Privacy Policy
Last updated: August 3, 2026
This policy explains what QuitOS collects, why, and what we do with it. It applies to the QuitOS mobile apps and to quitos.app. QuitOS is operated by quitOS LLC, a Louisiana limited liability company.
The short version. We collect what the app needs to work — your account, your quit profile, and what happens during a rescue. We do not sell your data. We do not use it for advertising. If you are on a free account, nothing you write is ever sent to an AI provider, because free accounts do not use AI at all.
1. What we collect
| Category | What it is | Why |
|---|---|---|
| Account | Email address, first name, time zone | To create and secure your account and show times correctly |
| Quit profile | Device type, nicotine strength, how often you vape, how long a device lasts, monthly spend, how soon after waking you first vape, your quit method and quit date, your triggers, and your reasons for quitting | To personalize your plan, dashboard, and rescues |
| Rescue activity | When a rescue started and ended, how long it lasted, the outcome (resisted or vaped), the trigger, where you launched it from, and craving intensity before and after | To run the rescue and show you your real patterns |
| Check-ins | A daily craving level from 1 to 5 | To track how your cravings change |
| Slips | Time, trigger, and any note you add | To power slip recovery and adjust your plan |
| Puffs | A timestamp each time you log one | To show when you vape and to run a taper |
| Subscription | Your tier, status, trial end date, and which app store you bought through | To unlock paid features |
| Notification settings | Whether reminders are on, and your quiet hours | To send nudges only when you want them |
| Technical | App version, device type, crash and error logs | To keep the app working |
We do not collect your contacts, your location, your photos, your health records, or any data from Apple Health or Google Fit.
2. Sensitive information
Information about nicotine use is personal and, in some places, legally sensitive. We treat it that way. It is stored on your own row, protected by row-level security so that only your account can read it, and it is never used for advertising or sold to anyone.
3. The AI coach
QuitOS Plus includes an AI coach. When you use it, the relevant parts of your quit profile and recent activity are sent to our AI provider so it can respond usefully in the moment. That provider processes the request and returns a reply; it is contractually prohibited from using your data to train its models.
Free accounts never touch the AI. This is enforced on our servers, not just hidden in the app. If you are not a Plus subscriber, no request containing your data is ever sent to an AI provider.
The AI coach is a support tool. It does not give medical advice, and it will point you to a professional or a quitline for anything clinical.
4. Who else processes your data
| Provider | What they do |
|---|---|
| Supabase | Database, authentication, and server functions |
| OpenAI | Powers the AI coach for Plus subscribers only |
| RevenueCat | Manages subscriptions and entitlements |
| Apple & Google | Process payments and distribute the app. We never see your card details. |
| Expo | App builds and over-the-air updates |
These are service providers acting on our instructions. We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
5. How long we keep it
We keep your data for as long as your account exists. Delete your account and we delete your personal data within 30 days, except where we are legally required to keep records of a transaction. Anonymous, aggregated statistics that cannot identify you may be retained.
6. Your rights
Wherever you live, you can ask us to:
- Give you a copy of your data
- Correct anything that is wrong
- Delete your account and everything in it
- Stop sending you notifications
Email support@quitos.app and we will respond within 30 days. If you are in California, the EEA, or the UK, you have additional rights under the CCPA/CPRA, the GDPR, or the UK GDPR, including the right to object to processing and to lodge a complaint with your regulator. We do not sell personal information as those laws define it.
7. Security
Data is encrypted in transit and at rest. Every table enforces row-level security so one account cannot read another account’s data. No system is perfectly secure, and we will not pretend otherwise — but we design as though the data matters, because it does.
8. Children
QuitOS is not intended for children under 13, and we do not knowingly collect their data. If you believe a child has created an account, email us and we will remove it. See our Terms of Service for the minimum age to use QuitOS.
9. Changes
If we change this policy in a way that materially affects you, we will tell you in the app before it takes effect. The date at the top always reflects the current version.
10. Contact
quitOS LLC — support@quitos.app