QuitApp

Privacy Policy

Privacy Policy

Last updated: August 11, 2026

Comma Labs Yazılım Anonim Şirketi ("Comma Labs," "we," "us," "our") is committed to protecting the privacy of users ("you," "your") of the QuitApp application ("App"). This Privacy Policy explains what data we collect, how we use it, who we share it with, and your rights. In short: we show no ads, we sell no data, and we do not track you across other companies' apps or websites.

1. Data We Collect and How We Collect It

1.1 Account Information (optional)

You can use the App fully as a guest, without creating an account. If you choose to sign in with Apple or Google, we collect:

• Email address (for authentication and cross-device restore)
• Display name (as provided by the sign-in provider)

1.2 Quit Profile (health-related data)

The core of the App is the information you provide about your smoking and your quit:

• Smoking habits: cigarettes per day, cigarettes per pack, pack price, years smoked
• Dependence and readiness questionnaire answers (Fagerström and Richmond scales)
• Triggers, motivations, past quit attempts, quit date
• First name and age (as entered during onboarding)

1.3 Activity in the App

• Craving logs (intensity, mood, trigger, coping strategy)
• Daily check-ins and lapse records
• Product usage events (screens viewed, features used), tied to your account ID

1.4 Purchases

Subscription status is processed by Apple and our subscription provider (RevenueCat). We never see or store your payment card details.

1.5 Automatically Collected Data

• Device type and operating system version
• Crash reports and app performance data (not linked to your identity)

1.6 What We Do NOT Collect

• No location data
• No contacts, photos, or microphone access
• No advertising identifiers

2. How We Use Your Data

• App functionality: your quit plan, recovery milestones, money-saved calculations, reminders, and cross-device restore
• Personal insights: your craving patterns (toughest hour, biggest trigger, what works for you), computed on your device
• Subscription management: keeping Premium active across your devices
• Improvement: understanding aggregate feature usage to improve the App
• Stability: detecting and fixing crashes and performance problems

3. Data Sharing

Your personal data is never shared with third parties for marketing or advertising purposes, and it is never sold to data brokers. Data is shared only with the processors that make the App work, under data processing agreements:

• Supabase — database and authentication (account, quit profile, activity)
• RevenueCat — subscription management
• Sentry — crash and performance reporting (not linked to identity)
• Apple / Google — sign-in and payments

We may also disclose data when required by court order or applicable law.

4. The 30-Day Challenge

If you join a challenge with a friend using an invite code, your first name and quit date become visible to the members of that challenge. Nothing else is shared, and challenges are never public.

5. Data Retention and Deletion

• Your data is retained while your account exists.
• You can delete your account and all associated data at any time in the App: Profile → Account → Delete account. Deletion is immediate and permanent, and removes your profile, answers, activity, and challenge memberships from our servers.
• Anonymous, aggregated statistics may be retained.
• You can also request deletion by emailing info@commalabs.co.

6. Your Rights

Under KVKK, GDPR, and similar laws you may:

• Request access to your data
• Request correction of your data
• Request deletion of your data
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise these rights, contact info@commalabs.co. We respond within 30 days.

7. Children's Privacy

QuitApp is intended for adults and is not directed at children. We do not knowingly collect personal data from children under 13 (or under 16 in the EU). If we become aware that a child has provided personal data, we will delete it immediately.

8. International Data Transfers

Your data may be processed on servers located in the European Union and/or the United States. For international transfers we apply appropriate safeguards, including standard contractual clauses.

9. Data Security

• TLS/SSL encryption in transit
• Encryption at rest
• Row-level access control on all user data

No system is 100% secure. In the event of a breach affecting your personal data, you will be notified within legally required timeframes.

10. Legal Compliance

• Turkey: Personal Data Protection Law No. 6698 (KVKK)
• European Union: General Data Protection Regulation (GDPR)
• United States: Children's Online Privacy Protection Act (COPPA)
• Apple App Store Privacy Requirements

11. Changes

We may update this policy from time to time. Significant changes will be communicated through the App. The current version will always be available at this address.

12. Contact