Effective date: DATE
Last updated: DATE
Quit Gear is an educational app for men coming off anabolic steroids. This policy explains what the app does with information about you, in the order that matters: what stays on your phone, what leaves it, and what you can do about either.
Words like "we" and "us" mean LEGAL ENTITY NAME, REGISTERED ADDRESS, COMPANY NUMBER, the controller of any personal data described here. You can reach us at CONTACT EMAIL.
In short
- Everything you enter — your quiz answers, your day count, check-ins, urges, journal entries, bloodwork results and settings — is stored on your phone.
- We do not sell your data, we do not use it for advertising, and we do not profile you for anyone else.
- Your journal never leaves your phone. Nothing reads it: no person, no model, no keyword scan.
- The app does not require an account, and does not ask for your name for identification. The name you give is only used to address you on screen.
- Payment is handled by Apple or Google. We never see your card details.
1. What the app stores on your phone
All of the following is written to storage on your device and is not sent to us:
- Your age. A number only, entered once to confirm you are 18 or over. We do not ask for your date of birth.
- Your first name or nickname, if you give one. It is used to address you on screen and for nothing else.
- Your quiz answers and the recovery profile built from them, including the length of your roadmap.
- Your day count, the date you came off, and the date of any reset.
- Your daily check-ins: sleep, mood and strength, each a number from one to five, with the date.
- Urges you rode out, with the time you held on and, if you tagged it, what set it off.
- Journal entries, including anything you have started writing and not yet saved.
- Bloodwork you enter, including the marker, the value, the unit and the date.
- What you told us gear was costing you, as a band and a currency, if you chose to say.
- Your settings: reminder times, lesson and week progress, and the details of a trusted contact if you set one.
Deleting the app deletes all of it. We cannot recover it for you.
2. Health data and your consent
Some of the above — check-ins, symptoms, quiz answers, bloodwork — is data about your health. Under the UK GDPR and the EU GDPR that is a special category of personal data, and we do not store it outside your phone without your explicit consent.
The app asks for that consent once, on its own screen, with both answers given equal weight. You can say no and use the app exactly as before; you can change your mind at any time in Settings. Where consent is the legal basis, withdrawing it stops any further use and does not affect what was lawful before you withdrew it.
If you create an account and agree, a copy is kept on a server. Accounts are optional. If you sign in and give this consent, a copy of the data above — except your journal — is stored with Supabase, our database provider, in its European Union region, so it can come back on a new phone. It is kept while your account exists. The database only lets your own account read or change your copy, and it refuses to store anything for an account that has not given this consent — the check is in the database itself, not only in the app. Withdrawing consent in Settings deletes the server copy straight away; so does deleting your data or your account.
Your journal is out of scope of that consent. It is never sent to a server, with or without consent. The only way a journal entry leaves your phone is if you export your data yourself.
3. What leaves your phone
- Purchases. If you buy a subscription or the lifetime option, the purchase is processed by Apple or Google. They tell us, through our billing provider RevenueCat, Inc., whether you have an active entitlement, along with an identifier for the purchase. We never receive your card number or your store account password.
- Usage statistics, only if you say yes. During setup the app asks whether you want to share anonymous usage statistics; nothing is sent before you answer, and nothing at all if you say no. If you say yes, the app sends PostHog (our analytics provider, in its EU region) a short list of events — for example that a screen was opened, that a check-in or a journal entry was saved, that an urge was ridden out and roughly for how long, that a milestone was reached, which plan was chosen, and the kind and place of an error — together with your phone's operating system, the app version, whether you have a subscription and which phase of the plan you are in. They are tied to a random number made on your phone, not to your name, email or account. Never sent: anything you write, your check-in answers, your blood results, what you spent, your triggers, your trusted contact, anything about the crisis screen, or your location (location lookup is switched off). You can change your answer any time in Settings; saying no, or deleting your data, stops the statistics and replaces the random number. Because using this app relates to your health, we rely on your explicit consent for this (Article 9(2)(a) GDPR).
- Signing in with an email address. If you choose to, the app sends your address to our account provider so it can email you a six-digit code. The email names neither the app nor what it is for. Before the code is sent, a check by Cloudflare Turnstile confirms that a person is asking rather than a script; it runs in a small web page inside the app and Cloudflare receives your IP address and technical details of the device for that check only. An address that never enters its code is deleted from our records within a day.
- Links you follow. Crisis lines, a doctor's site, our terms: opening one leaves the app and the other site's own policy applies.
- What you send yourself. Export produces a file you share where you choose. A message to your trusted contact opens your own phone's share sheet with the text ready; the app does not send it for you and never sees where it goes.
4. Notifications
Reminders you set, milestone messages and bloodwork reminders are scheduled on your phone by the operating system. They do not come from a server, and nothing about them leaves the device. Their wording never names this app's subject on your lock screen.
You can turn them off inside the app, or in your phone's settings.
5. Legal bases
| What | Why | Basis |
|---|---|---|
| Data on your phone | To run the app for you | It is not processed by us; it stays under your control |
| Health data on a server, if you consent | To back it up and sync it | Explicit consent, Article 9(2)(a) |
| Purchase and entitlement | To give you what you paid for | Performance of a contract |
| Your email address, if you sign in with email | To send you a sign-in code | Performance of a contract: the account you asked for |
| A bot check before a sign-in code is sent | To stop anyone using the app to email strangers | Legitimate interests in preventing abuse |
| Usage statistics and error kinds, if you say yes | To see what helps and to fix faults | Explicit consent, Article 9(2)(a) |
6. How long we keep things
Data on your phone stays until you delete it or remove the app. Anything on a server is kept while your account exists, and deleted from the live database the moment you delete it in the app — your data, your account, or your consent — and from the provider's backups when those expire. Usage statistics, if you agreed to them, are kept for up to a year. Purchase records are kept as long as tax and accounting law requires.
7. Your rights
Where we hold personal data about you, you have the right to access it, to correct it, to have it erased, to restrict or object to its use, and to have it given to you in a portable form. You can exercise most of these yourself inside the app:
- Access and portability: Settings, then Export everything.
- Erasure: Settings, then Delete everything. It erases the data on the phone, and anything held on a server, and cannot be undone.
- Withdraw consent: Settings, health data sync.
For anything else, write to CONTACT EMAIL and we will answer within one month. If you think we have handled your data badly you can complain to your data protection authority: in Poland that is the President of the Personal Data Protection Office (UODO), and in the UK the Information Commissioner's Office (ICO).
8. Children
Quit Gear is for adults. The app asks your age before anything else and does not open for anyone under 18. We do not knowingly process data about children.
9. Security
Data on your phone is protected by your phone: its lock screen, its encryption and the sandbox the operating system puts around every app. On top of that, the app encrypts what you enter — your journal, check-ins, bloodwork and the rest — with AES-256, using a key kept in the device keychain or keystore. The key never leaves that phone and cannot be read while the phone is locked after a restart, which also means a copy restored to a different phone from a device backup cannot be opened there. Your age and your consent record are kept in the keychain or keystore directly.
When you leave the app, the picture of it in the app switcher or the recent-apps list is blurred or hidden, so the screen you were on is not on show to anyone who picks up your phone.
You can also lock the app itself, in Settings, with Face ID, Touch ID, a fingerprint or your phone's passcode. The check is done by your phone; the app is only told whether it passed, and never sees or stores your face, fingerprint or passcode. If you have an account, everything sent between the app and the server is encrypted in transit (TLS) and stored encrypted at rest. Access is controlled row by row in the database: each account can reach only its own records.
No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority as the law requires.
10. International transfers
Nothing leaves your phone unless you use one of the optional features in section 3. When you do, these providers process it for us, under data processing agreements:
- Supabase — the account and the server copy, stored in the EU.
- Resend — delivers the sign-in code by email.
- Cloudflare — the bot check before a sign-in code is sent.
- PostHog — usage statistics, if you agree to them, in its EU cloud.
- RevenueCat — confirms what you have bought, from Apple or Google.
- Apple and Google — purchases, and sign-in if you choose them.
Where a provider is based outside the UK or EEA, or could access data from there, the transfer is covered by the European Commission's standard contractual clauses (with the UK addendum) or the EU–US Data Privacy Framework.
11. This website
quitgear.com sets no cookies, runs no analytics and loads nothing from anywhere else — its fonts are served from the site itself. Our host, Vercel, keeps short-lived server logs (including IP addresses) to run and protect the site.
12. Changes
If this policy changes in a way that affects you, the app will tell you before the change takes effect, and a change to what we do with health data will ask for your consent again rather than assume it.
13. Contact
LEGAL ENTITY NAME, REGISTERED ADDRESS CONTACT EMAIL DATA PROTECTION CONTACT, IF ONE IS APPOINTED