Privacy Policy & Clinical Data Governance
Behavioural nicotine cessation requires profound trust. QuitLoop operates under NHS Digital Technology Assessment Criteria (DTAC) standards and UK GDPR Article 9 safeguards for special-category health data.
Self-Service Data Sovereignty Hub
Live controls over your digital biomarker records and portability rights under UK GDPR Articles 15, 17, and 20.
Portability Archive
Download machine-readable biometric logs, tap counts, and nicotine tapering curves in JSON and CSV.
Export is available inside the signed-in portal.
Predictive Biometrics
Pause on-device models parsing heart-rate variability and inhalation micro-gestures. Core tracking still works.
Toggle from the portal Health tab.
Right to Erasure
Execute UK GDPR Article 17 hard-deletion. Permanently wipes server records, biometric logs, and calibration indices.
What We Promise vs What We Never Do
Standard commercial wellness trackers frequently monetise micro-habits and auction behavioural telemetry. QuitLoop repudiates this model. Nicotine dependence is a clinical dependency; rehabilitation telemetry remains strictly non-commercial.
- End-to-end encryption: AES-256-GCM on device before cloud backup.
- 100% UK residency: AWS London (eu-west-2) sovereign jurisdiction.
- Edge model execution: Craving prediction on-device, not on ad clusters.
- Right to portability: JSON and CSV export at zero cost.
- Zero data brokerage: We never sell puff histories or habit profiles.
- No ad pixels: No Meta, TikTok, Google Ads or fingerprinting scripts.
- No insurer linkage: Cessation pace is never shared with underwriters.
- No raw audio archive: SOS voice notes transcribe on-device then purge.
Exact Data Collected & Clinical Purpose
In accordance with UK GDPR Article 5(1)(c) (data minimisation), QuitLoop collects only the telemetry required for personalised neuro-tapering and patient support.
| Data Category | Telemetry | Statutory Basis | Retention |
|---|---|---|---|
| Identity & Account | Optional NHS number, hashed email, salted credential, 18+ age band. | Article 6(1)(b) Contract | Active account + 30 days post-deletion. |
| Nicotine biomarkers | Inhalation timestamps, aerosol volume estimates, mg/ml, taper goals. | Article 9(2)(a) Explicit consent | Until account life or one-click reset. |
| Sensor band metrics | PPG pulse, HRV (RMSSD), skin conductance, hand-to-mouth accelerometer. | Article 9(2)(h) Health care | Raw 50Hz stream purged every 48 hours. |
| Craving reflections | Trigger context, intensity 1–5, on-device transcription tokens. | Article 9(2)(a) Explicit consent | Raw audio deleted instantly; tokens 90 days. |
Article 9 Special Category Safeguards & Caldicott Governance
Inhalation counts, nicotine titration steps and craving physiological markers are special-category data. Processing is overseen by a designated Clinical Caldicott Guardian in line with the National Data Guardian’s eight principles.
Data Retention & Automated Purge Cycles
SOS craving audio is processed in RAM. Raw files are overwritten within 60 seconds of transcription.
Raw 50Hz PPG is aggregated into hourly medians, then discarded.
Accounts with no sync for 365 days are notified, then identifying clinical records are purged.
Clinical DPO & Statutory Supervisory Authority (ICO)
QuitLoop Health Ltd, Attn: Dr Simon Vance, 100 Victoria Embankment, London, EC4Y 0DH. Email dpo@quitloop.co.uk. Statutory response SLA: under 72 hours. You may also lodge a complaint with the ICO at ico.org.uk or 0303 123 1113.