Privacy Policy

The controller responsible for the processing of personal data in connection with the "Quit Day" App is:

Protecting your personal data is important to us.

The "Quit Day" App was designed so that personal data you enter within the App is, in principle, stored and processed exclusively on your own device.

We do not operate a backend or a database for the App. The App does not transmit the data you enter to our servers or any other systems operated by us.

In particular, no server-side storage of your smoking or health data takes place.

The App can generally be used without registration and without a user account.

Depending on how you use the App, the following information may be stored exclusively on your device:

• A display name of your choosing
• Information about your previous smoking behavior
• Number of cigarettes or other specified forms of consumption
• Price information
• Information about your previous smoking duration
• The date of your planned or actual quit date
• Information about relapses, including date and time
• Information about personal triggers or situations in which cravings occur
• Data relating to a personal reduction plan
• Personal notes and journal entries
• Contents of a personal letter to your future self
• A self-defined savings goal
• Progress and statistics information
• Language, currency, and notification settings

Some of the values displayed in the App, such as the number of smoke-free days, cigarettes avoided, or money saved, are calculated directly on the device from the data you entered and are not stored as a separate data record.

Some information entered within "Quit Day" may allow conclusions to be drawn about smoking or consumption behavior, and thus potentially about a person's health status.

This may include, in particular, information about the number of cigarettes consumed, the duration of smoking, the time of quitting, relapses, cravings, and personal triggers.

Insofar as such information qualifies as health data within the meaning of Art. 9 GDPR, it is processed exclusively on the user's device.

This information is not transmitted to us or to any server operated by us.

Processing takes place in order to provide the functions of the App expressly desired by the user, in particular for calculating and displaying personal progress, statistics, savings, smoke-free days, and comparable functions.

Insofar as explicit consent is required for the processing of special categories of personal data, this consent will be obtained prior to or during the relevant data entry.

The App uses the local storage of the end device to store certain App data.

Data is currently stored locally on the device via AsyncStorage.

The stored information is not automatically transmitted to a server operated by the provider.

Local storage serves in particular to ensure that personal settings, progress, and other information entered within the App remain available after the App is closed and reopened.

The data is generally protected from direct access by other apps through the security mechanisms of the respective operating system.

"Quit Day" does not currently apply additional end-to-end encryption to locally stored App data.

We therefore recommend protecting your device with appropriate security measures such as a secure device passcode, biometric access protection, and up-to-date operating system updates.

"Quit Day" can be used without registration and without a user account.

In particular, the App does not currently collect or store:

• An email address
• A password
• An Apple ID
• A Google account
• A server-side user ID

The display name possible within the App is merely a name stored locally on the device and does not constitute a server-side user account.

"Quit Day" does not have its own cloud synchronization.

The personal data stored within the App is therefore not automatically transferred between multiple devices.

In the event of a device change or loss, locally stored App data may be lost, unless a backup or recovery function provided by the operating system applies.

"Quit Day" does not currently use any own or embedded services for user analytics or tracking.

In particular, no services such as:

• Google Analytics
• Firebase Analytics
• Firebase Crashlytics
• Sentry
• Mixpanel
• Amplitude
• PostHog
• Meta/Facebook Tracking
• or comparable analytics and tracking services

are used.

We therefore do not create usage profiles regarding the behavior of our users within the App.

The App currently contains no advertising and does not use any advertising SDKs.

No personal data is therefore transmitted by "Quit Day" to advertising providers for the purpose of personalized advertising.

"Quit Day" may use notifications to remind the user of, for example, personal goals, progress, or other functions set up within the App.

Notifications are scheduled and triggered locally on the device.

The App does not currently request an external push token for this purpose and does not transmit any push tokens to a server of its own.

The user can disable notifications at any time via their device settings.

"Quit Day" currently has no function that connects users with one another or exchanges personal statistics between users.

In particular, there is:

• No friends list
• No leaderboard
• No public user profiles
• No user-to-user data exchange

The App may only provide a system-native sharing function, with which, for example, a link to the App or website can be shared via the sharing functions available on the device.

The user themselves decides whether and with whom they share the content.

"Quit Day" does not currently process uploaded profile pictures.

The avatar displayed in the App may only be generated from the initials of the locally entered display name.

No profile pictures are uploaded to a server or stored in the cloud.

The App may contain links to external websites or social media offerings, such as our website and our social media profiles.

By clicking such a link, the user leaves the App and opens the respective external application or website.

From that point on, the privacy policy of the respective external provider applies.

"Quit Day" does not transmit any personal data stored within the App to the respective providers simply by opening these links.

"Quit Day" is offered via the Apple App Store and the Google Play Store.

The respective privacy policies of Apple or Google additionally apply to downloading and using the respective store platform.

A planned paid purchase of the App is intended to be processed exclusively via the in-app purchase systems provided by Apple or Google.

"Quit Day" itself does not process any credit card, bank account, or comparable payment data.

Insofar as Apple or Google process personal data in connection with the purchase, this processing occurs under the respective provider's own responsibility, in accordance with their own privacy policies.

Insofar as the GDPR applies to the respective processing, the processing of personal data is carried out in particular on the basis of Art. 6 GDPR.

Insofar as special categories of personal data, in particular health data, are processed and a corresponding legal basis is required, processing takes place — where applicable — on the basis of Art. 9(2) GDPR.

The specific legal basis depends on the respective processing and the circumstances of use.

Data entered within the App is generally stored locally on the device for as long as it is required for the use of the corresponding App functions, or until the user deletes it.

Since no server-side storage takes place by the provider, the corresponding data is not located in a database operated by us.

The user can delete the data stored within the App via the function provided for this purpose.

The App offers a function for deleting locally stored personal App data.

Using the corresponding deletion function resets the locally stored App state. This deletes, in particular, personal settings, progress data, journal entries, personal letters, display name, savings goal, and reduction plan.

Since this data is not stored server-side, no additional deletion on a server of the provider is required after deletion.

Uninstalling the App may also result in locally stored App data being removed from the device. This depends on the respective operating system and backup settings.

Insofar as the GDPR applies to the processing, data subjects have, in particular, the following rights:

Right to Information

You have the right to request information about whether and which personal data concerning you is being processed.

Right to Rectification

You have the right to request the correction of inaccurate personal data.

Right to Erasure

Under the statutory requirements, you have the right to request the deletion of personal data.

Right to Restriction of Processing

Under the statutory requirements, you have the right to request the restriction of the processing of your personal data.

Right to Data Portability

Under the statutory requirements, you have the right to receive personal data in a structured, commonly used, and machine-readable format, or to request its transfer to another controller.

Right to Object

Under the statutory requirements, you have the right to object to the processing of your personal data.

Right to Withdraw Consent

Insofar as processing is based on your consent, you may withdraw this consent at any time with effect for the future.

The lawfulness of processing carried out prior to the withdrawal remains unaffected.

Since the essential personal data of "Quit Day" is processed exclusively locally on the device, many rights — in particular rectification and deletion — can be exercised directly through corresponding functions within the App.

You have the right to lodge a complaint with a data protection supervisory authority regarding the processing of your personal data.

The competent supervisory authority may depend, in particular, on your habitual residence, your workplace, or the place of the alleged infringement.

For the controller based in Bavaria, the Bavarian State Office for Data Protection Supervision (BayLDA) may be considered the competent data protection supervisory authority.

"Quit Day" is not exclusively directed at adults.

The App does not include age verification and no user account.

Insofar as users are minors, the statutory provisions for the protection of minors apply, in particular the applicable data protection requirements.

For functions requiring consent, the statutory requirements for the validity of such consent apply.

We take appropriate technical and organizational measures to protect personal data against loss, misuse, and unauthorized access.

Since the essential personal data of "Quit Day" is processed exclusively locally on the device, no central storage of this data takes place in a database operated by us.

The user is responsible for protecting their own device against unauthorized access through appropriate security measures.

We reserve the right to amend this Privacy Policy if the App's functions, legal requirements, or the nature of data processing change.

The current version of the Privacy Policy will be made available via the designated information channels, in particular via our website and/or within the App.

If you have any questions about data protection or the processing of personal data, you can contact us at:

support@quitday.online