Your quit data stays on this phone
Your logs, plan, check-ins and reasons are stored on your iPhone and included in your device backups if you have them turned on. We don't receive your quit data. A copy only leaves the phone another way when you export a backup file yourself.
That includes everything you enter in QuitOne: your intake answers, what you use and what it costs, your quit-by date, every log, your check-ins, your reasons and your settings. There is no QuitOne server and no account, so there is nowhere else for it to go.
- Widget. The home-screen widget reads its numbers from storage shared between the app and the widget on your phone.
- Notifications. Reminders and check-ins are scheduled on your phone. We don't use a push server.
- Face ID. If you turn on the lock, iPhone checks your face or passcode. The app only learns whether it worked; we never get any biometric data.
Purchases
Purchases go through Apple. RevenueCat gets an anonymous ID and your purchase history (used to run subscriptions and for purchase statistics), never your quit data.
Apple takes your payment; we never see your card or your Apple ID. We don't give RevenueCat your name, email or anything else about you, and the anonymous ID isn't linked to your identity or used for tracking. You can read Apple's privacy policy and RevenueCat's privacy policy.
Anonymous usage and crash reports
To find where setup loses people and to fix bugs, the app sends a few anonymous events to PostHog, our analytics service: that the app opened, which setup step and tab you reached, that the plan was shown, when a subscription screen opened or closed and where from, that a trial, purchase, free week or restore started (yearly or monthly, never a price, with a neutral letter for the price test you were placed in), that the daily check-in opened, that a milestone card was shared (not which one), that the invite-a-friend button was tapped and whether an invite was shared and from which screen (never who to), whether a trial became a subscription or was cancelled or refunded (with the screen it started from, yearly or monthly), whether day 8 asked you to confirm your week and whether you did, that you logged for the first time or accepted a new step (never a number or a limit), whether you allowed notifications, that prices didn't load on a subscription screen, and reports when the app crashes or hits an error.
They never include your quit data: no logs, counts, limits, reasons, times, cravings, check-in answers, money, what you use or your dates. Error messages are cleaned of anything you typed before they're sent. Each phone gets a random ID that isn't linked to you, your Apple ID, your purchases or the RevenueCat ID. There's no sign-in, no profile, no screen recording, no tapping or typing capture, and no device name. PostHog sees your IP address when a report arrives, like any server; we've told it not to look up your location and to discard the address.
- Turn it off in Settings › Privacy › Share anonymous usage. Nothing more is sent, including anything not yet sent.
- Delete quit data also gives the phone a new random ID.
What we don't do
- No account or sign-up.
- No person profiles, screen recording or advertising IDs; the anonymous usage above is all the app sends.
- No ads.
- No tracking across other apps or websites.
- We don't sell your data, and we don't share it beyond the services named on this page.
Apple gives every developer App Store totals, such as downloads and sales, and anonymous crash reports from people who chose to share them with developers in their iPhone settings. None of this includes your quit data.
Export your data
Go to Settings › Backup. Export backup makes a file of your intake answers, plan, logs, check-ins, reasons and settings that you can import again later, on this phone or a new one. Export CSV makes a spreadsheet of your logs. Either way, you choose where the file goes. Once you save or send it somewhere, that copy is handled by the app or service you chose.
Import reads a backup file and replaces the plan, logs, check-ins, reasons and settings on this phone with the ones in the file.
Delete your data
Go to Settings › Delete quit data. This removes your plan, logs, reasons, check-ins and reminder settings from this phone. Your privacy settings (Face ID lock, Discreet notifications, Show numbers on the widget, Share anonymous usage) stay as they are, and the phone gets a new anonymous usage ID. A few app flags, such as which offers you've already seen, stay until you delete the app. Deleting the app removes everything except the dates of any offers you've already used (a one-time discount or the free week), which iPhone keeps in its Keychain so they aren't offered twice. Those dates aren't quit data and are never sent anywhere.
Copies you made yourself are yours to delete: backup or CSV files you exported, and older iPhone backups in iCloud or on a computer.
Deleting the app doesn't cancel a subscription. Apple keeps its own purchase records. RevenueCat's record is anonymous, so we can't look it up by your name. To have it removed, email us the Order ID from Apple's purchase receipt email and we'll ask RevenueCat to delete it.
This website
The website (quitone.app) has no forms and collects nothing beyond what any web server sees (below).
- Old waitlist. Before launch, the site had a waitlist. If you joined it, your email address and the habit you picked went to Brevo, our email service, and is used only for QuitOne launch updates. Every email has an unsubscribe link, or email us and we'll remove you. See Brevo's privacy policy.
- Old survey. If you answered the optional two-question survey after joining (what you're trying to quit, and what you'd pay), your answers went to Tally, our form service. We use them to decide what to build. See Tally's privacy policy.
- Hosting. Cloudflare hosts the site. Like any web server, it receives your IP address and browser details when pages load. The site uses your device's own fonts and loads none from third parties.
We don't add analytics or ad trackers to the site. Your waitlist email is never linked to the app.
How long data is kept
- Quit data stays on your phone until you delete it or the app.
- Waitlist emails and survey answers are kept until you ask us to remove them, and deleted within 12 months of the app's launch.
- Anonymous usage and crash reports are kept by PostHog for up to 12 months, then deleted.
- Purchase records are kept by Apple and RevenueCat under their own policies, as long as needed to run subscriptions and meet legal duties.
Every service named on this page only processes data to provide its service to us, under its own privacy policy, and is expected to protect it at least as well as this policy does.
Adults only
QuitOne is for adults 18 and over. It isn't meant for children, and we don't knowingly collect anything from them.
Your rights
Depending on where you live, you may have the right to see, correct, export or delete data about you. In the app, all of it is already on your phone and in your hands. For your waitlist email or survey answers, email us and we'll do it.
Changes
If this policy changes, we'll update it here and change the date at the top. If a change affects what leaves your phone, we'll say so in the app first.
Contact
Questions about your privacy: quitoneapp@gmail.com.