Quitaro Privacy Policy

Effective date: October 1, 2026

4etverg LLC (“4etverg”) operates Quitaro. This Policy describes the personal information we collect, use, share, retain, and protect when you use the Android app. Quitaro is intended for adults 18 and older.

Information we handle

We handle a random device identifier and information needed to provide the Service, such as operating system, language, purchase entitlement, trial state, and support communications. We handle information you enter or the app calculates for your Quitaro experience, including cigarette-spend estimate, check-in responses, run dates, relapse or restart events, missed-check-in status, and friend-entry status. Check-ins and relapse information may reveal health or lifestyle information; we treat it as sensitive. Most experience data is stored locally on your device. Random invite identifiers, invite codes, expiry and redemption status are sent to our Cloudflare Pages/D1 invite service when an invite is issued or redeemed.

Google Play provides purchase and transaction status. We do not receive your full payment-card number through Quitaro. If you contact support, we receive the information in that communication.

How we use information

We use information to provide and secure Quitaro; calculate trial, run, restart, and 60-day friend-entry states; validate purchases; respond to support; prevent abuse; maintain records; comply with law; and understand reliability and feature performance. We do not sell personal information or use check-ins to make medical, credit, insurance, employment, housing, or healthcare eligibility decisions.

Optional PostHog analytics

PostHog analytics are consent-gated. We use PostHog only if you affirmatively consent in the app. With consent, events may include screens or features used, app version, coarse device/technical information, performance events, and limited event labels such as that a daily check-in or relapse was recorded, associated with an app-generated identifier. We do not send check-in answers, free-text health content, cigarette-spend amounts, invite codes, or payment credentials to PostHog. Declining or withdrawing consent does not disable core access. After withdrawal, we stop sending new PostHog analytics; previously collected data may remain until deletion or retention processes complete. PostHog’s processing is subject to its terms and privacy materials.

Sharing

We share information with service providers that host, secure, support, or analyze the Service under contractual restrictions; with Google Play for billing and entitlement; when required to comply with law or protect rights and safety; and in a merger, financing, or sale subject to appropriate confidentiality. We do not share information with a charity so that you can designate or receive a benefit from it. 4etverg selects recipients of its own charitable giving; users do not.

Retention and security

We retain information for as long as reasonably needed for the purposes above, including accounting, dispute, security, abuse-prevention, and legal obligations, then delete or de-identify it when feasible. Invite records are retained as needed to enforce one-use and expiry rules and then deleted or de-identified under the service’s retention procedures. No security measure is perfect. Use a current device, protect access to it, and contact support if you believe information was misused.

Choices and rights

You may decline or withdraw optional PostHog consent in the app. Email support@4etverg.com to request access, correction, deletion, portability, or information about processing, or to ask a question. We will verify requests as required by law, respond within applicable deadlines, and provide an appeal process where required. We will not discriminate for exercising a legal right. Depending on where you live, additional rights may apply, including rights to limit certain sensitive-data uses. We do not use targeted advertising based on Quitaro data.

For California residents, these requests include the rights to know, delete, correct, opt out of sale or sharing, and limit use or disclosure of sensitive personal information where applicable. We do not sell or share Quitaro information for cross-context behavioral advertising.

Children and transfers

Quitaro is intended for adults 18 and older. We do not knowingly collect personal information from children under 13. If you believe a child provided information, contact support. Information may be processed in the United States and other places where our providers operate; we use measures required by applicable law for such transfers.

We do not operate a consumer health-data marketplace, sell consumer health data, or use geofences around health-care facilities. We do not believe the FTC Health Breach Notification Rule currently applies to Quitaro as a standalone habit-support app rather than a personal health record vendor, but we will reassess if the product begins aggregating or offering health records across sources. A legally required notice will be provided if an applicable breach occurs.

We may update this Policy by posting a new effective date. Questions and legally required requests may be sent to support@4etverg.com.