Privacy Policy

Effective date: 11 October 2026

Who we are and how to contact us

QuitByHealing is operated by whitesquare GmbH, Beckengässchen 1, Schaffhausen, Switzerland. We are responsible for the personal information described in this policy. This policy covers quitbyhealing.com and the QuitByHealing mobile app.

For privacy questions or requests, email hello@quitbyhealing.com or use our contact form.

In plain English

Your recovery entries in the mobile app stay on your device: the app does not upload them to us or provide account-based syncing. This does not mean we receive no information about app users. We receive information you choose to send for support, and Apple shares usage information, crash logs and feedback with us when you test the app through TestFlight.

The website works differently. It uses PostHog analytics, including session replay, and sends completed website recovery-assessment answers to PostHog. Website accounts, purchases, email subscriptions and support requests also involve personal information. This information is not all anonymous.

We do not sell or rent your personal information or upload subscriber or customer email lists to advertising platforms. We do share information with the service providers described below to operate our services.

QuitByHealing mobile app

Recovery information stored on your device

The app stores assessment and onboarding answers, recovery history and sober periods, personal reasons for recovery, plans, recovery tasks and notes, your commitment signature and signing date, and app preferences. We use this information within the app to provide your recovery tools and progress displays. Some in-progress exercise answers are held only for the current session.

The commitment signature is a drawing you enter into the app. It is not a Face ID image or biometric authentication template.

No app account or sync; local retention and deletion

You do not need a QuitByHealing account to use the mobile app. The app has no recovery-data sync service, and we do not hold a server copy of your recovery entries. A separate account for website courses does not sync with the app.

Saved recovery data remains in the app's local storage until you delete it. In the app's settings, choose Delete all QbH data and confirm Delete everything to remove your saved recovery data and reset the app. This cannot be undone through QuitByHealing. The reset also attempts to cancel scheduled reminders; if the app reports that reminder cleanup failed, turn off notifications in your device settings.

Your device's backup or transfer features may retain copies according to your device settings and the platform provider's policies. QuitByHealing does not operate those backups. Deleting local app data does not delete an existing device backup, support correspondence or TestFlight information. Manage backups through your device or Apple account, and contact us separately about information we hold.

Face ID, Touch ID and device authentication

If you enable the app lock on an Apple device, Apple handles Face ID, Touch ID or device-passcode authentication. The app receives the authentication result and information about whether device authentication is available. Neither the app nor we receive your facial images, fingerprints, biometric templates or device passcode. The app lock is an access control, not a promise of separate encryption of all local app data.

Optional reminders

Reminders are optional and scheduled locally on your device with your notification permission. The app does not send your recovery entries to a remote push-notification service to deliver these reminders. You can turn reminders off in the app or revoke notification permission in device settings. Notifications may be visible on your lock screen depending on your settings.

Audio, not microphone recording

The app's audio guidance is designed for prerecorded playback, not recording you. The current app does not use your microphone or record, store or upload your voice. Audio guidance is unavailable in builds where the prerecorded audio files have not yet been included.

Contacting support

If you open our website contact form or email us, we receive the name, email address, message and any other information you voluntarily provide. This is separate from the local recovery data in the app. We use it to respond and resolve your request. Please do not include recovery details, signatures or screenshots unless needed for your request, and remove information you do not want to share. The website contact form uses Resend for email delivery and Cloudflare Turnstile for spam protection, as described below.

TestFlight beta testing

When you use TestFlight, Apple automatically collects beta-app usage information and crash logs and shares them with us. This can include installation and session counts, app and operating-system versions, device model and identifier, crash information and invitation status. Your name and email address may also be shared. Apple says these are not displayed to the developer when you join only through a public invitation link.

If you submit feedback through TestFlight, Apple shares your comments, screenshots and related technical information with us. Screenshots can contain sensitive recovery information. Please crop or redact recovery entries, assessment answers, notes, personal reasons and signatures before sending feedback. Information you include in feedback is no longer solely local to your device.

We use TestFlight information to investigate problems and improve the app and related products, not for advertising. We do not share TestFlight information with third parties. Apple's automatic beta usage and crash collection cannot be opted out of while using TestFlight; you can stop participating in the beta.

We delete developer-held copies of beta feedback, screenshots, usage reports and crash reports within 12 months after the related issue is resolved or, for information not tied to an issue, within 12 months after receipt. Apple separately retains beta feedback for one year and may retain crash logs and usage information until bugs are resolved; Apple also retains installation information for its analytics, accounting, reporting and fraud-prevention purposes. Deleting the app does not itself delete this information.

See Apple's TestFlight & Privacy disclosure. Contact us to request access to or deletion of TestFlight information we hold. You can also manage information held by Apple at Apple's Data and Privacy page.

QuitByHealing website

Browsing, cookies and analytics

Our website and hosting services process technical information needed to serve and protect the site, such as IP addresses, requested pages, browser and device information, timestamps and error logs.

We use PostHog for website analytics, experiments and session replay. It receives page views, interactions, browser and device details, referrers and campaign information, identifiers, and events such as email signups, lesson views and completions, purchases and refunds. Session replay reconstructs activity on website pages. Our configuration masks input fields, but does not mask all page text and images.

When you sign in, we can associate website activity with your account ID, name and email address. Purchase attribution can also link earlier browsing activity to your customer account. Unique identifiers and pseudonymous analytics are not the same as anonymous data.

PostHog uses cookies and local storage. Our website also uses cookies for login sessions and marketing attribution. Our attribution cookies are configured for one year and refreshed as you use the site; website login sessions are configured for 30 days. Browser storage can remain until cleared. You can delete or block cookies and site storage through your browser, though this may affect sign-in and saved website assessment results. Clearing browser storage does not delete information already received by us or our providers.

The website recovery assessment is not the mobile app

The website assessment asks about recovery, porn use, relationships and sexual health. It stores draft answers and a calculated result in your browser and sends completed answers and calculated summaries to PostHog for analysis and improvement of the assessment and recovery content. These responses may be linked to the analytics identifiers described above, including an identified account. They are not covered by the mobile app's local-only storage description.

If you complete the recovery assessment without accepting analytics cookies, your answers are still sent anonymously to our analytics provider (PostHog), with no cookies and no link to you or your account, so we can study results in aggregate.

You can choose not to complete the website assessment. Clearing your browser's site storage removes its local draft and result, but does not remove completed answers already sent to PostHog. Contact us about access or deletion of submitted answers; we may need information that allows us to locate the relevant records.

Email, website accounts and purchases

When you subscribe to emails or a waitlist, we receive your email address and, where provided, your name. We use MailerLite to manage subscriptions and send marketing emails. You can unsubscribe using the link in marketing messages. Unsubscribing does not stop essential messages about a purchase, account or support request.

Website course accounts store information needed to sign you in and provide access, such as your name, email address, account and session records, course enrolments and lesson progress. We use Resend to deliver sign-in links, purchase and other service emails.

Dodo Payments handles checkout and payment processing. We receive customer and transaction information needed to fulfil purchases, manage refunds and keep financial records. Checkout attribution information is included to measure which website visits lead to purchases. Payment details submitted directly to Dodo are also subject to its privacy policy.

Website contact form

Our contact form sends your name, email address and message to our support inbox using Resend. Cloudflare Turnstile checks for automated abuse; the server sends the verification token and, when available, your IP address to Cloudflare for this check. We retain support correspondence for up to 24 months after your request is resolved, unless a longer period is necessary for a legal obligation or a specific dispute.

Service providers and external content

Our service providers include PostHog (analytics and experiments, hosted in its US Cloud region), MailerLite (marketing email), Resend (service and support email delivery), Dodo Payments (payments), Vercel (website hosting), Neon (website database), Cloudflare R2 (media storage), Cloudflare Turnstile (spam protection), and Bunny Stream (course video delivery). They receive the information needed for their respective services, not a copy of the mobile app's local recovery entries.

Pages may also load embedded content such as YouTube videos. Loading or using externally hosted media sends technical information, including your IP address and browser details, to its provider and may involve cookies or other tracking under that provider's policy. Following an external link takes you to a service with its own privacy practices.

Website retention

PostHog's current paid-plan event-retention window is seven years. This includes submitted website assessment-answer events and other analytics events. This is a provider retention window, not a promise that every associated profile or backup is erased on an exact anniversary. Our session-replay setting is 30 days for new recordings; changes to that setting do not shorten the retention of recordings already created under an earlier setting.

We keep subscription information while you remain subscribed and may retain a minimal unsubscribe record to respect your preference. Website account and course-access records are retained while needed to provide your access, subject to deletion requests and legal requirements. Financial records are retained for the periods required by applicable accounting and tax law. Operational and security logs are retained as needed for troubleshooting, security and the hosting provider's retention cycle. Contact us for details about a particular record or to request deletion.

How and why information is used

We use information to provide the features you request, deliver purchased content, respond to support requests, administer the beta, understand and improve the website and app, prevent abuse and meet legal obligations. Where applicable data-protection law requires a legal basis, these purposes may involve performing a contract with you, complying with a legal obligation, consent, or legitimate interests in maintaining secure services and resolving technical problems. Legitimate interests do not override a requirement for consent for sensitive information or non-essential tracking.

Recovery and sexual-health information can be particularly sensitive. Avoid including it in support messages or beta feedback unless necessary. Where processing relies on your consent, you can withdraw that consent by contacting us; withdrawal does not affect processing that was lawful before withdrawal.

International processing and security

We are based in Switzerland. Our service providers may process website, support or beta information in other countries, including the United States, whose privacy laws may differ from those where you live. Applicable data-protection requirements for international transfers still apply. Contact us for information about the providers and transfer safeguards relevant to your information.

We use measures intended to protect information, including HTTPS for the website and access controls. No device, email system or online service can be guaranteed completely secure. Protect access to your device and email account, and use the app lock if you want an additional barrier to opening the app.

Your privacy rights

Depending on where you live and the law that applies, you may have rights to access or obtain a copy of your personal information, correct it, request deletion, restrict processing, object to processing, receive portable data, and withdraw consent. Swiss data-protection law applies to our handling of personal information; the GDPR and other local privacy laws may also apply depending on the circumstances. You may complain to your local supervisory authority or the Swiss Federal Data Protection and Information Commissioner.

To exercise your rights, email hello@quitbyhealing.com or use our contact form. We may need reasonable information to verify your identity and locate your records. We respond within the period required by applicable law and explain any lawful exception, such as records we must retain for tax purposes. You do not need to send us your local recovery entries to make a privacy request.

For mobile recovery entries we do not hold, use the app's local deletion control. For support, website or TestFlight information we hold, contact us separately. For information held independently by Apple or another provider, you can also contact that provider.

Changes to this policy

We will update this page and its effective date when our practices change. Material new uses of information will be communicated as required by applicable law, and we will seek consent where required. A policy update does not itself grant permission for a new use that requires your consent.