Last updated: 12 April 2026
1. Who we are
Kvitter is a habit-quitting app developed and operated by NOXX AS («we», «us», «our»), organisation number 933 532 827, registered in Norway. The app is available on iOS at kvitterapp.com.
For any privacy-related questions, contact us at contact@kvitterapp.com.
2. What data we collect
We collect only what is necessary to provide the app’s core functionality. Kvitter uses a server-side database (Supabase, hosted in the EU) to sync your data across sessions and enable community features.
Account data
| Data | Stored where | Why |
|---|---|---|
| Apple ID token (anonymised) | Supabase Auth | To authenticate your account |
| Display name | Supabase + your device | To personalise your experience and show your name to friends |
| Avatar selection | Supabase + your device | To display your chosen avatar to you and your friends |
| Profile photo (if uploaded) | Supabase Storage | To display your profile photo |
Habit and progress data
| Data | Stored where | Why |
|---|---|---|
| Habits (name, start date, daily cost, frequency, relapses) | Supabase + your device | To track your streaks and savings |
| Mood check-ins | Supabase + your device | To show your mood history |
| Achievements and trophies unlocked | Supabase + your device | To track your milestone progress |
| Quiz answers and scores | Supabase + your device | To track quiz progress and award trophies |
Community data
| Data | Stored where | Why |
|---|---|---|
| Friend connections (follows) | Supabase | To enable the friends feature |
| Duel/challenge participation | Supabase | To enable the Quit Together feature |
| Event participation | Supabase | To track which community challenges you have joined |
| Duel comments | Supabase | To enable commenting in duels |
Coach Conrad (AI)
| Data | Stored where | Why |
|---|---|---|
| Coach messages (your messages and AI responses) | Supabase | To maintain your conversation history across sessions |
| Daily message count | Supabase | To enforce free-tier rate limits (3 messages/day) |
When you send a message, it is transmitted to the Anthropic API to generate a response. Your habit data (names, streaks, savings) is included as context so the coach can give personalised advice.
Device and technical data
| Data | Stored where | Why |
|---|---|---|
| Push notification token (Expo) | Supabase | To send you push notifications (daily reminders, milestones, social activity) |
| Subscription status (Pro/Free) | Supabase + RevenueCat | To verify your subscription and unlock Pro features |
| Error logs (crash context, no personal data) | Supabase | To identify and fix bugs |
| Location (city-level, Pro only, on request) | Used in-app only, not stored server-side | To show nearby deals for Pro members |
iOS Widget
If you use the Kvitter iOS widget, a summary of your habits (name, streak, savings) is stored in a shared App Group container on your device so the widget can display your progress. This data never leaves your device.
3. What we do NOT collect
- Your email address (Apple Sign-In hides it by default)
- Your phone number
- Device advertising identifiers (IDFA) for advertising purposes
- Your contacts, calendar, or files
- Browsing history or cross-app tracking data
- Biometric data
- Your camera or photos (unless you choose to set a profile photo)
Kvitter does not display advertisements. We do not share your data with advertisers. We do not sell your data to anyone, ever.
4. How we use your data
We use the data we collect solely to provide and improve the Kvitter app:
- Habit tracking — to calculate your streak, days clean, and money saved
- Coach Conrad — to send your messages to the AI and return a personalised response
- Community features — to enable friends, duels, events, and mutual support
- Quiz personalisation — to show you questions relevant to your interests and habits
- Push notifications — to send daily reminders, milestone alerts, and social activity updates (configurable in Settings)
- Subscription management — to verify whether you have an active Pro subscription
- Deals — to show location-relevant offers to Pro members (location is requested on demand and not stored)
- Error logging — to identify and fix crashes and bugs
We do not use your data for advertising, profiling, or selling to third parties.
5. Community features and data visibility
When you use community features, certain profile information is visible to other Kvitter users:
- Visible to friends: Your display name, avatar, profile photo, days clean, and primary habit
- NOT visible to other users: Your push notification token, subscription details, email, location, coach messages, mood history, or detailed habit data
You can remove a friend connection at any time, which revokes their access to your profile.
6. Third-party services
Kvitter uses the following third-party services, each with its own privacy policy:
Supabase (database and authentication)
Your account and app data is stored in Supabase, hosted in the EU. Supabase processes data in accordance with GDPR requirements. See Supabase Privacy Policy.
Anthropic (Claude AI)
When you send a message to Coach Conrad, that message and your habit context are transmitted to Anthropic’s API to generate a response. Your conversation history is stored in our database, not by Anthropic. Anthropic processes your message in accordance with their Privacy Policy.
Do not share sensitive personal information (such as your full address, financial details, or medical conditions) in Coach Conrad messages.
Apple (App Store and In-App Purchases)
Kvitter is distributed through the Apple App Store. If you purchase a Pro subscription, your payment is processed entirely by Apple. We never see your credit card or payment details. See Apple’s Privacy Policy.
RevenueCat (subscription management)
We use RevenueCat to manage subscription status and verify purchases. RevenueCat receives an anonymised user identifier and your subscription status. It does not receive your habit data, name, or any personally identifying information beyond what Apple provides. See RevenueCat’s Privacy Policy.
Expo (push notifications)
We use Expo’s push notification service to deliver notifications to your device. Expo receives your device push token. See Expo’s Privacy Policy.
Sentry (error tracking)
We use Sentry to monitor app crashes and errors. Sentry receives anonymised error logs with technical context (device type, OS version, stack trace). No personal data (name, habits, messages) is sent to Sentry. See Sentry’s Privacy Policy.
7. Data storage and security
- Server: Your data is stored in Supabase (PostgreSQL), hosted in the EU, with Row Level Security (RLS) on all tables ensuring users can only access their own data
- Local: A copy of your data is cached on your device using AsyncStorage for offline access
- Auth tokens: Authentication tokens are stored in iOS Secure Keychain (SecureStore)
- Transit: All data is transmitted over HTTPS/TLS
- iCloud backup: Local app data may be included in your iCloud backup if you have iCloud backup enabled in your iPhone settings (this is controlled by iOS, not by us)
8. Data retention
- Active accounts: Your data is retained as long as your account is active
- Deleted accounts: When you delete your account (Profile > Reset Everything > Delete Account), all your data is permanently removed from our servers via cascading delete. This includes your profile, habits, achievements, coach messages, follows, duels, quiz results, and mood data
- Coach messages: Stored indefinitely while your account is active. Deleted when you delete your account
- Error logs: Retained for up to 90 days, then automatically purged
9. Children’s privacy
Kvitter is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at contact@kvitterapp.com and we will take steps to delete such information.
10. Your rights
You have full control over your data:
| Right | How to exercise it |
|---|---|
| Access your data | All your data is visible within the app. Your server-side data can be requested via contact@kvitterapp.com |
| Delete your data | Profile > Reset Everything > Delete Account. This permanently removes all your data from our servers |
| Delete local data | Uninstalling the app removes all locally cached data |
| Cancel subscription | iPhone Settings > Apple ID > Subscriptions > Kvitter |
| Disable notifications | Profile > Notifications, or iPhone Settings > Notifications > Kvitter |
| Opt out of AI coach | Simply do not use the Coach Conrad feature |
| Opt out of location | Deny location permission when prompted, or revoke in iPhone Settings > Kvitter |
| Contact us | contact@kvitterapp.com |
GDPR (European Economic Area)
If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to data portability, the right to restrict processing, and the right to lodge a complaint with your local data protection authority. Our legal basis for processing your data is:
- Contract performance — to provide the app’s features you signed up for
- Legitimate interest — to maintain security and fix bugs
- Consent — for push notifications and location access (both opt-in)
For GDPR requests, contact us at contact@kvitterapp.com.
11. Changes to this policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the «Last updated» date at the top of this page and may notify you via the app.
Continued use of Kvitter after changes to this policy constitutes your acceptance of the updated terms.
12. Contact us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
NOXX AS
Email: contact@kvitterapp.com
Website: kvitterapp.com
We aim to respond to all privacy-related enquiries within 5 business days.