Quitwell keeps your recovery on your phone. There is no account and no advertising. The only thing we see is anonymous usage statistics — never what you write.
No personal data. There is no sign-up, no login, no name and no email. Your counters, notes, goals and milestones stay on your device (and in your own iCloud if you turn sync on). The developer cannot read any of it.
Anonymous usage statistics. The app uses Firebase Analytics (Google) to count how features are used — for example that a counter was created, a milestone was reached, or the full version screen was opened. These events carry no notes, no names and no free text. They are tied to a random installation identifier, not to you, and are not used for advertising or tracking across apps. You can read Google's terms at firebase.google.com/support/privacy.
Purchase status. The app uses RevenueCat to check whether the full version has been bought. RevenueCat receives a random app user identifier and the App Store receipt from Apple — never your payment details or your Apple Account. See revenuecat.com/privacy.
Everything you enter stays in the app's own storage on your device: your counters and start dates, the reason you gave for quitting, the money and time figures you entered, logged slips and restarts with their notes, goals and custom milestones.
That data is readable only by the app and its home screen widget. It is removed when you delete the app.
If you turn on iCloud sync in Settings, your data is written to your own private iCloud database so your devices stay in step. It travels between your device and Apple's servers under your Apple Account. The developer has no access to it and no way to read it. Turning sync off stops it.
The full version is a single optional purchase handled by Apple through the App Store. We never see your payment details. The app, through RevenueCat, only checks whether the purchase is active so it can unlock the extras and restore them on a new phone.
The app does not read from or write to Apple Health, and asks for no health permissions.
Notifications are off by default. If you turn them on, milestone alerts and the single daily reminder are scheduled locally on your device — nothing is sent from a server, and no push token leaves your phone. The app never reads your contacts, photos or location.
If you turn on App lock, Face ID, Touch ID or your passcode is checked by iOS. The app only learns whether the check passed; it never sees or stores biometric data.
You can save a backup file of your whole history at any time from Settings → Your data, export it as a table or a PDF report, and erase everything from the same screen. Files are made on your phone and sent nowhere. Deleting the app removes the local data; if iCloud sync was on, deleting the app's data from iCloud is done in iOS Settings under your Apple Account.
The app is not directed at children and knowingly collects no personal data from anyone.
If this policy changes, the new version will be published on this page with a new date below.