Privacy Policy

This privacy policy describes what data FreeQuit processes, why, where it is stored and what rights you have. It is written to match exactly how the app actually works.

1. Controller

The controller for the processing of your data within the meaning of the GDPR is:

Leiter Sales und Invest GmbH
Kefedergrundgasse 5/E04, 1210 Vienna, Austria
Email: support@freequit.app
Data protection contact: support@freequit.app

2. Overview: device and server

FreeQuit stores most of your information exclusively on your iPhone. Only a clearly limited set is transmitted to our servers, so that you can restore your account and your progress on a new device.

The following two sections list both in detail. Free text you write — journal entries, notes, reflections and personal motivations — is not transmitted to our servers.

3. Data transmitted to our servers

While you are signed in, FreeQuit synchronises the following information:

• Account: email address, display name, registration date, session information and — if you use “Sign in with Apple” — the identifier issued by Apple.
• Profile: display name and whether you have completed onboarding.
• Selected areas: which habit you are changing, status, start date, frequency, amount, estimated cost and your confidence level.
• Check-ins: date, mood, craving, difficulty, whether you had a difficult moment, triggers and helpful actions. Your note and the areas you reported using are not transmitted.
• SOS sessions: start, end, exercises used and your outcome. The area concerned is not transmitted, and sessions that end in a safety escalation are not transmitted at all.
• Relapse events: area, time and how you want to continue. Your note about it is not transmitted.
• Journal — metadata only: date, mood, tags and whether it is a weekly reflection. Title and text stay on your device.
• Consent records: type, version and time of your consent, the versions of the privacy policy and terms, where the decision was made and the app version.
• Membership: the transaction identifier issued by Apple, the product identifier, the status, the expiry date and the binding to your FreeQuit account.
• Deletion requests: the time and processing status of your account deletion while it is being processed.

4. Data that stays only on your device

The following information has no counterpart on our servers. It is not transmitted:

• Journal: the title and text of your entries.
• Notes in check-ins.
• The areas you report as used in a check-in.
• Your complete onboarding answers, including the safety questions.
• The alcohol safety assessment derived from them.
• Your selected motivations and your personal motivation text.
• Your notes on relapse events.
• Your reflection on the cost of doing nothing.
• An onboarding draft you have not finished.
• Milestones you have reached.
• Your reminder settings: times, frequency, quiet hours and discreet text mode.

This data lives in the app on your iPhone. Depending on your device settings it may be included in a device backup — for example an iCloud or computer backup. Such a backup is held by you and your backup provider, not by us.

5. Particularly sensitive information

FreeQuit processes information that is deeply personal: which habit you are changing — for example alcohol, nicotine or, if you select that area, pornography and sexual behaviour —, your cravings, your mood, difficult moments, relapse and use events, and other information about your process of change.

Depending on their content and context, such information may constitute special categories of personal data within the meaning of Article 9 GDPR. We therefore treat it that way throughout: we obtain separate, explicit consent for it and use it solely to provide the app's features.

Free text you write — journal entries, notes, reflections and personal motivations — is not transmitted to our servers (see section 4).

6. Purposes of processing

We process your data for the following purposes:

• Providing your account and sign-in.
• Personalising your areas, questions and content.
• Recording your progress and calculating streaks, milestones and estimated savings.
• The journal and reflection features.
• Immediate support (SOS) and safety information.
• Restoring your synchronised information on a new or reset device.
• Managing your membership and binding your entitlement to your account.
• Security, abuse prevention and troubleshooting.
• Reminders and prompts, where you have enabled them.
• Answering your support requests.
• Processing and evidencing deletion and access requests.

7. Legal bases

Depending on the processing, we rely on different legal bases under the GDPR:

• Article 6(1)(b) GDPR (performance of a contract): account, sign-in, synchronisation, membership and the core features of the app.
• Article 9(2)(a) GDPR (explicit consent): processing of your information about habits, use and wellbeing insofar as it constitutes special categories of personal data.
• Article 6(1)(a) GDPR (consent): optional features, currently the voluntary usage analytics.
• Article 6(1)(f) GDPR (legitimate interests): security and stability of the service, abuse prevention, and enforcing that one membership belongs to exactly one account.
• Article 6(1)(c) GDPR (legal obligation): where legal obligations apply to us, for example evidencing that a deletion request was carried out.

8. Your explicit consent

Before FreeQuit asks you the first question about your habits, we ask for your explicit consent on a dedicated screen. It is not pre-ticked, not bundled with acceptance of the terms and not part of any purchase.

A membership or a payment does not replace this consent. A purchase is not consent.

The optional consent to usage analytics is entirely separate. It is off by default and you can grant or withdraw it at any time in your profile under “Consents”.

You withdraw the required consent for processing sensitive information by deleting your account: without that processing, the personalised core of FreeQuit — progress, check-ins, journal, reminders — cannot function. Withdrawal takes effect for the future and does not affect the lawfulness of processing carried out before it.

9. Service providers

We only use service providers that are necessary to operate the app. Currently there are two:

Supabase (Supabase, Inc.) provides the infrastructure for authentication, account data, synchronisation of the data listed in section 3, account deletion and subscription entitlement binding. Supabase provides infrastructure for the project in the North EU (Stockholm, Sweden) region, eu-north-1. According to Supabase, its Data Processing Addendum forms part of the applicable contractual terms.

Apple (Apple Inc. and Apple Distribution International Ltd.) provides distribution through the App Store, processes and manages your membership and — if you use it — “Sign in with Apple”. If you have enabled device backups, the data stored on your device is backed up by Apple according to your own settings. FreeQuit schedules reminders exclusively on your device; no push service is used and nothing is transmitted to Apple for them.

We do not receive credit card, bank or any other payment data from Apple. We only process the membership identifiers required for entitlement, in particular the original transaction identifier (originalTransactionID) and, for applicable purchases, the app account token (appAccountToken). In addition, Apple provides us with aggregated sales reports that do not identify you.

10. No advertising, no tracking

• FreeQuit contains no advertising and includes no advertising SDK.
• We do not sell personal data.
• No external analytics provider is currently integrated. The optional usage analytics is evaluated exclusively on your device.
• No external crash reporting service is currently integrated.
• We do not use an advertising identifier (IDFA), cross-app tracking or device fingerprinting.
• We do not write sensitive content into technical logs.
• By default, notifications reveal nothing on your lock screen that would indicate your area.

11. International transfers

FreeQuit's Supabase project is hosted in the North EU (Stockholm, Sweden) region. Your synchronised data is stored there.

Apple and Supabase are international companies and may access infrastructure outside the EEA for group functions, support or technical operations. Where personal data is transferred to a third country in this context, this takes place on the basis of the transfer mechanisms and safeguards required under applicable data protection law, such as standard contractual clauses or an adequacy decision.

12. Retention

We store personal data only for as long as it is necessary for the purposes described or as long as legal obligations require.

• Active accounts: your account and progress data is kept for as long as your account exists and the data is necessary for the features you use.
• Data on your device: until you delete it, delete your account or remove the app. Device backups are governed by your own device settings.
• Abandoned onboarding and inactive accounts: We have established retention periods for incomplete onboarding and long-term inactive accounts. Automatic deletion will only take place once the necessary technical safeguards and notification mechanisms have been fully implemented and verified. You can delete your account yourself at any time in the app.
• Consent records: are currently deleted together with your account.
• Record of completed deletion requests: no longer than 3 years after the deletion has been completed. This entry contains neither your email address nor any areas, health information or journal content.
• Membership record: see section 14.

After a deletion, residual copies may remain temporarily in technically necessary backups or in our service providers' systems until they are overwritten in line with those providers' retention cycles and applicable legal and security requirements. They are not used as active FreeQuit account data.

13. Deleting your account

You can delete your account at any time in the app under “Profile → Delete account”. This is what happens:

• This account's local data on this device is removed. Other accounts on the same device are unaffected.
• Your scheduled FreeQuit reminders are deleted.
• Your synchronised account and progress data on the server is deleted.
• Your user account with our authentication provider is deleted.
• Your consent records are currently deleted along with the account.
• A record that a deletion request was made and completed remains, without your identifier (see section 12).
• The membership record remains in pseudonymous form (see section 14).

Important: deleting your FreeQuit account does not automatically cancel an existing Apple subscription. If you no longer want to be billed, cancel it separately in your Apple ID subscription settings.

14. Membership, payment and record

FreeQuit is funded through a paid membership that you purchase in the App Store. Payment is handled exclusively by Apple; we neither receive nor store payment data.

So that a membership stays bound to exactly one FreeQuit account, we store the transaction identifier issued by Apple together with the binding to your account.

If you delete your account, this binding is released: your user identifier and the account token are removed from the entry. The entry itself remains in pseudonymous form — it then contains only transaction-related information such as the transaction and product identifier, the status and the timestamps. This is necessary to preserve the integrity of memberships, prevent abuse and enforce entitlement; otherwise a single Apple subscription could be reused across any number of successively created FreeQuit accounts. This information contains no health, progress or journal content.

15. Data export

Under “Profile → Export data”, FreeQuit creates a JSON file containing everything you have created in the app: profile, selected areas, your complete onboarding answers, motivations, check-ins including notes, journal entries with title and text, SOS sessions, difficult moments, milestones, reminder settings and your consent records. Credentials, passwords and technical keys are not included.

This file is extremely personal: it contains your journal texts and your information about habits and wellbeing. Store it securely and share it only with people or services you genuinely trust.

16. Your rights

You have the following rights under the GDPR:

• Access to the data stored about you.
• Rectification of inaccurate data.
• Erasure of your data.
• Restriction of processing.
• Data portability in a structured, commonly used and machine-readable format.
• Objection to processing based on legitimate interests.
• Withdrawal of consent with effect for the future.
• Lodging a complaint with a data protection supervisory authority.

You can exercise access and portability directly in the app via “Export data”, and erasure via “Delete account”. For everything else you can reach us at support@freequit.app.

The supervisory authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40–42, 1030 Vienna, Austria, www.dsb.gv.at. If you live or work in another EEA country, you may also contact the supervisory authority responsible there.

17. Changes to this privacy policy

We update this privacy policy when the app or the legal situation changes. The current version is always available in the app and is marked with a version number. In the event of material changes we inform you in the app and, where necessary, obtain your consent again.

18. Contact

For questions about data protection and to exercise your rights, you can reach us at:

Leiter Sales und Invest GmbH
Kefedergrundgasse 5/E04, 1210 Vienna, Austria
Email: support@freequit.app
Data protection contact: support@freequit.app