Privacy Policy

Information QuitMojo collects

QuitMojo collects only the information needed to provide account, sync, support, mentor, and subscription features.

• Account data such as email, nickname, authentication and session identifiers, preferred language, and consent versions.
• Google Sign-In identity data when you choose Google authentication, such as verified email and stable Google account identifier metadata.
• Quit profile data such as quit start date and time, cigarettes or packs per day, pack price, currency, smoking history, planned NRT products, and your optional personal context text.
• Journal and event data such as cravings, panic or anxiety moments, relapse events, NRT usage, notes, timestamps, intensity, and related support context.
• AI mentor conversations and context when AI mentor features are enabled and used.
• Subscription and entitlement state, including Google Play purchase verification metadata. QuitMojo does not store raw purchase tokens longer than needed for verification and uses a fingerprint for persisted linkage.
• Device identifiers used for free-attempt limits, abuse prevention, session restore, and sync reliability.
• Diagnostics such as trace or support codes, basic server logs, readiness and operator diagnostics, provider mode, and aggregate reliability signals.

How QuitMojo uses information

• To create accounts, authenticate users, manage sessions, and keep accounts secure.
• To sync quit progress across devices and restore server-backed data after reinstall or login.
• To provide SOS support, event journaling, recovery timeline, progress tracking, and AI mentor features.
• To verify subscription entitlement and prevent accidental or abusive access to premium-only features.
• To prevent abuse, troubleshoot issues, answer support requests, improve reliability, and protect the service.
• To meet legal, compliance, billing, accounting, and security obligations.

Processors and third parties

QuitMojo may use service providers only as needed to operate the product. These providers process data for the purposes described in this policy.

• Resend for transactional email delivery such as email verification and password reset.
• OpenAI for AI mentor responses when AI mentor features are enabled.
• Google for Google Sign-In and Google Play Billing.
• Hosting and infrastructure providers for API, database, public web, logs, backups, and security operations.

What QuitMojo does not do

• QuitMojo does not currently show ads.
• QuitMojo does not sell personal data.
• QuitMojo does not provide medical diagnosis, treatment, or emergency medical services.
• QuitMojo does not put provider API keys or server secrets into the Android app.

Security

QuitMojo uses HTTPS for data in transit, keeps provider secrets server-side, restricts diagnostics, and redacts sensitive values from operator views where practical. No internet service can promise perfect security, but QuitMojo is designed to reduce unnecessary exposure.

Retention and deletion

You can request account deletion. When an account is deleted, QuitMojo deletes associated app account data where legally and operationally possible. Some limited records may be retained for security, fraud prevention, billing, accounting, legal compliance, dispute handling, or abuse prevention.