Privacy Policy

Quit Compass — Quit Smoking, Vaping & Alcohol Tracker

Last Updated: November 5, 2026

1. Introduction

This Privacy Policy describes how Quit Compass (the "App"), developed and operated by Viksva, MB, a company registered in Vilnius, Lithuania ("we," "our," or "us"), collects, uses, and protects information when you use our mobile application and related services. We aim to handle data transparently and in accordance with applicable data-protection laws, including the EU General Data Protection Regulation (GDPR).

2. Information We Collect

2.1 Information You Provide Directly (stored on your device)

• Tracker setup: The addiction type(s) you choose (smoking, vaping, alcohol), your quit date/time, your consumption baseline (for example cigarettes per day, puffs per day, drinks per week), cost information, and your local currency.
• Activity you log: Cravings (such as intensity, trigger, and whether you resisted), pledges, relapse events and notes, and any free-text you enter.
• Preferences: Onboarding answers, reminder/notification settings, and other in-app settings.
• Support communications: Messages and information you send to us by email.
• Feature suggestions and votes (optional): If you use "Suggest a feature", the ideas you vote for and any suggestion text you choose to send are transmitted to our server, together with the app version, platform, language, whether you have a subscription, and a random identifier created only for this feature. They are not linked to your tracker data, your name, or any other identifier. A suggestion is reviewed by an AI model, which rewords and translates it; if it is suitable it is then published anonymously on the in-app board, where other users can see it and vote for it. Suggestions that are unsuitable or contain contact details are not published. Your original text is never shown to other users. Other users can report a published idea, and we can hide or remove it. Please do not include personal or health details in a suggestion.

This content is generally kept on your device and is not sent to us as identifiable personal records, except where you email it to us for support, choose to send a feature suggestion or vote, or turn on the optional Community feature, which sends only the limited items listed in Section 3A.

2.2 Information Collected Automatically

• Usage & Event Data (only if you opt in): Which features and screens you use and key in-app events (for example completing onboarding, creating a tracker, logging a craving or relapse, unlocking a milestone, or starting a trial or purchase). We use these to understand usage, improve the App, and measure advertising (see Section 4). Event data is generally aggregated/pseudonymized and is not intended to identify you personally. These events include which habit you are quitting (smoking, vaping or alcohol), which is health-related information. They are pseudonymous and never linked to your name or email. They are collected only if you choose "Share usage data" when the App asks you, in every country; until you answer, and if you choose "Don't share", no usage analytics is sent. You can change your choice at any time in Settings (Section 4.1).
• Device Information: Device model, operating system version, app version, and a device/installation identifier.
• Abuse-Prevention & Security Signals: Where used, signals that help ensure requests come from a genuine, untampered app.
• Diagnostics: Crash reports and error logs.
• Attribution Data: Where you install the App from an advertisement, limited install/attribution information (for example from Apple Search Ads or the Google Play Install Referrer) used to measure ad performance (see Section 4).
• Purchase Data: Subscription and purchase events, managed through the app stores and RevenueCat (see Section 4).

2.3 What We Do NOT Collect

• The App does not use the camera and does not process photos or biometric data.
• We do not ask for your real name to use the core features, and we do not sell your personal information.
• We never collect free text you type, your journal, mood notes, or relapse notes. Even with the optional Community feature on, none of these is sent (see Section 3A).

3. Notifications

If you enable them, the App may send local reminders and motivational notifications (for example milestone alerts or daily encouragement). You can turn notifications off at any time in the App or in your device settings. Notifications that come from our server for Community are covered in Section 3A.5 and are separate from these local reminders.

3A. Optional Community Features

Community is optional and off until you turn it on, from the card on the Home screen or in Settings. The App works fully on your device without it. It lets you see how many people quitting the same thing resisted a craving, send and receive preset kind words, and be matched with one quit partner. Community is for people aged 16 and over (Section 9). Community is not an account: there is no name, email or phone number. Which habit you are quitting is health-related information, so we use it for Community only with your explicit consent, which you give when you turn Community on. The controller is Viksva, MB (Section 11).

3A.1 What is sent once you turn it on

• A random install ID, created when you turn Community on. It is not linked to your name, email or purchases, and we store it only as a salted hash.
• Your addiction type (smoking, vaping or alcohol) and, when you act, a note that you resisted a craving or made a pledge.
• A rough day range such as "8–30 days", used when you send or ask for kind words.
• The preset messages you choose to send. When you ask for kind words, the reason you pick (a craving, a hard day or a slip).
• If you find a quit partner: a generated nickname (like "Fox 42"), your day count, whether you pledged today, the day you were last active and the garden items you have placed. The exact day of your last slip is sent only if you switch on sharing it.
• If you turn on Community notifications: your device's push token, your time zone offset (UTC offset) and your quiet-hours settings. This happens only while Community notifications are on.
• Your IP address, to limit abuse. Only a hashed version is kept, for up to 3 days, separately from the data above.

3A.2 What is never sent

Anything you type, your journal, mood notes, relapse notes, photos, your name, your email, your contacts or your location. There is no free text anywhere in Community: everything is picked from fixed lists. Community does not send your quit date, consumption amounts or costs.

3A.3 Who sees what

• Everyone: only anonymous totals, such as how many people quitting smoking resisted a craving this week. A total is shown only when it reaches at least 3.
• People who answer your request for kind words: the reason you picked, your rough day range, and that you are quitting the same thing. They do not learn who you are.
• People who receive your kind words: the message you chose and your rough day range. It is anonymous.
• Your quit partner: your nickname, day count, whether you pledged today, when you were last active, a preview of your garden, and the exact day of your last slip only if you share it. You can end the partnership at any time.
• You can block or report anyone who sends you kind words. After 3 reports, a person can no longer send kind words or be matched.

3A.4 How long it is kept

• Requests for kind words: 24 hours. Kind words and thank-yous waiting for you: 30 days.
• Your Community record, including your partner profile and push token: up to about 400 days after you were last active. A finished partnership is removed 30 days after it ends.
• Block records and a hashed record that two people were paired: up to one year.
• Rate-limit counters and the hashed IP address: up to 3 days.
• Anonymous counts are not linked to you. Daily totals are kept for about a year, and all-time totals are kept.
• Turning Community off deletes everything linked to your install ID right away (see Section 3A.7).

3A.5 Community notifications

Community notifications are optional and need your permission on the device. They only say that something is waiting (for example "Someone sent you kind words"), never your addiction or any health detail. To send them we store your push token, your time zone offset and your quiet-hours settings, and only while Community notifications are on. Quiet hours apply and there are at most a few a day. Turn them off in Settings, or turn Community off, and the token is deleted. Notifications are delivered through Firebase Cloud Messaging (Section 4.4).

3A.6 Where it is processed and legal basis

Community runs on Google Cloud Functions and Cloud Firestore in the us-central1 region (Iowa, USA), and uses Firebase Cloud Messaging for notifications (Section 4.4). Your Community data is therefore transferred to and stored in the United States; see Section 10 for the safeguards. We do not sell this data and do not use it for advertising.

Our legal basis is your explicit consent (GDPR Articles 6(1)(a) and 9(2)(a)). You can withdraw it at any time by turning Community off in Settings. Withdrawal does not affect processing before it. The hashed IP address is kept for abuse prevention on the basis of our legitimate interests. Saying no costs you nothing: the rest of the App works the same.

3A.7 Deleting your community data

4. Third-Party Services

We integrate the following third-party services, each of which has its own privacy policy and terms. We are not responsible for their data practices:

4.1 Firebase / Google Analytics (Google)

We use Google Firebase / Google Analytics for app analytics, diagnostics, and (where used) security and abuse prevention, and Firebase Remote Config for feature settings, which runs whatever you choose below and sends no usage analytics. Google Analytics is opt-in for everyone, in every country. The App asks you whether to share usage data ("Share usage data" or "Don't share"). Until you answer, and if you choose "Don't share", Google Analytics collection is turned off and no usage analytics is sent.

If you choose "Share usage data", Google Analytics collects app events, a device/installation identifier, and in-app purchase/subscription events to help us understand usage, fix problems, and improve the App. Analytics events include which habit you are quitting (smoking, vaping or alcohol), which is health-related information. This is pseudonymous: it is tied to a device/installation identifier, never to your name or email. Google processes this data in the United States (see Section 10). In that case we may also give RevenueCat (Section 4.3) the Google Analytics identifier, so that subscription events can be reported to Google Analytics; we do not do this if you have not opted in.

In the EEA, UK, and Switzerland, after you choose "Share usage data", Google's consent-management (UMP) form may also appear. Your answer there can only restrict what is collected further; it never turns analytics on if you chose "Don't share".

Changing your mind: you can turn "Share usage data" off at any time in Settings. Collection stops right away and the App resets its Google Analytics identifier. Withdrawal does not affect data sent before it. The App works the same either way. This data is processed by Google in accordance with Google's Privacy Policy.

4.2 Advertising & Attribution (Google Ads, Apple Search Ads, Install Referrer)

We advertise the App and measure whether our ads work. To do this, we use limited install and attribution data (for example from Apple's AdServices / Apple Search Ads and the Google Play Install Referrer) and conversion events, which may be shared with advertising platforms such as Google Ads and with RevenueCat for campaign measurement. We use this to optimize advertising and understand install sources, not to build profiles about your recovery.

Install attribution does not depend on your analytics choice. When the App starts, it lets RevenueCat collect the install source, using Apple's AdServices attribution token on iOS and the Google Play Install Referrer on Android, whether or not you chose "Share usage data". This data does not include which habit you are quitting or anything you log in the App.

Conversion events from Google Analytics are used to measure Google Ads only if you chose "Share usage data" (Section 4.1), and the events we use for this never include which habit you are quitting. Ad personalisation and remarketing are always turned off: we do not use your usage data to show you personalised ads or to build advertising audiences. In the EEA, UK, and Switzerland, Google's consent choice (Section 4.1) applies in addition.

4.3 RevenueCat and Subscription Management

• Payment Processing: All payments are processed by your device's app store (Apple App Store or Google Play Store), not by us.
• Subscription Data: RevenueCat processes subscription and purchase status to enable paid features and may assign an anonymous user ID to track entitlement status across devices, and may receive the attribution data described in Section 4.2.
• Third-Party Processing: RevenueCat processes information according to its own privacy policy, and we are not responsible for its practices.

Subscription Plan Details:

• Monthly Subscription: Recurring monthly billing. May include a free trial (as shown at purchase); billing begins automatically after any trial unless cancelled.
• Lifetime (One-Time Purchase): A single, one-time, non-recurring payment. "Lifetime" refers to the lifetime of the App, not your lifetime (see our Terms of Service, Section 6.5).
• Automatic Renewal: The monthly subscription renews automatically unless cancelled through your app store account before the current period ends.

4.4 Google Cloud Functions, Cloud Firestore and Firebase Cloud Messaging (Google)

If you turn on Community, our servers run on Google Cloud Functions and store data in Cloud Firestore, both in the us-central1 region (Iowa, USA). If you turn on Community notifications, Google's Firebase Cloud Messaging delivers them to your device. Google acts as our service provider (processor) for this, under Google's terms. See Section 3A for what is sent and Section 10 for international transfers.

4.5 App Stores

The Apple App Store and Google Play Store distribute the App and process payments and refunds under their own policies.

4.6 Third-Party Disclaimer

5. How We Use Information

• Provide the service: Run your trackers, counters, craving tools, timelines, and reminders (all for self-help/informational purposes only).
• Operate and secure the App: Manage entitlements and subscriptions, prevent abuse, and keep the App working.
• Improve the App: Analyze aggregate usage and diagnose crashes and errors.
• Measure advertising: Understand which ads and channels lead to installs and, if you opted in to sharing usage data, count conversions (without your habit) to optimize our advertising.
• Community (only if you turn it on): Show anonymous totals, deliver preset kind words, match and show you to a quit partner, send Community notifications, and prevent abuse.
• Support: Respond to your inquiries.
• Product feedback: Read feature suggestions and count votes to decide what to build next, and publish reworded suggestions anonymously on the in-app board so other users can vote for them.
• Legal compliance: Meet legal obligations and protect our rights.

6. Data Storage and Security

• Local-first: Your tracker data (quit dates, baselines, cravings, pledges, relapse notes, and results) is stored locally on your device. The exception is the optional Community feature, which sends the limited items in Section 3A once you turn it on.
• Limited transmission: Diagnostics, attribution, and purchase data are transmitted to the third parties described in Section 4 to operate and improve the App, and usage analytics only if you opt in (Section 4.1). Feature suggestions and votes you choose to send are stored on our servers, hosted by Google Cloud. Suggestions are reviewed, reworded and translated by Google's Gemini AI models, which we use as a service provider to process them on our behalf. If you turn on Community, the items in Section 3A are stored on our servers, hosted by Google Cloud in the USA, linked only to a random hashed ID.
• No method is 100% secure: No method of transmission or storage is completely secure. While we take reasonable measures, we cannot guarantee absolute security.

7. Data Retention

• Tracker data: Stored locally on your device only; not stored on our servers, except for the limited items you choose to send by turning on the optional Community feature (see below). You can delete it at any time.
• Community data (opt-in): Requests for kind words 24 hours; kind words and thank-yous waiting for you 30 days; your Community record, partner profile and push token up to about 400 days after you were last active; finished partnerships 30 days; block and pairing records up to one year; rate-limit counters and the hashed IP address up to 3 days; anonymous counts are not linked to you (daily totals about a year, all-time totals kept). Turning Community off deletes everything linked to your install ID immediately (Section 3A.7).
• Analytics & diagnostics: Retained in aggregated/pseudonymized form for app improvement, per the providers' policies. Usage analytics is collected only while "Share usage data" is on; turning it off stops collection and resets the App's Google Analytics identifier.
• Attribution data: Retained by the advertising/attribution providers and RevenueCat per their policies.
• Subscription data: Managed by the app stores and RevenueCat.
• Feature suggestions and votes: Kept while they help us plan the App's development and deleted when no longer needed. Published ideas stay on the board until we remove them. Because they are not linked to you, we may be unable to find a specific suggestion on request.

8. Your Rights and Choices

Subject to applicable law, you may have the right to access, correct, delete, restrict, or port your personal data, to object to certain processing, and to withdraw consent. Because most of your data is stored locally on your device, you can exercise many of these rights directly by deleting data in the App or removing the App, and by changing consent and tracking choices in the App or your device settings. For other requests, contact us using the details in Section 11. You also have the right to lodge a complaint with a supervisory authority (in Lithuania, the State Data Protection Inspectorate, vdai.lrv.lt).

Usage analytics: you can withdraw your consent at any time by turning "Share usage data" off in Settings (Section 4.1). Because analytics data is pseudonymous and not linked to your name or email, we may be unable to find it for an access or deletion request from outside the App.

Community data: turning Community off in Settings withdraws your consent and deletes the data linked to your install ID right away (Section 3A.7). Because that data is tied only to a random hashed ID, we cannot look it up by your name or email, so we usually cannot identify it for an access, correction or portability request from outside the App. Deleting it yourself in the App is the way to exercise your right to erasure. Some data we hold is not linked to you at all (anonymous totals and kind words already delivered to others) and cannot be removed individually.

9. Children's Privacy

The App is not directed to children and does not encourage anyone to use tobacco, nicotine, or alcohol. You must be at least 13, and where the minimum age of digital consent in your country is higher (up to 16 in parts of the EEA), you must meet that age or have verifiable parental/guardian consent. We do not knowingly collect personal information from children under the applicable age. If you believe a child has provided us information, contact us and we will take appropriate steps to delete it.

The optional Community features (Section 3A) are only for people aged 16 and over, everywhere. You confirm you are 16 or older when you turn Community on. If we learn that someone under 16 has turned it on, the data linked to that app ID is deleted.

10. Legal Basis for Processing (GDPR)

If you are in the European Economic Area or the UK, our legal bases include:

• Consent: For optional analytics and advertising measurement, and for any processing of sensitive/health-related information that requires consent. Usage analytics, including which habit you are quitting, and the advertising measurement that uses those events are based on your explicit consent (Articles 6(1)(a) and 9(2)(a) GDPR), which you give by choosing "Share usage data"; you may withdraw it at any time by turning "Share usage data" off in Settings. The optional Community feature is also based on your explicit consent: we process the data in Section 3A, including which habit you are quitting, on that basis (Articles 6(1)(a) and 9(2)(a) GDPR), which you give by turning Community on. You may withdraw consent at any time, including by turning Community off in Settings. Withdrawal does not affect processing before it.
• Contract: To provide the features and purchases you request.
• Legitimate interests: To secure, maintain, and improve the App (including reading the feature suggestions you choose to send) and prevent fraud/abuse (including keeping a hashed IP address for up to 3 days to limit abuse of Community), and to measure install sources through RevenueCat (Section 4.2), balanced against your rights.
• Legal obligation: To comply with applicable law.

International transfers: Your information may be processed in countries outside your own (including by Google, RevenueCat, and the app stores). If you choose "Share usage data", Google Analytics data is processed by Google in the United States. If you turn on Community, your Community data is processed by Google Cloud Functions, Cloud Firestore and Firebase Cloud Messaging in the United States (us-central1). Where required, appropriate safeguards (such as Standard Contractual Clauses) apply to such transfers.

11. Contact Information

12. Health Disclaimer

13. Limitation of Liability

14. Indemnification

15. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you may have rights to know, delete, correct, and limit the use of your personal information, and to not be discriminated against for exercising them. We do not "sell" your personal information for money. To the extent any analytics or advertising integration could be considered a "sale" or "share" under California or other U.S. state law, you may opt out through the consent and tracking controls in the App (including turning "Share usage data" off in Settings) or your device settings, or by contacting us using the details in Section 11. Usage analytics that includes which habit you are quitting is collected only with your consent (Section 4.1), and we do not use it for personalised advertising. These rights are subject to the limitations in this Policy and applicable law.

15A. Consumer Health Data (Washington, Nevada, Connecticut)

This section applies to "consumer health data" as defined by the Washington My Health My Data Act, Nevada Senate Bill 370, and Connecticut's consumer health data provisions, and supplements the rest of this Policy.

• What we collect: which habit you are quitting (smoking, vaping or alcohol) and usage events related to quitting (for example creating a tracker, logging a craving or relapse, or reaching a milestone), sent with Google Analytics only if you choose "Share usage data"; and, only if you turn Community on, the items listed in Section 3A. The rest of your tracker data stays on your device.
• Why: to understand how the App is used and improve it (analytics), and, for Community, to provide the Community features. Advertising measurement uses only events that do not include your habit.
• Sources: you, through your use of the App.
• Who receives it: Google, as our analytics provider (Google Analytics) and as our Community hosting provider (Google Cloud and Firebase). We do not sell consumer health data.
• Consent: we collect and share this data only with your consent: by choosing "Share usage data" for analytics, and by turning Community on for Community.
• Withdrawing consent: turn "Share usage data" off in Settings to stop analytics collection (the App also resets its analytics identifier), and turn Community off in Settings to delete your Community data (Section 3A.7).
• Your rights: you may have the right to confirm whether we collect or share your consumer health data and to access it, to have it deleted, and to withdraw your consent. Because this data is pseudonymous and not linked to your name or email, the in-App controls above are the most reliable way to exercise these rights. You can also contact us using the details in Section 11; if we deny your request, you may appeal by replying to our response, and, if you are not satisfied, contact your state Attorney General.

16. Changes to This Policy

We may update this Policy from time to time. Material changes will be posted here with an updated "Last Updated" date and, where appropriate, in-app notice. Continued use after changes take effect constitutes acceptance.

17. Governing Law

This Policy is governed by the laws of the Republic of Lithuania, without regard to conflict-of-law principles, and subject to any mandatory consumer-protection laws of your country of residence.