Privacy Policy

QuitShark is operated by Carbon Software Ltd, Northern Ireland, United Kingdom. Contact dev@mattjs.me about your information or this policy. This policy covers the app and quitshark.app, including version 1.1 features as they become available.

Your journey and account

You can start without supplying an email address. We create an anonymous account and installation identifiers to save your progress. If you choose Sign in with Apple for recovery, we store the verified Apple account identifier. The current Apple recovery flow does not request your name or email address. Linking is optional.

We store the information you enter and the progress you earn: nicotine-use preferences, spending baseline and currency, journey dates and time zone, check-ins, slip records, support activities, your written promise or reminder, Friends and their names, coins, XP, rewards and settings. Nicotine-use and progress information can reveal information about your health. Do not enter information about other people.

Your written promise is saved so you can revisit it. Your drawn signature is held temporarily on your device while completing that screen; it is not uploaded or saved with your journey.

Your consent

The updated 1.1.0 app asks for your explicit agreement before saving nicotine-use and other health-related journey information. We record the consent version and time against your account. This information is needed to provide your personal journey. You can withdraw consent and remove your saved information through Settings → Delete account, including without an active membership. Deletion has its own confirmation and does not cancel an Apple subscription.

Optional app-usage analytics has a separate choice, off by default in the updated 1.1.0 app. Declining analytics does not restrict your journey, rewards or membership. You can change that choice in Settings. Existing installations are asked again rather than treating an earlier default-on setting as agreement.

How information is used

We process health-related journey information on the basis of your explicit consent. Account administration and membership processing support our contract to provide the service; security and reliability processing supports our legitimate interests in operating it safely. Optional analytics relies on your consent. We use account and journey information to provide the features you request, recover your progress, calculate rewards and savings estimates, and maintain membership access. We use technical information to operate and secure the service, investigate faults and respond to support requests. We do not sell your personal information or share it with advertisers.

Services used by QuitShark

• Convex: authentication and storage of your account, journey and app progress.
• Apple and RevenueCat: purchase identifiers, product and transaction information, trial eligibility and subscription status used to manage access. Payment card details are handled by the store, not QuitShark. Store-specific billing services apply where the app is available.
• Expo and Apple notification services: device push tokens and notification content to deliver reminders when you enable notifications. You can disable notifications in device settings.
• OpenAI: when you request a Friend rename, the proposed name is sent through our server to check for offensive language. Your promise, signature, check-in notes and full journey are not included in that request. We request that the API response is not stored; this does not remove the provider’s separate security or abuse-monitoring retention. See OpenAI’s API data controls.
• PostHog: basic app events help us understand onboarding, feature use, purchases and where people leave the paywall. Events use pseudonymous identifiers rather than your email or Apple identity. Analytics excludes written promises, notes, signatures and custom Friend names. Session recording and automatic screen-content capture are disabled. In the updated 1.1.0 app, analytics begins only if you switch it on. You can switch it off in Settings at any time. Older builds may use their earlier default-on setting. Switching it off stops future event collection; it does not automatically erase earlier events.
• Cloudflare: website hosting, delivery and security. Visiting the site sends normal request information, such as your IP address and browser details, to the hosting service. This website does not add advertising cookies or a PostHog browser tracker.

Retention and deletion

Account and journey data is retained to keep your progress available while you use the service. The updated app provides Settings → Delete account to remove your saved account and journey, revoke a linked Apple sign-in authorisation and request deletion of the associated RevenueCat customer. Provider cleanup can take time. Optional analytics events use separate pseudonymous identifiers and are not automatically erased by account deletion; our current PostHog plan provides seven-year event retention. Contact dev@mattjs.me to request access, correction or deletion. We may need to verify ownership before acting. Removing the app alone does not delete server records or cancel a subscription. Some records may be retained where needed for legal obligations, purchase disputes or security, and service providers may retain limited backup or security records under their policies.

Security and international processing

We use access controls and encrypted connections to protect information. No system can guarantee absolute security. Our providers may process data outside the UK, including in the EU or US. Contact us for information about the processing arrangements and applicable transfer safeguards.

Your choices and rights

Depending on applicable law, you can ask to access, correct, delete, restrict or receive a copy of your information, object to certain processing, and withdraw consent where processing relies on consent. Contact us using the address above. You can also complain to the UK Information Commissioner’s Office. Apple recovery, notifications and analytics controls are available as described above.

Children and policy changes

QuitShark is not intended for children under 13. If you believe a child has provided personal information, please contact us. We will update this page when practices change and provide further notice where required.