Privacy notice

Who we are. QuitPath is responsible for your data. Contact: support@getquitpath.com.

What we collect and why. To run the program you bought, we store your email address, time zone and country, your plan (quit date, pace, savings inputs), your answers to lesson exercises, your check-ins, cravings and recorded cigarettes, and your email settings. This is information about your health. We process it to provide the program (GDPR Art. 6(1)(b)) on the basis of the explicit consent you gave before checkout (Art. 9(2)(a)). We also use it, in aggregate only, to see how the program is used.

What we never do. We never sell your data, never share it with advertisers and never put advertising trackers in the app. Emails never contain details about your smoking.

Where it is stored. In the EU (database in Frankfurt). Our processors are Vercel (hosting), Neon (database), Resend, Inc. (email delivery), Apple (iCloud Mail, for emails you send to our support address) and Plausible (cookie-free statistics on our public pages only). Our emails are sent from Resend's EU region (Ireland), but Resend stores email content, delivery logs and recipient addresses in the United States. This transfer relies on the EU-U.S. Data Privacy Framework, under which Resend is certified (including the UK Extension), and on the EU Standard Contractual Clauses in Resend's data processing agreement. The payment provider is a separate controller for payment and tax data and has its own privacy notice.

How long. Until you delete your account, and at the latest 30 days after your 90-day access ends. If you never sign in, we delete your account 12 months after purchase. A minimal record of the sale (amount, country, date, no email) is kept for tax purposes.

Field encryption and backups. Free-text answers and notes are encrypted in the database. Deleted data leaves our backups within about 40 days.

Your rights. You can download all your data and delete your account at any time in Account → My data. Withdrawing consent means deleting your account; you can export first. You can complain to the Cyprus Commissioner for Personal Data Protection.

Cookies and local storage. We use one strictly necessary sign-in cookie and store your offline entries and plan summary on your device so Help now works offline. Our public pages use Plausible, which sets no cookies. You can opt out of those statistics in the footer.