Quitup

Privacy Policy

Last updated: October 14, 2026

Who we are

Quitup is developed and operated by an independent developer. You can reach us at support@quitup.app.

The short version

What we collect

DataWho can see it
Private profile: quit date, cigarettes per day, pack size, price and currency, minutes per cigarette, your "reason" text, birth year, settings, consent version and time, last active time, language, countryOnly you (and our servers)
Room profile: nickname, country, age rangeOther members of your room
Messages you write in a roomMembers of that room
Push notification tokenOnly our servers
Map light and spark eventsNot directly readable by apps; shown only as aggregated lights

We do not store your full date of birth, only your birth year. If you link your account with Apple, Google or an email address, that sign-in identifier is stored by our authentication provider. It is never shown to other users.

Health-related data

Information about your smoking habits and your reason for quitting can be considered health-related. We ask for your explicit consent during setup. You can withdraw it in Settings at any time, as easily as you gave it. When you withdraw, cloud sync and the community features (map light, sparks, rooms) are switched off, and you choose what happens to your cloud data: delete it, or keep it stored with the features turned off. Data on your device stays on your device.

Location

We use only the country you choose. On the map your light appears at a random point within that country, not at your real position.

How long we keep data

DataRetention
Chat messagesUntil the end of the stage, at most 3 days
A copy of a reported message15 days
Spark records3 days
Map light eventsAbout 1 hour
Accounts that are never opened12 months

Where your data is stored

We use Google Firebase (authentication, database, cloud functions, push notifications). Google acts as our processor under the Firebase Data Processing and Security Terms. Our database is located in the European Union (Belgium). Some Firebase services are not limited to the EU: Firebase Authentication runs from data centers in the United States, and push notifications (Firebase Cloud Messaging) may be processed across Google infrastructure. Google LLC participates in the EU-U.S. Data Privacy Framework, and Firebase offers standard contractual clauses for transfers.

Payments

Subscriptions are handled by the Apple App Store or Google Play. We do not receive your card details.

Your rights

Children

Quitup is only for people aged 18 and over. The age check relies on what you tell us, so it cannot be perfect. If we learn that a minor uses the app, we will block the account.

Safety

Quitup is not medical advice and not an emergency service. In an emergency, call your local emergency number or see Find A Helpline.

Changes

If we change this policy in a meaningful way, we will update the date above and tell you in the app.