Privacy Policy

Version: 16 October 2026

Controller: Geitau 21 GmbH & Co. KG, Geitau 21, 83735 Bayrischzell, Germany. Contact: office@exosphaera.dev, phone +49 89 21558309

In short

We have no access to what you record in the app. Your entries — quit date, smoking profile, check-ins, goals, programme progress, bookmarks, reading progress and reminder settings — stay on your device; the app does not transmit them to us. It makes no connection to any server of ours.

We process personal data in only two situations: when you write to us yourself, and around the voluntary supporter subscription or an earlier purchase — and that runs entirely through Apple.

If you have iCloud Backup enabled, Apple includes this app's data in your device backup, as it does for any other app. Apple is the controller for that, not us, and we have no access to that backup either.

What stays on your device

The app stores your smoking profile, your quit date, your daily check-ins, unlocked goals and badges, your progress in the 40-day programme, bookmarks and reading progress, the time of the last request for support, along with your settings (language, reminders, confirmed legal texts). This data lives solely in the app's protected storage area on your device.

You can delete it at any time: in the settings via "Reset all data", or by deleting the app. The reset removes all data the app created. A supporter subscription or an earlier purchase is tied to your Apple ID and is not affected. An existing iCloud backup is not covered by this — its contents are managed by Apple.

No analytics, no ad networks, no tracking

The app contains no analytics, advertising or tracking services and no third-party libraries that transmit data. There are no accounts and no cloud synchronisation. The requests to support Qualmfrei with a subscription are generated by the app itself on your device; nothing is collected or transmitted for them.

As the developer we receive from Apple only aggregated sales and usage statistics that cannot be traced back to you, and — if you have enabled sharing with app developers under "Privacy & Security → Analytics & Improvements" in the iOS settings — anonymised crash and diagnostic reports. You grant that permission to Apple and can withdraw it there at any time.

Reminders

If you switch reminders on, the app schedules notifications through the iOS notification feature directly on your device. Nothing is transmitted for this: there is no push service, no device token and no server sending notifications. You grant the permission to iOS and can withdraw it there or in the app at any time. The app works fully without reminders.

Supporter subscription and earlier purchases

Subscribing to, paying for, renewing and cancelling the voluntary supporter subscription — just like an earlier purchase of the full version — is handled entirely by Apple through the App Store, and Apple is your contractual partner for it. We receive no payment or contact details from you — only whether a subscription or purchase exists, which your device checks directly with Apple. Apple's privacy policy applies to that processing.

Contacting us by email

If you write to us, we process your details solely to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR where the matter concerns entering into or performing a contract, and otherwise Art. 6(1)(f) GDPR; our legitimate interest is answering user enquiries promptly and traceably.

For receiving email we use Proton Mail (Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Switzerland). The provider processes the messages on our behalf and stores them encrypted. Under the European Commission's adequacy decision, Switzerland is recognised as providing an adequate level of data protection (Art. 45 GDPR), so no additional transfer safeguards are required.

We delete correspondence as soon as it is no longer needed to handle the matter, and at the latest once statutory retention periods expire.

Your rights

You have the rights set out in Art. 15 to 21 GDPR: access, rectification, erasure, restriction of processing and data portability.

You have the right to object, on grounds relating to your particular situation, to processing we base on Art. 6(1)(f) GDPR (Art. 21 GDPR). An informal message to the address above is enough.

You may also lodge a complaint with a data protection supervisory authority. The authority responsible for us is the Bavarian Data Protection Authority (BayLDA), Promenade 27, 91522 Ansbach, Germany.