RevenueCat directly.

If you are in California, note that we do not sell or share personal information as those terms are used in the CCPA and CPRA, and we do not use personal information for cross context behavioural advertising. We will not discriminate against you for exercising a right.

12. Children and age

ClickQuit is intended for adults who already smoke or vape, and it is not directed at children. Do not use the app if you are under 18 or under the legal minimum age for tobacco or nicotine products where you live, whichever is higher.

We do not knowingly collect personal data from children. Since the app collects no personal data from anyone into our hands, there is nothing of a child's for us to hold. If you believe a child has been using the app, remove it from their device, and write to us if you have a concern.

13. Security

The app relies on the protections your phone already provides: app data is written to the app's own sandboxed storage, which other apps cannot read, and is covered by your device passcode and encryption. Keeping a passcode on your phone, and keeping the system updated, is the most useful thing you can do for the privacy of this data.

We take reasonable steps to protect the little information that does reach our service providers. No app, website, or transmission method can be guaranteed to be completely secure, and we cannot promise absolute security.

14. Where we are and where you are

The developer is established in Poland, in the European Union. ClickQuit is available in many countries, and the service providers named in section 5 may process data in the United States and other countries. Where a transfer of personal data out of the United Kingdom or the European Economic Area happens through those providers, it takes place under the transfer mechanisms those providers put in place, such as the European Commission's standard contractual clauses.

15. Changes to this policy

We may update this policy as the app changes or the law does. The current version always lives at this address, with its effective date at the top. If a change is significant, we will make it visible in the app or on this page rather than quietly swapping the text. Continuing to use the app after a change means the updated policy applies to you.

16. How to contact us

Questions about this policy, or about a request under it, can go to the address below. We answer in English.