Privacy | Calmquit

In short

Calmquit keeps your quit plan and progress (what you use and what it costs, your quit day, your reasons, your check-ins, the cravings and slips you log, and your answers to the lessons' questions) and your chat with Noa in your account, until you delete them. It keeps your quit plan only once you agree, with the I agree box under Your data.
To write each of Noa's replies, Calmquit sends what the reply needs to an AI model, through OpenRouter, only to companies that commit not to keep it or train AI on it.
We use your quit plan and progress to show them to you, to let Noa answer you and to keep Calmquit safe. While Share usage data is on, the app's usage events also carry a little of it, such as the products you use or that a craving passed, to show us how Calmquit is used (see "Usage data"). We never sell them, show you ads, or use them to train AI models.
You can delete a check-in, a craving, a slip, your messages with Noa, or your whole account yourself, at any time.

Deleting your data

You can delete your account and everything stored with it at any time, yourself: in the app, tap the settings button at the top of the screen to open Profile, then choose Delete account. The account deletion page explains what is deleted and what is kept. You can also delete a single check-in, craving or slip, or your messages with Noa (see "How long we keep it").

You can also ask us by email: write to support@calmquit.com from the email address of your account. We delete the account within one month and confirm it to you.

Apple and Google keep their own records of your purchase of Calmquit and of signing in with them. Ask them to delete those.

What this policy covers

This policy explains what Calmquit collects, why, who helps us run it, and what you can do about your data. It covers:

The Calmquit apps for iPhone, iPad and Android.
The website at https://calmquit.com.

Calmquit has no web app: the website tells you about the apps.

If you live in Washington, Nevada or Connecticut, the section "Consumer health data" is our consumer health data privacy policy.

Who is responsible

Calmquit is run by Lucero Studio, Morlans, San Sebastián, Spain. We decide how your data is used, so we are responsible for it: the "controller" under the EU and UK GDPR.

Your data is yours. We use it only as this policy says.

Privacy questions and requests: support@calmquit.com. Help with the app: support@calmquit.com.

What we collect

Your account

Sign-in: your email address, and a password if you set one. It is stored in a form we cannot read.
Signing in with Apple or Google: if you use them, we receive what they share with us for sign-in: an account identifier, your email address (with Apple, you can hide it behind a relay address) and, if they share them, your name and profile picture. We do not get your Apple or Google password, and we do not read anything else in those accounts.
Your consent: when you tick I agree under Your data, we keep a record of it with your quit plan: the version of the text you agreed to, and when.

Your quit plan and progress

This is what you enter in Calmquit, and what it keeps for you from it. It says something about your health, so we treat all of it as health data.

What you use: cigarettes, vapes or nicotine pouches, how much and how often, what a pack costs and how many it holds, which one is your main one, your currency and, if you give it, the year you started.
Your plan and quit days: how soon you want to stop, or that you had already stopped; each quit day you chose, the moment you stopped and, if you went back to using, when.
Your reasons: up to five, in your own words.
Your country: the country your device is set to when your plan is saved, which you can change in Profile, so that Get help and Noa give the emergency number and help lines for it. Calmquit does not use your location.
Reminder settings: the time of your daily check-in and the reminders you turned off.
Check-ins: one a day: your mood, how many cravings you had, what set them off, and a note if you write one.
Cravings: when, how strong, what set it off, whether it passed, and a note if you write one.
Slips: when, what you used and how much, and what set it off and a note, if you add them.
Course progress: the lessons you read and when, and your answers to their questions.
Your chat with Noa: your messages and Noa's replies. Noa reads text only: you cannot send it photos or documents.
Reports: when you report one of Noa's replies, the reason you chose and a copy of the reply's text.

Calmquit asks for your consent before it keeps your quit plan, and keeps no quit day, check-in, craving or slip on our servers without it. The answers you give to the first questions before you sign in stay on your device, from the moment you tick I agree, until they are saved to the account you sign in with.

What we collect automatically

Language and time zone: your app language and time zone. We use them to write emails in your language, to know when your day starts for your counters and Noa's daily limit, and to tell Noa the time where you are.
Sessions and security logs: your sign-in session, your IP address and your device's app information, which our database provider keeps in its sessions and security logs. An account can be signed in on one device at a time: signing in on a new device signs out the others.
Checks that calls come from the real app: to stop abuse, each call to Noa carries a short-lived pass that shows it comes from a genuine copy of Calmquit. On iPhone and iPad, Apple's App Attest makes a key on your device, and we keep its public part with your account; on Android, Google Play Integrity checks the app and the device. These checks see device signals, never your quit plan.
Push tokens: a token for each device where notifications are on, linked to the sign-in session that registered it.
Message counts: how many messages you sent to Noa, and on which days, to apply its daily limit.
Crash reports: when the app crashes or hits an error, what went wrong, the app version, and the device and system version, with performance measurements and error logs. Reports carry your account's random identifier. We do not put your messages, your quit plan, your email or your name in them.
Usage data: how the app is used. See "Usage data" below.

We never see your card details and receive no record of your purchase: Apple and Google sell Calmquit and keep that record themselves.

Feedback and emails to us

Feedback in the app: what you send from Tell us on the rating screen: the topics you pick, your message if you write one, the app version, your platform (iOS or Android) and your app language. Please do not put details of your quit plan or your health in it: it is not part of your quit plan.
Emails to us: what you write, and the details the app adds to a message you start from Contact us in Profile: the app version, your device model and system version, your app language and your account's email address.

What is stored on your device

Sign-in and settings: the apps keep your sign-in session (encrypted) and your settings, such as your language and whether usage data is shared, on your device. They are needed for Calmquit to work.
Your first answers: the answers to the first questions, from the moment you tick I agree until they are saved to your account.
Reminders: with notifications on, the reminders you keep on are scheduled on your device as notifications (see "Notifications on your lock screen"). Signing out cancels them.
Milestones: which milestones this device already celebrated, so that it does not show one twice.
Usage data: while Share usage data is on, PostHog keeps an analytics identifier and the usage events waiting to be sent on your device.

Calmquit uses no advertising identifiers and no advertising or cross-app tracking tools. The website at https://calmquit.com uses no cookies at all (see "This website" below).

Permissions on your device

Calmquit asks for these only when you use the feature that needs them. You can refuse, or change your answer in your device's settings.

Notifications: for your reminders.
Network: to reach our servers. Calmquit needs an internet connection to keep your plan and progress in your account and to talk to Noa.

Calmquit does not ask for your camera, your photos, your files, your contacts or your location.

Usage data

While Share usage data is on, the app sends usage events to PostHog: which screens you open, when the app is installed, opened or closed, and events such as these:

the first questions completed: which products you use (cigarettes, vapes or pouches), how soon you want to stop, and whether you had already stopped;
a quit day set (how many days ahead), the moment you stopped, and going back to using;
the craving screen opened (from where), and a craving logged, with whether it passed and what set it off (one of the app's own choices);
a slip logged, a check-in saved and a milestone reached (which one);
a lesson opened or read (which one), and the course finished;
Noa opened, a message sent, a reply finished, a message that could not be sent (with the reason, such as the daily limit), the chat started over, and a reply reported (with the reason);
the notification permission asked (with your answer) and a notification opened;
the rating screen and feedback sent (its topics, never its message), and Contact us tapped.

These events carry your account's random identifier, your app language, the app version, and the device and system version. They never carry your messages to Noa, your reasons, your notes, your answers to the lessons' questions, your email or your name. But they show that you use an app to stop nicotine, and some of them say something about how, such as the products you use or that a craving passed.

PostHog also gets your device's IP address with them, and discards it: it does not store IP addresses. Before discarding it, PostHog may work out an approximate location (such as the country and city) from it, and keeps only that.

Usage data is on unless you turn it off: in Profile, turn off Share usage data, and the app records and sends no more usage events from that device.

How we use it, and why we may

To keep your quit plan and let Noa answer you (your explicit consent, and our contract with you): your quit plan and progress, to show you your plan, your counters, your milestones and your journal, to set your reminders, to show the help lines of your country, and to send Noa what it needs to answer you. Health data is a special category of data under the GDPR, so we keep and use it only with your explicit consent (Article 9(2)(a)), which you give with the I agree box under Your data before Calmquit saves your plan. If we change what that text says we keep, Calmquit asks you again.
To provide Calmquit (our contract with you): your account and sign-in, the course, Noa and its daily limit, and your reminders.
To answer your messages (our contract with you, or our legitimate interest in helping you): your emails and requests.
To keep Calmquit working and safe (our legitimate interests): crash reports, fixing errors, checking that calls come from a genuine copy of the app, preventing fraud and abuse (including Noa's daily limit), the one-device sign-in rule, and reading the replies you report.
To improve Calmquit (our legitimate interest in learning how Calmquit is used, with a simple way to say no): usage data. It is on from the start, and you can turn it off at any time: in Profile, turn off Share usage data. From then on, the app records and sends no usage data from that device.
To meet legal duties: for example answering lawful requests from authorities.
To tell you about Calmquit: important changes to Calmquit, its terms or this policy, by email or in the app.
If Calmquit changes hands: in a merger, sale or reorganisation, the data passes to the new owner, who must keep this policy.

We do not sell your data. Calmquit shows no ads, and we never use your quit plan, your progress or your chat with Noa for advertising, for marketing or to train AI models. We do not make decisions about you that have legal or similarly significant effects by automated means: Noa's replies are suggestions, and your health decisions are yours.

Withdrawing your consent

You can withdraw your consent at any time. Without it, Calmquit cannot keep your quit plan and progress, and Noa cannot read them. To withdraw, delete your account (Profile, then Delete account), which deletes your quit plan and progress, or write to support@calmquit.com from the email address of your account, and we delete your quit plan and progress and your account and confirm it to you. Withdrawing does not make what we did before it unlawful.

Who looks at your data

People who work on Calmquit can reach the stored data only to keep Calmquit working and safe, when you ask us for help, or when the law requires it, and they open your chat with Noa only when one of these needs it. We read the replies you report, to check them and improve Noa's answers, and the feedback you send.

Data about other people

Your quit plan is about you alone. But your reasons, your notes, your answers to the lessons' questions and your messages to Noa can mention other people, such as a partner or a child. We use what you write about them only to show it to you and to let Noa answer you, in the same way as your own information. Your reasons, your answers to the lessons' questions and your messages go to the same AI providers (see "AI processing"); your notes do not.

Share only what you need, and nothing they would not want kept (terms, section 9). If you believe someone added information about you to Calmquit without the right to, write to support@calmquit.com and we will delete it.

AI processing

Noa's replies are written by an AI model that other companies run for us. For each reply, Calmquit sends the model:

your chat with Noa so far: up to its last 20 messages;
about you, from your quit plan and progress: the date and time where you are; what you use, how much and what it costs; the year you started; your quit day or the moment you stopped, with your time free, the money you kept, how many you did not use, and how many slips you had and when the last one was; your time free and money kept over all your quits; how many cravings you beat; how many lessons you read; your reasons; your latest three answers to the lessons' questions; your latest three check-ins (their day, your mood, how many cravings and what set them off); what most often set off your cravings in the last 30 days; and the emergency number and help lines of the country in your quit plan;
your app language, and our instructions for Noa.

The notes you add to check-ins, cravings and slips are never sent, and neither are your email, your name or your account's identifier. Nothing about your quit plan and progress is sent before you agree with the I agree box, or while your consent is to an older text.

How it gets there:

Calmquit's server sends each request to OpenRouter, which passes it to a company that runs the model. Today the model is DeepSeek V4.1 Flash, with another DeepSeek model in reserve for when it is unavailable. The companies are those that OpenRouter lists, on the basis of their own policies, as keeping no data at all (zero data retention): they commit not to store the request or the reply, and not to train AI on them. We send no request to any other kind of provider. OpenRouter chooses the company for each request, from a list that changes, and these companies are in several countries, inside and outside the United States.
OpenRouter does not train AI on the requests. It keeps details about each request, such as the time, the model and the amount of text, but not the messages or replies, except where its own privacy policy lets it keep data to prevent abuse, for security or to meet the law. It looks at a small sample of requests to sort them into categories for its own statistics, and stores those categories without linking them to our account or to you.

No one at the AI providers sees your account details: requests carry no email and no account identifier, but they do carry the information about your quit plan and progress listed above, and anything you wrote in your messages.

Who we share it with

We share data only with the companies below, who process it for us to run Calmquit, and only what each needs:

Hosting, database and sign-in: Supabase, in Frankfurt, Germany; and Cloudflare, which hosts this website.
AI models: OpenRouter, and the companies that run the model behind it (see "AI processing").
Crash reports and usage data: Sentry and PostHog.
Checks that calls come from the real app: Apple and Google.
Notifications and email: Expo, Apple and Google for notifications, and Cloudflare for the codes and account emails we send you.

The full list, with what each does and its privacy policy, is under "The services we use" below. Apple and Google, as app stores and sign-in providers, handle data under their own privacy policies.

When you copy one of Noa's replies and share it, it goes where you send it, and is handled under that person's or service's own rules.

We may also share data when the law requires it, to protect people's safety or our rights, or with a new owner if Calmquit is sold.

Calmquit and this website link to other services, such as the App Store, Google Play, the websites of help lines and the sources of its health facts. This policy does not cover them.

The services we use

Supabase (Supabase, Inc.): our database, sign-in and server functions, in its Frankfurt region (Germany). It holds your account, sessions, quit plan and progress, and your chat with Noa. Privacy policy
OpenRouter (OpenRouter, Inc., United States): connects Calmquit to the AI model, run by providers that keep no data (zero data retention). It receives what is listed under "AI processing". Data collection is off in our OpenRouter account, so OpenRouter does not store the messages or replies. Privacy policy
The model's providers: the companies that run the model for OpenRouter, chosen per request among those that keep no data. They receive what is listed under "AI processing", only to write the reply. OpenRouter lists them on each model's page at openrouter.ai.
Cloudflare (Cloudflare, Inc., United States): hosts this website, and sends the codes (sign-up, password reset and password change) and other account emails, from noreply@calmquit.com, with its email sending service. For the website, it handles your IP address to deliver the pages and protect them. For the emails, it receives your email address and the email it sends you, which its network processes to deliver them. Privacy policy
Sentry (Functional Software, Inc.): crash and error reports, stored in its EU region. Privacy policy
PostHog (PostHog, Inc.): usage data from the app while Share usage data is on, and visit counts for this website, stored in its US region. It discards IP addresses. Privacy policy
Expo (650 Industries, Inc.): sends push notifications to your device, through Apple and Google. Your reminders do not go through it: your device schedules and shows them itself. Privacy policy
Apple (Apple Inc.): Sign in with Apple, the App Store, where you buy Calmquit for iPhone and iPad, App Attest, and notifications on Apple devices. Privacy policy
Google (Google LLC): Sign in with Google, Google Play, where you buy Calmquit for Android, Play Integrity, and notifications on Android. Privacy policy

International transfers

Your account and your quit plan and progress are stored in the European Union (Frankfurt, Germany). Some of our providers process data outside your country, including in the United States, and the companies that run the AI model may be in other countries too. When data leaves the EU, the UK or Switzerland, we rely on safeguards the law accepts, such as the European Commission's standard contractual clauses or an adequacy decision.

How long we keep it

We keep data only as long as we need it for the purposes above.

Account, quit plan and progress, and your chat with Noa: until you delete them or your account. Nothing is deleted on a schedule.
A check-in, a craving or a slip: on Progress, open Journal, tap the entry and delete it. Your counters are worked out again without it.
Your messages with Noa: in the chat with Noa, Start over deletes them. Your quit plan and progress stay.
Earlier quits: when you go back to using and choose a new quit day, your earlier quits stay, so that your progress can count them, until you delete your account.
Course progress: the lessons you read and your answers to their questions, until you delete your account.
Reported replies: the copy of a reply you reported stays, with the reason, until you delete your account, even if you start the chat over.
Message counts: until you delete your account. They hold numbers only, never what you wrote.
Backups: our database provider keeps daily backups of the database for 7 days, so deleted data leaves them within 7 days.
Push tokens: until you sign out on that device or it stops receiving notifications. We keep the 20 devices you used most recently.
Crash reports: Sentry deletes them after at most 90 days (Sentry's retention periods).
Usage data: PostHog keeps usage events for 7 years, the retention period of our PostHog plan (PostHog's retention periods), then deletes them. They carry your account's random identifier, never your email or name.
Purchase records: we receive none. Apple and Google keep their own records under their policies.
Feedback in the app: until you delete your account.
Emails to us: as long as we need them to help you, and as the law requires.

Security

We protect your data with encryption in transit and on our database provider's servers, rules in the database that let each account read only its own data, and access limited to what each part of Calmquit needs. In the iPhone, iPad and Android apps, your sign-in session is stored encrypted on the device. No system is completely secure, so we cannot promise that your data will never be accessed without permission. If a breach puts your data at risk, we tell you and the authorities as the law requires.

Notifications on your lock screen

The reminders Calmquit sets show its name and a short text, such as "Your daily check-in" or "Tomorrow is your big day". None of them names nicotine, smoking, vaping or a product, but like any notification they can show on your lock screen and to anyone who can see your screen, so someone may learn that you use Calmquit. To hide them, turn off notification previews for Calmquit in your device's settings, turn off its notifications, or turn off the reminders you do not want in Profile, under Reminders. Signing out of Calmquit on a device cancels the reminders scheduled on it.

Your rights

Wherever you live, you can ask us to:

See the data we hold about you, and get a copy, with the list of the companies that received it.
Correct it if it is wrong. You can change your quit plan yourself in Profile, under Your quit plan, and your check-ins, cravings and slips in your journal.
Delete it. You can delete check-ins, cravings, slips, your messages with Noa and your account yourself at any time.
Withdraw your consent to keeping your quit plan and progress (see "Withdrawing your consent").
Stop usage data: turn off Share usage data in Profile.

Write to support@calmquit.com from the email address of your account, so we know the request is yours. We answer within one month (45 days where a US state law gives that time), and it is free unless a request is clearly unfounded or excessive.

In the EU and the UK

Under the GDPR you also have the right to:

Restrict our use of your data.
Object to uses based on our legitimate interests.
Receive your data in a portable format, or have it sent to another company.
Complain to the data protection authority where you live or work, or where we are established. We would like to hear from you first.

In California

Under the CCPA you have the right to know what personal information we collect, use and disclose, and why; to get a copy of it in a portable format; to correct it; to delete it; and to limit our use of sensitive personal information, such as health information, to what is needed to provide Calmquit. You can ask twice in 12 months. We do not sell your personal information or share it for cross-context behavioral advertising. We will not treat you differently, charge you more or give you a worse service for using these rights. You can ask through someone you authorise, and we may need to confirm who you are and that they may act for you.

In other US states

If you live in a US state with a consumer privacy law, you have the rights it gives you, such as to see, correct, delete and get a copy of your data, and to opt out of its sale, targeted advertising and profiling (we do none of these). If we refuse a request, you can appeal by replying to our answer, and we answer the appeal within the time the law sets.

Consumer health data

This section is our consumer health data privacy policy under Washington's My Health My Data Act, Nevada's consumer health data law (SB 370) and Connecticut's Data Privacy Act. It applies to consumer health data: information that identifies you and is about your physical or mental health, including your use of nicotine and what Calmquit derives from what you tell it.

HIPAA, the US law on the records of doctors, hospitals and health insurers, does not cover Calmquit. These state laws do.

What we collect

What you use: the products, how much and how often, what they cost, and the year you started.
Your plan: how soon you want to stop, your quit days, the moment you stopped and when you went back to using.
Your reasons, your check-ins (mood, cravings, what set them off and notes), the cravings and slips you log with their notes, and your answers to the lessons' questions.
Your chat with Noa: your messages and its replies.
What Calmquit derives from them: your counters (such as your time free, the money you kept and how many you did not use), your milestones, and what most often sets off your cravings.
Usage events that may show that you use an app to stop nicotine, and some of how (see "Usage data").

Where it comes from

From you: what you enter and type in the app.
From Calmquit: your counters, milestones and Noa's replies, made from what you gave us.
From your device: the country it is set to, and, while Share usage data is on, usage events.

Why we collect and use it

To show you your quit plan and progress, to set your reminders, and to let Noa answer you. To keep Calmquit working and safe. And, while Share usage data is on, to learn how Calmquit is used (see "Usage data": it is on until you turn it off). We keep your quit plan and progress only with your consent, which you give with the I agree box under Your data.

Who receives it

Hosting and storage: Supabase.
AI models: OpenRouter and the companies that run the model behind it, only to write Noa's replies (see "AI processing").
Usage data (the events described under "Usage data"): PostHog.
Error reports, which can show that an error happened while you used a part of Calmquit, but not what you entered: Sentry.
People you choose: when you copy one of Noa's replies and share it.
Authorities: when the law requires it.

We have no affiliates that receive it. We do not sell consumer health data, we do not use it for advertising, and we do not use geofences. No third party collects consumer health data about your activity over time and across other websites or apps through Calmquit.

Your rights

You can:

See whether we collect, use or share your consumer health data, get a copy of it, and get the list of every company that received it, with their contact details.
Correct it: change your quit plan, check-ins, cravings and slips in the app, or write to us.
Delete it: delete check-ins, cravings, slips, your messages with Noa or your account in the app, or write to us. When you write to us, we also delete it from our providers, including your usage events at PostHog, and it leaves our backups within the time given under "How long we keep it".
Withdraw your consent (see "Withdrawing your consent").

Write to support@calmquit.com from the email address of your account. We answer within 45 days, and may extend that once by 45 more days when needed, telling you why. If we refuse a request, you can appeal by replying to our answer: we answer the appeal within 45 days and, if we still refuse, tell you how to complain to your state's Attorney General.

We will not treat you differently for using these rights. This policy takes effect on the date at its top.

Children

Calmquit is not for anyone under 18, and we do not knowingly collect data from them. If you believe someone under 18 uses Calmquit, write to support@calmquit.com and we will delete the account.

This website

This website does not use cookies. It counts visits with PostHog without cookies and without storing anything in your browser; PostHog gets your IP address, as described under "Usage data" above. We use the counts only to see which pages people read and which buttons lead to the App Store and Google Play. Cloudflare, which hosts the website, handles your IP address to deliver the pages. Do not send health information through this website: it has no forms.

Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change matters to you, we tell you in the app or by email before it applies. If a change means we would keep or use your quit plan and progress in a new way, Calmquit asks for your consent again first.

Contact

Privacy questions and requests: support@calmquit.com.
Help with the app: support@calmquit.com.
By post: Lucero Studio, Morlans, San Sebastián, Spain.