On this page
Data Controller
Quitify is developed and provided by Muhammed Mustafa Geldi (Türkiye), operating under the name Swanky Software (referred to in this policy as “Swanky Software”). The developer name of the application on Google Play is “Swanky”.
With regard to the personal data processed in connection with Quitify, the data controller is Swanky Software. Questions and requests concerning personal data may be sent to [email protected].
Scope and How the Application Works
Quitify is a free, ad-supported application that helps you track your journey to quit smoking, your progress and the money you have not spent on cigarettes.
The core features of the application can be used without creating an account, and the records you enter are stored on your phone. These records leave your phone only if you sign in with an account and use online backup. Creating an account and using online backup are optional.
Quitify is available worldwide, and this policy applies in the same way to all users regardless of the country in which they are located. As the data controller is established in Türkiye, all processing activities are subject to the KVKK; processing relating to users in the European Economic Area is additionally subject to the GDPR. Where the laws of your country grant you rights in addition to those set out in this policy, those rights remain unaffected.
Personal Data Processed
The following categories of data are processed in connection with Quitify. Which data are processed depends on whether you use an account and online backup.
Records stored on your phone
These records are processed on your phone to calculate and display your progress and to prepare notifications. Unless you use online backup, these records are not transmitted to Swanky Software or to any other service provider.
- Profile and smoking information: Your name or nickname, the date and time you quit smoking, your daily cigarette consumption, the number of cigarettes in a pack, the number of years you smoked, the price per pack and the currency.
- Personal records: Your reasons for quitting, your achievements, the savings in your money box, your purchase goals and your spending records.
- Preferences: Language, appearance, notification types and times, quiet hours, automatic backup frequency and home screen widget preferences.
Account data
- Email and password: When you create an account with an email address and password, your email address and password are stored by the Firebase Authentication service. The password is stored using a one-way hashing method; no one, including Swanky Software, can access the password in plain text.
- Sign in with Google: When this method is chosen, the email address and account identifier provided by Google and, if available in the Google account, the name and a link to the profile photo are received. The name and profile photo are shown on the account screen. The Google account password is not accessed.
- Session and security records: Account identifier, account creation and last sign-in dates, sign-in method, and the IP address and time of sign-in operations.
- Password reset: If you want to reset your password, the reset link is sent to your email address via Firebase Authentication.
Online backup
When you use online backup, the backup is stored in the Google Cloud Firestore service, linked to your account. The backup contains your profile and smoking information, your reasons for quitting, your achievements, your savings, your goals, your spending records and your currency. The time at which the backup was created is also recorded.
Advertising and usage measurement data
- Advertising: Google AdMob is used to display advertisements. AdMob may process the advertising identifier, the IP address and the approximate location derived from it, device and application information, and ad view and click information.
- Usage measurement: Google Analytics for Firebase is used to understand how the application is used. This service processes information such as app opens, usage duration, screens viewed, device and application version, approximate location and identifiers of the app instance.
- Sensitive records: Your records relating to your smoking, your quitting journey, your reasons or your savings are not sent to advertising or usage measurement services.
Support correspondence
When you send us an email, your email address and the content of your message are processed to respond to your request and, where necessary, to verify that the account belongs to you.
Purposes and Legal Bases of Processing
Personal data are collected electronically through the information you enter in the application, the information provided by Google during Sign in with Google, and the records generated when the application communicates with Google services, and are processed for the following purposes:
- Account service: Creating the account, signing in, resetting the password and managing the account. Legal basis: conclusion and performance of a contract (Art. 5(2)(c) KVKK; Art. 6(1)(b) GDPR).
- Online backup: Backing up and restoring your records. As information about smoking may qualify as health data, this processing is based on your explicit consent (Art. 6 KVKK; Art. 9(2)(a) GDPR). You can withdraw your consent at any time by turning off online backup and requesting the deletion of your backup.
- Displaying advertisements: Displaying advertisements so that the application can be offered free of charge, measuring ad performance and preventing ad fraud. Legal basis: legitimate interest of the data controller (Art. 5(2)(f) KVKK; Art. 6(1)(f) GDPR). Personalised advertising and, in regions where a consent screen is shown, access to information on the device are based on your consent (Art. 6(1)(a) GDPR).
- Usage measurement: Understanding how the application is used, detecting errors and improving the application. Legal basis: legitimate interest of the data controller (Art. 5(2)(f) KVKK; Art. 6(1)(f) GDPR).
- Security: Preventing unauthorised access and misuse. Legal basis: legitimate interest of the data controller (Art. 5(2)(f) KVKK; Art. 6(1)(f) GDPR) and the legal obligation relating to data security (Art. 12 KVKK).
- Responding to requests: Handling support requests and requests concerning personal data. Legal basis: performance of a contract and legal obligation (Art. 5(2)(c) and (ç) KVKK; Art. 6(1)(b) and (c) GDPR).
Advertising Preferences
Depending on the rules applicable where you are located, a consent screen may be shown on which you can choose how your information is used for advertising. Depending on your choices, interest-based or non-personalised advertisements are shown. In regions where this option is offered, you can change your choices via Settings > About > Ad privacy options.
Declining personalised advertising does not remove advertisements altogether; limited information continues to be processed in order to display and measure advertisements and keep them secure. You can also reset your advertising identifier or limit personalisation in the advertising settings of your phone and your Google account. How Google uses this data is explained on the page How Google uses information from apps that use its services.
Device Permissions and Notifications
Quitify does not request access to your location, contacts, messages, camera or microphone. You can change notification types, the daily message time and quiet hours in Settings, and you can turn notifications off in the application or in your phone settings.
- Internet: Used for the account, online backup, advertising and usage measurement.
- Advertising identifier: Used by Google AdMob to display and measure advertisements.
- Notifications: If you allow them, used to send motivational messages and reminders about progress, achievements and goals. Notifications are prepared from the records on your phone; your records are not sent to any service for this purpose. Depending on your phone settings, notification content may appear on the lock screen.
- Running at start-up: Used to restore notifications, home screen widgets and scheduled backups when the phone restarts.
- File selection: When you create or restore a local backup, only the folder you select is accessed.
Disclosure of Personal Data
Personal data are not sold. Data are disclosed only to the recipients listed below and only for the stated purposes.
Service providers and other recipients
- Google (Firebase): Firebase Authentication for account and sign-in operations, Cloud Firestore for online backup and Google Analytics for Firebase for usage measurement. For details, see the Firebase privacy information.
- Google (advertising and distribution): Google AdMob for displaying advertisements and Google Play for distributing and updating the application. Information relating to advertisements may be shared with Google and its advertising partners. For details, see the Google Privacy Policy.
- Hostinger: Emails sent to [email protected] and the content of this correspondence are hosted on the infrastructure of the email service provider Hostinger. For details, see the Hostinger Privacy Policy.
- Competent authorities: Data are disclosed to public authorities and courts empowered by law only where there is a legal obligation to do so and only to the extent required by that obligation.
Countries where data are processed
Regardless of the country in which the user is located, account, backup, advertising and usage measurement data are processed on the infrastructure of Google and Hostinger in various countries, including the United States. Your data may therefore be processed outside your country.
With regard to transfers from Türkiye, these transfers are based on the appropriate safeguards provided for in Article 9 of the KVKK; with regard to transfers from the European Economic Area, they are based on the safeguards provided for in Chapter V of the GDPR, in particular standard contractual clauses and, where applicable, the EU-U.S. Data Privacy Framework.
Local backup files and device backups
You can save your records as a file named “quitify-backup.json” in a folder you choose on your phone. This file contains your personal records and is not password-protected. If you save the file to a cloud storage service or share it with others, the terms of the relevant service apply.
If Android backup is enabled on your phone, Quitify records and preferences may be copied to your phone’s backup in your Google account or to a new device during a device transfer. These copies are managed through the settings of your phone and your Google account.
Data Security
In accordance with Article 12 of the KVKK and Article 32 of the GDPR, Swanky Software takes appropriate technical and organisational measures to ensure the security of personal data.
- Encrypted communication: Communication between the application and Google services takes place over encrypted connections.
- Access control: The online backup can be accessed only by signing in with the relevant account.
- Records on the phone: Records on the phone are kept in the protected storage area that Android allocates to the application. Quitify does not additionally encrypt these records or local backup files; it is important that you protect your phone’s screen lock and the security of your account.
Data breaches
No system can guarantee absolute security. If personal data are unlawfully obtained by others, the competent data protection authorities and the affected users will be notified within the time limits and in the manner prescribed by law.
Retention Periods
- Records on the phone: Remain on your phone until you delete them, clear the application data or uninstall the application.
- Account and online backup: Retained until you delete your account or request its deletion. Signing out, turning off automatic backup or uninstalling the application does not delete your account or your online backup. Deletion methods are described on the Account and Data Deletion page.
- Backups from older versions: Online backups created with Quitify version 1.7.1 or earlier cannot be restored in the current version and are not automatically deleted when the account is deleted in the application. You can request the deletion of these backups by email.
- Advertising and usage measurement data: Retained by Google in accordance with the retention rules of the relevant service.
- Correspondence: Correspondence relating to support requests and data protection requests is retained for as long as necessary to resolve the request and to provide evidence in possible disputes.
Your Rights
Regardless of the country in which you are located, you have the following rights regarding your personal data (Art. 11 KVKK; Arts. 15–22 GDPR):
- Information: To learn whether your personal data are processed and, if so, to request information about it, and to learn the purpose of the processing and whether the data are used in accordance with that purpose.
- Recipients: To know the third parties to whom your personal data are transferred, whether domestically or abroad.
- Rectification: To request the rectification of incomplete or inaccurate personal data.
- Erasure: To request the erasure or destruction of personal data under the conditions provided for by law.
- Restriction: To request, in certain cases, that the processing of your personal data be restricted.
- Data portability: To request the personal data you have provided in a structured, commonly used format.
- Notification: To request that rectification, erasure or destruction be notified to the third parties to whom the data have been transferred.
- Objection: To object to processing based on legitimate interest and to a result to your detriment arising from analysis carried out exclusively by automated systems.
- Withdrawal of consent: To withdraw at any time the consent you have given for processing based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
- Compensation: To claim compensation for damage suffered as a result of the unlawful processing of your personal data.
Rights you can exercise in the application
You can view, correct and delete your records within the application. You can export your records as a local backup file, turn off automatic backup under Settings > Account and backup and delete your account via Settings > Account and backup > Delete account.
How to Submit a Request
You may send requests concerning your rights to [email protected] from the email address registered to your Quitify account. If you do not use an account, the records on your phone cannot be seen by Swanky Software, so you can exercise your rights regarding these records directly within the application. Additional information may be requested if your identity cannot be verified.
Requests are handled as quickly as their nature allows and free of charge within thirty days at the latest.
If you are not satisfied with the outcome of your request, you may lodge a complaint with the competent data protection authority. Users in Türkiye may apply to the Turkish Personal Data Protection Board within thirty days of learning of the response and in any event within sixty days of the date of the request; see the KVKK right to apply page for details. Users in the European Economic Area may apply to the data protection authority of the country in which they reside or work, and users in other countries may apply to the competent authority in their country.
Age Limit
Quitify is not intended for persons under 18 years of age. Accounts found to belong to a person under 18 may be closed and the associated online data may be deleted.
Changes to This Policy
This policy may be updated in line with changes to the application, the services used or the applicable law. The current version is published on this page, and the date of the last update is shown at the top of the page. Updates that materially change the purposes of processing or data transfers will also be announced in the application and, where necessary, your consent will be requested again.