Privacy Policy

Who we are

SoftQuit is a Control habit app: a sessions plan, check-ins, Urge Breakers, optional Shield (porn blocking), and optional Social Pause (app lock). Privacy questions: privacy@softquit.app.

Data we collect

You must sign in with Google or email to use the app. We do not offer a guest mode.

Account (required)

• Email address and display name
• Google account identifiers for Google sign-in (handled by Google and our auth provider)
• Account identifiers we issue (user id)

App activity (required to run your plan)

• Onboarding choices (why you are here, goal)
• Quit plan, step, check-ins, session logs, urge outcomes, recovery state
• Reminder on/off and morning check-in time

Optional, on device unless noted

• Shield: custom domains and block counts sync to your account so a reinstall can restore them. Blocked hostnames and timestamps stay on this device only. Hostnames only. Not a full browsing history.
• Social Pause: apps you chose to lock (name and Android package), auto-lock schedule, and last session prefs sync to your account. Active pause timers stay on this device.
• Installed app list on Android, only to let you pick apps to lock. We do not upload that list.
• App lock PIN / biometric preference, stealth icon, theme. Device only.
• Future Self notes. Device only.

Diagnostics and product analytics

• Sentry receives crash logs and a user id. Not your email or name.
• PostHog receives product analytics (feature use, screens, anonymous user id). Not your email, name, or blocked hostnames. We do not use ads or marketing analytics.

How we use data

• Create and secure your account
• Send a one-time welcome email after you create an account
• Run and sync your Control plan, Shield prefs, and Social Pause prefs across devices you sign in on
• Schedule local reminders you opted into
• Operate Shield and Social Pause after you turn them on
• Fix crashes and keep the app working
• Understand which features people use so we can improve SoftQuit

We do not sell your data. We do not use your plan, logs, Shield hostnames, or Social Pause choices for advertising. Habit and sexual-health related notes you enter are used only to operate the quit plan.

Sharing and processors

We share data only with processors that help us run SoftQuit:

• Google: sign-in
• Supabase: authentication, profile, reminders, quit-plan sync, Shield prefs, Social Pause prefs
• Resend: one-time welcome email after you create an account
• Sentry: crash reports
• PostHog: product analytics

We do not share data with advertisers. We disclose data when the law requires it.

Permissions and on-device access

• VPN (Shield, Android). Opt-in. A private on-device DNS filter blocks listed adult sites. Traffic is not sent to SoftQuit. Turn Shield off in the app. A cool-down applies. On iPhone, keep your list here and use Screen Time to block.
• Accessibility (Social Pause, Android). Opt-in. Used only to block the apps you selected during a pause. We do not read your feed, messages, or screen content.
• Installed apps (Android). Used only so you can pick apps to lock. The query stays on the device.
• Notifications and alarms. Local check-in reminders and pause schedules. We do not sell notification content.
• Biometrics / PIN. Optional app lock. The PIN stays on this device.

Security

Traffic to our servers uses HTTPS. Session tokens are stored in the device secure store. Cloud rows are scoped to your signed-in user (row-level security). Shield filtering and Social Pause enforcement run on the device. No method is perfect. Tell us at privacy@softquit.app when something looks wrong.

Retention

We keep account and synced plan data while your account exists. Device-only data stays until you log out, delete the account, or uninstall. Crash events follow Sentry’s retention. Analytics events follow PostHog’s retention. Delete your account and we remove the Auth user, profile, and synced app data we control (including Shield and Social Pause cloud prefs). You can ask us to confirm deletion.

Account deletion

You can delete your account and the data tied to it. Full steps: softquit.app/delete-account. In the app: Profile → Delete Account. Without the app: email privacy@softquit.app from the address on the account. Uninstalling the app does not delete the cloud account.

Children

SoftQuit is not directed at children. Do not use the app under 13. We do not knowingly collect data from children. Email privacy@softquit.app about a child’s account and we delete it.

Health context

SoftQuit is a habit tool, not medical advice, diagnosis, or treatment. Talk to a clinician for compulsive sexual behavior or mental health.

International processing

Processors store data in the United States and other regions. Using SoftQuit from another country means that data is processed outside that country.

Changes

We update this policy. The Last updated date changes. Using the app after an update means you accept the new policy. Material changes stay on this page.

Contact

Privacy and deletion requests: privacy@softquit.app