Privacy Policy

Last updated November 7, 2026.

This policy covers the iPhone and Android apps. Where a section mentions your iPhone, Apple Health, Sign in with Apple or Apple purchases, it describes the iPhone app; the Android app is described in its Android sections.

Summary

Every functional feature is free, and no account is required. Counters, start dates, journal entries, reasons, check-ins and estimates are saved on your iPhone. Slip-Point Shield adds a voluntary pause at apps you choose. Its app choices, protection settings and reset handoff stay on the device.

Your local records

You decide what to save. Your counter dates and notes are user-entered records, not a measurement of abstinence or a diagnosis. Money and time saved are estimates based on the amounts you enter. Local photos can be used for a counter background or attached to a journal entry.

You can export a backup file through Files. That file can include your local records and photos; where you save or share it is your choice. Our optional account backup contains records only, with no photo bytes or photo references. Quit Milestones does not read HealthKit data.

Screen Time and Slip-Point Shield

Screen Time access is optional and is requested when you choose apps. Apple's picker supplies private app-selection identifiers. Quit Milestones keeps those identifiers and its protection plan locally; it does not send your chosen apps to our account service, RevenueCat or Sentry. The app does not collect a Screen Time usage report or judge whether you met a usage goal.

The shield can show the day count from your selected manual start date. Showing your chosen personal reason requires a separate choice that starts off. With the app lock enabled, the external shield stays neutral, including after you unlock Quit Milestones.

A shield reset action saves an expiring, one-time local handoff. Reset reminders contain neutral text and an opaque random identifier, with no counter name, date, day count or reason. Opening a reset does not start its timer or change your records. Resets started counts explicit Start reset taps; it does not infer a slip, relapse or completed exercise. Protection choices, Screen Time permission and pending handoffs are excluded from backups.

Widgets

Widgets read a small local snapshot written by Quit Milestones. They do not access Screen Time or read your journal or reasons. The snapshot lets them show the selected counter’s day count and next milestone, plus resets started this week and the saved guard status on a medium widget.

Home Screen names stay hidden until you turn on Show name in widgets. Lock Screen widgets always show only the day number; names and reasons never appear there. If the app lock is on, every widget shows only the day number; it leaves out names, reasons, milestones, reset totals and guard details. A missing or unreadable snapshot shows an empty or unavailable message.

Optional account and marketing choices

You can use the app without signing in. The Android app has no account. On iPhone, the optional shared suite account is for people 18 or older and supports email sign-in or Sign in with Apple. It stores your email address, account or Apple sign-in identifier, the optional name Apple shares, the apps you sign in to, your beta and marketing choices and the time you made them, supporter purchase status, and an optional backup for each app.

If you sign in with a verified email address or Apple ID that also belongs to a NearbyGrid account, our accounts server checks whether that NearbyGrid account is in good standing and was active in the past 7 days. If it was, your Solstice Suite apps are ad-free until 7 days after that activity. The only result the check gives is whether you qualify and until when; that date is held briefly in the server's memory (up to 10 minutes), is not saved to your suite account, and no other NearbyGrid information is shared with the suite apps.

Marketing consent starts unchecked. If you opt in, we use your email and saved choice to send the app news you requested. You can change your choices or sign out. Deleting the shared account removes it and its account backups across our apps. See the suite account page for the shared account and deletion tools.

Optional online backup

Quit Milestones backs up online only when you choose Back up now while signed in. The records-only backup includes counters and start dates, journal and check-in entries, reasons, saved money and time rates, reminders, short lines, reading notes, widget choice, daily lines, program progress and the literal reset-start count and the recorded dates of new explicit starts. Appearance preferences are included too.

The backup is linked to your account. Counters and journal entries about sobriety or health can contain user-entered health information. No HealthKit-sourced data or photos are included. An online backup can be up to 2 MB; a larger one is not saved online, and you can export a file instead. A new online backup replaces the previous one.

Purchases and RevenueCat

On iPhone, Apple processes optional supporter subscriptions; on Android, Google Play does. We do not receive your payment card details. RevenueCat processes and restores purchase status and uses purchase information and device identifiers for app functionality and analytics. RevenueCat receives your iPhone's identifier for vendor (IDFV). It does not receive your journal, reasons, counter content or photos.

We treat this persistent device identifier as linked device data. Purchase history is also treated as linked because, when you are signed in, the suite account receives the verified Apple purchase record and stores it with your account. Your account User ID is used for account functionality. These data are not used for tracking across other companies' apps or websites. See RevenueCat's privacy policy.

Crash, performance and diagnostic reports

Sentry receives crash reports, performance measurements and diagnostic events such as fixed workflow and lifecycle breadcrumbs. The app removes private breadcrumb text and data, removes the diagnostic user field, and filters request details before sending reports. These reports are declared as unlinked and used for app functionality, not tracking. No screenshots or journal, reason or counter text are attached. See Sentry's privacy policy.

App Privacy data categories

• Linked data: Email Address, Name, User ID, Purchase History, Device ID, Other User Content and user-entered Health.
• Unlinked data: Crash Data, Performance Data and Other Diagnostic Data.
• Purposes: App Functionality for these categories; Analytics also for RevenueCat Purchase History and Device ID; Developer's Advertising or Marketing also for email when you opt in.
• No category is used for tracking. Optional account backup collects no Photos or Videos.

iPhone permissions

• Screen Time: asked when you choose trigger apps; you can decline and still use counters, the clearly labeled shield Preview and the two-minute reset.
• Face ID or device authentication: optional privacy lock. Quit Milestones does not store your biometric information or device passcode.
• Photos: optional system selection for counter backgrounds and journal photos. Our account backup contains no photos.
• Notifications: optional daily reminders, milestone notices and neutral reset reminders. The app does not request them at launch.

Quit Milestones on Android

Quit Milestones keeps your records on your phone. It has no account, no sign-in and no advertising; the Android app uses the network only for the optional subscription and for crash and diagnostic reports, described below. Your counters, notes, check-ins, reasons, short lines, reading notes, programme progress, daily lines, rates, app-icon choice, private-lock choice, note photos and any background photo are stored in the app's private storage, which other apps cannot read.

A reminder notification is scheduled on your phone; notification permission is optional and the app works without it. Backups are written only when you choose "Save a backup" and pick a place with Android's own file picker. Text or a photo leaves the app only when you tap share and choose where it goes. Deleting all data in Settings removes every record, the photos and the kept copies; Android's own backups are turned off for this app.

The app is not medical care, not a diagnosis and not a treatment plan, and it is not a substitute for care from a professional.

Android app: purchases, diagnostics and network

Purchases. The optional subscription is sold through Google Play. Google processes the payment; RevenueCat receives the purchase receipt and subscription status so the app can restore the supporter state on another install signed into the same Google Play account. The app creates no account, and RevenueCat's automatic device-identifier collection is disabled.

Crash and diagnostic reports. If the app crashes or reports a handled error, Sentry receives a report with the stack trace, app version, device model and Android version, plus a short diagnostic trail of screens, fixed action codes and network events (URLs without query strings). Sentry's automatic personal-data collection is off; the app never attaches a user identity, screenshots, view hierarchy, cookies or request headers, and there is no advertising identifier. It does not include your counters, notes, check-ins or other app content.

Network. The app still works with no connection. A connection is used to load subscription products, validate or restore a purchase, and send crash and diagnostic reports (including Sentry sessions/performance).

Ads. This app shows no ads. The optional $19.99/year subscription supports the app; every feature is already free.

Our apps and advertising

Occasional, dismissible promotions are for other apps by the same developer. We do not sell personal information or use Apple's advertising identifier for cross-company tracking. The Android app has no advertising identifier. The app checks only for our own installed apps to avoid promoting ones you already have; that result stays on the device. An ad-free end date is stored in the suite's shared local access area so our other apps on the same iPhone can honor it.

This website

Cloudflare serves this site and provides website traffic and performance measurements. If you submit the optional app-news form, we receive the email address and app-news choice you submit. The form does not upload records from Quit Milestones.

The website traffic measurement is Cloudflare Web Analytics, a page-view counter that sets no cookies, stores nothing on your device and does not build a profile of you across sites. See Cloudflare's privacy policy. This website does not use Google Analytics or advertising cookies. What the app itself collects is described in the rest of this policy.

Your choices and rights

You can decline optional services, change account choices, turn off permissions in iPhone Settings, export your local records, or use the app's Delete all data tool. Local deletion and deleting the optional online account are separate actions. For access or deletion requests, contact privacy@solsticesuiteapps.com. Depending on where you live, you may have additional privacy rights, which we will honor.

Retention and security

We keep information only as long as needed for the purposes above and protect it with reasonable safeguards. Local data remain under your iPhone's storage and backup settings. Optional account backups can be replaced or removed through account deletion.

Children and important information

The app is not directed to children under 13, and we do not knowingly collect their personal information. The optional shared account is for adults 18 or older. Quit Milestones is a personal progress log, not treatment, counseling or medical advice. If you are in danger, call emergency services; in the US, the 988 Suicide and Crisis Lifeline is also available.

Changes and contact

We will post changes here and update the date above. Privacy questions: privacy@solsticesuiteapps.com.