Privacy Policy
This Privacy Policy explains how Quit Weed handles information through the Quit Weed mobile apps, the public website at quitweed.app, and related support communication. It describes the product as it currently exists, including optional accounts and cloud backup, advertising, analytics, on-device storage, and purchases.
1. Operator and contact
Quit Weed is operated by Michal Janecek. General contact: michal@quitweed.app. For privacy and data requests, see section 15.
Website: quitweed.app
2. Scope
This Policy covers:
- the Quit Weed iOS app,
- the Quit Weed Android app,
- the public website at quitweed.app, and
- support emails or similar direct communication about the product.
It does not replace the privacy terms of Apple, Google, Cloudflare, RevenueCat, or any other provider that also processes data under its own policies.
3. How Quit Weed works with your data
By default, Quit Weed works entirely on your device with no account required. You can optionally sign in with Apple or Google and turn on cloud backup, which keeps a defined set of your app data safe so you do not lose it and can restore it on a new device or after reinstalling. Cloud backup is opt-in and off by default. We do not run our own databases: your account and backup data are held by Google and your profile picture by Cloudflare. Advertising, analytics, crash reporting, and billing involve the established providers described below.
4. Information you provide or generate in the app
Depending on which features you use, the app may store or process:
- your quit date and progress timing,
- your usage-tracking inputs (such as usage methods, amounts, frequency, and spending),
- your preferred currency and app settings,
- your notification and reminder choices,
- app state such as whether you have completed onboarding and your Pro status, and
- the contents of any emails or support messages you send us.
Because Quit Weed focuses on quitting or reducing cannabis use, some of this information can reveal sensitive details about your habits, substance use, and health.
5. Optional account (Sign in with Apple or Google)
You can use the app fully without an account. If you choose to sign in, Quit Weed creates an account and securely stores the following account identity with Google:
- your email address,
- your display name (as provided by Apple or Google, editable in the app),
- your profile photo, whether provided by your sign-in provider or uploaded by you,
- which sign-in methods are linked to your account (Apple, Google), and
- whether your email is verified, as reported by the sign-in provider.
If you upload a profile picture, the image is stored with Cloudflare (see section 9).
Sign in with Apple may use Apple's private-relay email address. We treat a private-relay address the same as any other email.
6. Optional cloud backup (off by default)
If you are signed in, you can turn on cloud backup from the account screen. It is opt-in, off by default, and can be turned off at any time. While it is on, the following data is kept safe in the cloud and synced across your signed-in devices:
- your quit date and configured usage methods,
- your usage configuration for each method (amounts, frequency, and spending),
- your currency preference,
- optional health-related and profile details you choose to enter, used to personalize recovery and health-insight features,
- app preferences (time-display mode, animation preference, “hide triggering icons”, and onboarding-completed status), and
- your notification preferences.
Health-data note. Because Quit Weed concerns substance use and recovery, some of the information above — including your usage inputs and the optional health-related details you choose to provide — can reveal information about your health and is treated as special-category data under GDPR Article 9. We use it only to power in-app features, and we ask for your explicit consent the first time you turn cloud backup on. You can withdraw that consent at any time by turning backup off or deleting your account, and this data is never used for advertising. See also our separate Consumer Health Data Privacy Policy.
7. Information processed automatically
Like most apps, Quit Weed relies on established third-party services that automatically process certain technical and usage information. Depending on your platform, settings, and which features you use, this may include:
- app-usage, interaction, crash, and diagnostic data through Google's analytics and crash-reporting,
- advertising-related data processed by Google AdMob in the free, ad-supported version,
- purchase and subscription status handled by Apple, Google Play, and RevenueCat for paid features,
- standard device, app-version, operating-system, and language information needed to run and secure the app, and
- on iOS, your response to Apple's App Tracking Transparency prompt, if it is shown.
As is standard for mobile advertising and analytics, these providers (chiefly Google) may process identifiers such as device or advertising IDs and your IP address to deliver and measure ads, run analytics, and prevent fraud, in line with their own policies.
8. Website data and cookies
The website is separate from the mobile app. It uses necessary browser storage for consent handling and optional analytics on a consent basis.
- The site stores a local consent record so it remembers whether you accepted or rejected optional analytics.
- Google Analytics on the website loads only after you accept optional analytics in the cookie banner.
- Necessary technical processing by our hosting and security provider may include your IP address and request metadata needed to deliver pages, cache assets, and prevent abuse.
More detail is on the Cookies and Website Data page.
9. Where your information is stored
Different kinds of data live in different places:
- On your device: your app data and settings stay on your phone — not in the cloud — whenever cloud backup is off.
- Account & cloud-backup data: held by Google in the EU, encrypted in transit and at rest.
- Profile pictures: stored by Cloudflare, encrypted and delivered over a secure connection.
- Subscriptions & Pro status: managed by RevenueCat together with Apple and Google.
- Analytics, crash, ad, and billing data: held by the relevant provider under its own infrastructure and retention rules.
10. Providers we rely on
Depending on your platform and which features you use, information may be processed by:
- Google — Sign in with Google, cloud storage of your account and backup data, analytics and crash reporting, Google Play distribution and billing, and Google AdMob advertising. See the Google Privacy Policy.
- Cloudflare — website hosting and delivery, and storage of profile pictures. See the Cloudflare Privacy Policy.
- Apple — App Store distribution, in-app purchases and restores, and Sign in with Apple. See the Apple Privacy Policy.
- RevenueCat — manages your purchase and subscription status so your Pro access works across devices. See the RevenueCat Privacy Policy.
- Email providers used to receive and respond to your support messages.
11. How information is used
Quit Weed may use the information above to:
- provide the app's core tracking, milestone, progress, and educational features,
- save and restore your settings and progress,
- create and operate your optional account, including sign-in and account recovery,
- back up and restore the data in section 6 if you opt in,
- schedule notifications and reminders where you allow them,
- show ads in the free experience,
- enable, verify, manage, and restore paid features, including lifetime purchases and recurring monthly and yearly subscriptions,
- measure usage and improve content, stability, and performance,
- diagnose crashes, technical problems, fraud, or abuse,
- respond to support, safety, or legal matters, and
- operate and secure the app and website.
12. Legal bases
Where a legal basis is required, processing may rely on one or more of:
- Contract: providing the app and the account you requested, including cloud backup once enabled.
- Legitimate interests: operating, securing, and improving Quit Weed and preventing abuse.
- Consent: optional website analytics, App Tracking Transparency on iOS, optional notifications, and the special-category health data in section 6 (collected at the cloud-backup opt-in step).
- Legal obligation: complying with tax, consumer-protection, and record-keeping rules.
13. Data retention and deletion
- On-device data stays until you edit it, reset it, clear the app's data, or uninstall the app.
- Account & cloud-backup data: kept while your account exists. When you delete your account — in-app or via quitweed.app/delete-account — your account, cloud backup, and profile picture are permanently removed from Google and Cloudflare. Where supported, the app also offers provider authorization revocation.
- Subscription records held by Apple, Google, and RevenueCat follow those providers' own retention practices.
- Website consent record and analytics cookies: remain until they expire, you change your choice, or you clear browser storage.
- Support emails: kept as long as reasonably necessary to respond and keep records.
- Provider logs and billing data: Apple, Google, Cloudflare, RevenueCat, and similar providers keep their own records under their own schedules.
14. International processing
Your account and cloud-backup data are stored in the EU. Some providers (Apple, Google, Cloudflare, RevenueCat) operate internationally, so information they process may be handled in other countries under their own safeguards and data-protection frameworks.
15. Your rights
Depending on applicable law, you may have the right to:
- Access the data we hold — your account screen shows your profile, and you can ask us by email for a copy.
- Correct it — edit your display name and profile picture in the app; contact us for anything else.
- Delete it — the in-app “Delete account” option permanently removes your account, cloud backup, and profile picture. Where supported, the app also offers provider authorization revocation. If you can no longer open the app, request deletion at quitweed.app/delete-account. On-device data is removed by clearing the app's data or uninstalling.
- Restrict or object — turn cloud backup off, sign out, or contact us.
- Port your data — contact us and we will provide your cloud-backed data in a machine-readable format.
- Withdraw consent — turn cloud backup off, deny notification permission, change cookie choices, or delete your account.
- Complain to your local data-protection authority.
To make a request, email privacy@quitweed.app. To protect your account, we may need to confirm the request comes from your account's email address before acting. If your request concerns data held directly by Apple, Google, Cloudflare, or RevenueCat, that provider may also offer its own privacy tools.
US state privacy rights (California and others). Depending on your state, you may have the right to know what personal information we collect, to delete or correct it, and to opt out of the “sale” or “sharing” of personal information. We do not sell your personal information for money. Like most free apps, the ad-supported version may “share” limited identifiers with our advertising partner (Google AdMob) for advertising, as described in section 7. You can limit this through your device's ad-personalization settings (iOS: Settings → Privacy & Security → Tracking and Apple Advertising; Android: Settings → Google → Ads), and on our website through Cookie settings; we honour Global Privacy Control signals on the website. We treat substance-use and health information as Sensitive Personal Information and use it only for the purposes in this Policy — never to profile you for advertising. To exercise any right, email privacy@quitweed.app; we will not discriminate against you for doing so.
16. Security
We protect your information using encryption in transit and at rest and established infrastructure providers (Google and Cloudflare). No method of storage or transmission is completely secure, so while we work to protect your data, we cannot guarantee absolute security.
17. Children and age suitability
Quit Weed is not directed to children. Do not use the product if you are below the age required by applicable law, the relevant app-store listing, or another platform rule that applies to you. Where local law sets an age of digital consent (for example, 16 in many EU member states), you must meet that age to create an account or enable cloud backup.
18. Changes to this Policy
We may update this Policy when the product, its providers, or legal requirements change. The date and version at the top of this page change whenever the Policy does. Material changes — such as new categories of data or new providers — trigger a re-acceptance prompt in the app.