Quitzilla

Privacy Policy

Effective as of August 22, 2026

This Privacy Policy explains what information the Quitzilla iOS app ("Quitzilla", "the app") collects, how it is used, and what choices you have. The app is developed and operated by despDev ("we", "us"). Questions or requests: despdevs@gmail.com.

Data you create in the app

Everything you enter in Quitzilla — habits, goals, diary entries, reasons, rewards, and related settings — is stored locally on your device (and, if you use the widget, in the app's shared storage on the same device). We do not operate a developer-owned backend that stores this content.

One deliberate exception: when you create a custom habit, the name you typed is sent to our analytics service (Google Analytics for Firebase) as part of the habit-creation event. We use these names only in aggregate, to learn which habits people track most so we can add them as built-in presets. Predefined habits send only their internal preset identifier, never free text. If you prefer not to share a custom name with analytics, choose one of the predefined habits or use a neutral name.

Deleting the app normally removes its local data from that device. Offloading the app may retain its data, and Apple-managed device or iCloud backups may keep a copy according to your backup settings and Apple's terms, outside of our control. Deleting the app does not delete analytics, crash, or subscription records already held by the third-party providers described below.

Data collected automatically

We use a small number of third-party services to understand how the app is used, to find and fix crashes, and to manage subscriptions. The identifiers involved are pseudonymous — they are not linked to your name or email, and we could not identify you from them:

• Analytics — Google Analytics for Firebase: collects app-interaction events (which screens are opened, which features are used), session information, app version, device and operating-system information, language and locale, approximate location inferred from the network connection, and a pseudonymous app-instance identifier. Apart from custom habit names described above, analytics events do not include the content of your habits or diary. We do not use Firebase Analytics for advertising or cross-app tracking.
• Crash reporting — Firebase Crashlytics: collects crash and error reports with stack traces, timestamps, app state, app version, device and operating-system information, pseudonymous installation identifiers, and diagnostic logs attached to a report. Diagnostic logs may include technical identifiers of your data (such as internal record IDs), but not the text you typed.
• Subscriptions — RevenueCat and Apple: payments are processed entirely by Apple through your App Store account — we never see your payment card or bank details. We use RevenueCat to validate purchases and manage subscription status; RevenueCat receives a pseudonymous app user identifier, Apple receipt and transaction information, subscription status, and device and operating-system information needed to validate, restore, and manage Premium access.

Apple additionally processes App Store purchases and Apple Account data under Apple's own privacy terms. Requests concerning your Apple Account, payment method, or Apple's transaction records must be directed to Apple.

Quitzilla contains no advertising and no advertising SDKs, and we do not sell your personal information to anyone.

Privacy policies of the third-party services used by the app:

• Google Analytics for Firebase
• Firebase Crashlytics
• RevenueCat
• Apple

Why we use this data

We use the automatically collected data only to: provide core functionality (validating and restoring your Premium subscription), fix crashes and bugs, and understand which features are used so we can improve the app. Where GDPR or UK GDPR applies, we process subscription and purchase information because it is necessary to perform our agreement with you, and analytics and crash diagnostics on the basis of our legitimate interest in maintaining and improving the app. We do not share personal information with outside parties except with the service providers listed above, to the extent necessary for the app to function.

How long we keep information

Local habit content remains on your device until you delete it, delete the app, or erase the device, subject to any Apple-managed backups. Under our current configuration, Google Analytics retains user-level and event-level data for up to 14 months; aggregated statistics may be retained longer. Firebase Crashlytics retains crash reports and associated identifiers for 90 days before beginning deletion. RevenueCat retains subscription information for as long as it is needed to validate and restore purchases, maintain subscription records, prevent fraud, and meet legal obligations. Support emails are kept only as long as reasonably necessary to answer and document the request.

Security

Your habit content is protected by your device's own security (passcode, Face ID, encryption at rest), and the app offers an optional Privacy Lock. Data handled by our service providers is transmitted over encrypted connections and protected by those providers' safeguards. That said, no method of transmission or storage is guaranteed completely secure, and we cannot promise absolute security.

When you contact us

If you email us, we receive your email address, your message, and anything you attach. We use this information only to answer you and improve the app.

Your rights (GDPR — European Union / EEA / UK)

If GDPR or UK GDPR applies to you, you may have rights to request access to, correction or deletion of, or restriction of processing of your personal data, to object to certain processing, and — where the legal requirements are met — to data portability. You may also lodge a complaint with the data-protection authority in the country where you live or work, or where you believe an infringement occurred.

Your habit content lives on your device, so you can view, edit, or delete it directly in the app at any time. For data held by our service providers (analytics, crash reports, subscription records), contact us at the email below. One practical limitation: because Quitzilla has no accounts, your email address is not linked to the pseudonymous identifiers used by Firebase or RevenueCat. We may ask you for an identifier shown in the app to locate the relevant records, and we may be unable to find them from your email address alone.

Data collected by these providers may be processed on servers outside the EU/EEA/UK; the providers listed above rely on recognized transfer safeguards (such as EU standard contractual clauses) for such transfers.

California privacy disclosures

Quitzilla does not sell personal information and does not share it for cross-context behavioral advertising. We do not use the app to track your activity over time across third-party apps or websites. Because Quitzilla is a native mobile app, browser "Do Not Track" signals do not apply to its operation. Google, RevenueCat, and Apple may collect information within the app as described above. California residents may request access to or deletion of their personal information by contacting us at the email below.

Children's privacy

Quitzilla is a general-audience app and is not directed to children under 13. We do not ask users to provide their age. If we obtain actual knowledge that we have collected personal information from a child under 13 without required parental consent, we will take reasonable steps to delete it. A parent or guardian may contact us using the details below.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will post any changes on this page and update the date at the top. Significant changes may additionally be highlighted in the app or in App Store release notes.

Contact us

If you have any questions or requests regarding this Privacy Policy or your data, contact us at despdevs@gmail.com.