Privacy Policy

BeQuit is a quit-smoking app with an optional 7-Day Quit-Ready Plan on this website. Quitting means recording things you may not want anyone else to see, so this policy is written to be read rather than to cover us. The iPhone app keeps your smoking logs on your phone. The website Quit-Ready Plan saves only the choices and optional short notes you explicitly agree to save, so you can return through your verified email.

1. The iPhone app starts without your identity

BeQuit begins without sign-up. There is no password, name or social login. When first opened, it creates an anonymous account identified only by a random identifier. The exceptions are recovery of a subscription bought on this website and access to the website Quit-Ready Plan. For a website purchase, you verify the email used at Stripe checkout so the purchase can be linked safely. For the plan, you provide an email for the seven-day sequence and can use a one-time link or code sent to that address to reopen your saved plan on another device.

2. What stays on your phone

The sensitive part of the iPhone app never leaves your device. Stored only on your phone, in the app's own storage:

• Every cigarette and every craving you log, with its time and trigger
• Anything you write, including your reason for quitting and your vow
• Your pattern, your windows, your score, your records and your progress
• Your notification preferences and quiet hours

We cannot read any of it. It is not backed up to us. If you delete the app without deleting your account, that data goes with it.

3. What we store on our servers

Only what is needed to restore your setup on a new device, held against your anonymous identifier:

• Cigarettes per day, cigarettes per pack and price per pack
• Your currency
• The date your quit journey started

That is the whole list for restoring the iPhone app setup. Our backend is Supabase, hosted in the European Union, with access restricted so a row can only be read by the account that owns it.

The website Quit-Ready Plan

If you join the plan, we store the email address, signup time, the wording and time of your email consent, and whether you explicitly accepted private saving. After you accept private saving, the plan can also store:

• The time you saved a smoking moment
• The situation and what the cigarette seemed to provide
• Any optional short note you choose to add
• Your daily choices, completion state and the map built from them

This information is kept in a separate server-only Supabase table tied to an internal subscriber identifier. The public browser key cannot read that table. Access requires the signed private link sent for the plan or a verified one-time email link or code. The plan content is not included in marketing emails and is not sent to analytics or advertising services.

Community interest list

If you separately ask to hear about a future BeQuit community, Resend stores your email in a dedicated community-interest segment together with the wording version and time of that request. Joining the Quit-Ready Plan does not add you to this list. No payment is taken and no community account is created. You can unsubscribe through an email or ask us to remove the record.

If you send feedback

If you choose to send feedback from Settings, we receive what you wrote along with basic technical details about your device and app version so we can reproduce the problem. We only receive this if you submit it.

4. Purchases

Subscriptions may be bought from Apple or from this website. RevenueCat tells the app whether the resulting entitlement is active. For an Apple purchase, we do not see your card details or Apple ID. Apple handles that transaction under its privacy policy.

For a website subscription, Stripe Managed Payments collects the payment and confirmed email. We store the lowercased email, Stripe customer, checkout, subscription, product and price identifiers, currency, amount, purchase status, and claim or revocation timestamps. We do not receive or store the full card number. After you verify the same email in BeQuit, the purchase is attached to the random app account identifier and RevenueCat receives the subscription record needed to grant or revoke Pro access. Stripe or Link retains the transaction data under its own privacy terms.

5. Analytics and advertising

DataFast, PostHog, RevenueCat and Meta receive limited information for analytics, subscriptions and advertising attribution. None of them receives the contents of your iPhone logs or website Quit-Ready Plan.

Analytics

We use DataFast on the website and PostHog in the iPhone app to count actions such as opening a page, finishing setup or subscribing. Analytics is enabled only after the relevant consent. These services do not receive your cravings, slips, optional plan notes, or the choices inside your Quit-Ready Plan. On plan pages, DataFast may receive a content-free event such as that a lesson was opened or a moment was saved, together with the day number.

Advertising

We advertise BeQuit on Facebook and Instagram, and the app includes Meta's software so we can measure which adverts lead to subscriptions. On every install, Meta's software provides a random identifier for that installation, called a Facebook anonymous ID. We give that identifier to RevenueCat. RevenueCat then sends limited subscription events — such as a trial starting, an initial purchase, a trial converting or a subscription renewing — and the associated revenue to Meta through Meta's Conversions API. Meta uses this information to attribute adverts, measure their performance and improve ad delivery.

For Apple Ads, RevenueCat may collect Apple's short-lived AdServices attribution token and exchange it with Apple to determine whether an install came from an Apple ad and which campaign produced it. This first-party attribution does not require the iOS tracking permission and does not contain anything you log in BeQuit.

The Facebook anonymous ID is not Apple's advertising identifier and is used even if you do not allow tracking. RevenueCat may also process limited technical information needed to match and deliver these events, including your IP address, device vendor identifier, app version and device information. We do not send Meta your smoking history, cravings, journal entries, reason for quitting, vow or any other content you enter in BeQuit.

iOS separately asks whether you allow tracking. If you say yes, we also collect Apple's advertising identifier (IDFA), which can help Meta match a subscription to an advert more precisely. If you say no, we do not collect the IDFA; the app works exactly the same, but subscription events may still be sent using the Facebook anonymous ID and matching is less precise. You can change your choice at any time in Settings, Privacy and Security, Tracking.

You can read the RevenueCat privacy policy and the Meta Privacy Policy.

What we still do not do

• We do not sell your data
• We do not share your data with data brokers
• We do not send what you log to anyone, including advertisers
• We do not run crash-reporting services in the app
• We do not build advertising profiles from anything you write

6. Notifications

BeQuit can remind you before a window your own logs revealed, and send a short summary of your day in the evening. These are scheduled on your phone by the app itself rather than sent from a server, so their contents never reach us. You can turn either off in Settings, set quiet hours, or refuse notifications entirely, and the app still works.

7. Deleting everything

Settings has a "Delete account and data" option. It removes your account and everything associated with it from our servers, then erases the app's data from your phone. It is immediate and cannot be undone.

Deleting your account does not cancel the billing agreement. Cancel in iPhone Settings if Apple billed you, or through the Stripe/Link management link if you subscribed on this website.

The website Quit-Ready Plan has a "Remove my saved plan" control. It deletes the saved moments, choices and optional notes from the plan table and clears the copy on that device. This does not unsubscribe the email address or erase the consent record we need to show how the sequence was requested. Use the unsubscribe link in any email to stop marketing, or contact us to request deletion of the remaining subscriber record.

8. Your rights

Under the GDPR and similar laws you may request access to, correction of, or deletion of your personal data. Deletion is available directly in the app and for Quit-Ready Plan content on the plan page. For anything else, write to us and we will answer.

9. Children

BeQuit is intended for adults who smoke. It is not directed at children and we do not knowingly collect information from them.

10. Health

BeQuit is not a medical device and does not give medical advice. Recovery timelines shown in the app are established general timelines, not measurements of your body. Talk to a doctor about quitting, particularly if you use medication or nicotine replacement.

11. Changes

If this policy changes in a way that affects what we collect, we will say so in the app. The date at the top always reflects the current version.

12. Contact

Questions about this policy or your data: support@bequit.app.