Puffgap Privacy Policy
In short
- No account. Your logs, plan, notes and moods stay on your device; we cannot see them.
- To improve the app, we send usage events that do not identify you; you can turn them off in Settings. Your notes, triggers, moods, setup answers, survey answers and Ramadan setting are never sent.
- The AI coach in Premium only works if you give explicit consent; then your messages and a summary of your plan are sent to Anthropic to write replies.
- Friends also works only with your explicit consent; friends you invite see only your nickname and a single progress number.
- No ads, no selling of data.
- Apple takes the subscription payment. RevenueCat verifies your subscription status and receives no health information.
1. Who we are
Kadir Yılmaz, independent developer, email: info@puffgap.com ("we").
2. Information that stays on your device
As you use the app, the following is stored on your device, in a container that belongs to the app. The widget and Shortcuts read the same container. The Apple Watch app receives only the timer state, directly from your paired iPhone.
- Logs: the time of each session, its type (vape or cigarette), and how it was logged (app, widget, watch, etc.).
- Plan: start date, length, weekly goals, and any hard weeks you marked.
- Setup answers: device type, price and how long it lasts, daily use estimate, wake and sleep times, your reasons for quitting, triggers, if-then plans, and your reward goal.
- What you write: your note to your future self.
- Daily entries: craving (SOS) outcomes, your mood for the day, purchases you log, and your answer to the day-30 and day-90 question.
- Settings: discreet mode, lock-screen timer, cigarette logging, Ramadan plan. The Ramadan plan is only a setting; the app never asks whether you fast, and the setting never leaves your device.
None of this is sent to us or anyone else. The only exception is the usage events listed in section 3, which do not include your individual logs. It may be included in your device backups (iCloud Backup or a computer backup), which are controlled by Apple and you; we have no access to them. Deleting the app deletes all of it from your device.
Notifications are created on your device, not sent from a server. Face ID (discreet mode) is Apple's on-device check; neither the app nor we can access biometric data.
3. Information that leaves your device
Apple (App Store): Apple processes purchases and subscription payments. Your payment details never reach us. Apple's privacy policy applies.
RevenueCat, Inc. (USA): verifies whether your subscription is active. It receives a randomly generated app user ID (not linked to your name, email or Apple Account), purchase and subscription transactions, store country, device model, OS and app version, and your IP address as part of the connection. No logs, plan or other health information are sent.
Anthropic, PBC (USA), only if you use the coach: if you start the Premium coach with your explicit consent, your messages, the last 29 messages of the chat and a short summary of your plan (phase, week, goal gap, today's session count and daily goal, minutes since your last session, quit date, vape-free days, whether you also smoke, your reasons, triggers and if-then plans, local time) are sent to Anthropic through Puffgap's server running on Cloudflare, Inc. (USA); Anthropic's Claude model writes the reply. Our server does not store or log chat content; it only keeps a daily message count tied to your RevenueCat user ID and checks your Premium status with RevenueCat. Anthropic does not use data sent through its API to train its models and deletes it after a limited period under its retention policy. Your chat history stays only on your device. You can withdraw consent at any time with "Withdraw consent" on the coach screen; this also deletes the history. Your note, purchases, moods, survey answers and Ramadan setting are not sent.
Cloudflare, Inc. (USA), only if you use Friends: if you start Friends with your explicit consent, the nickname you choose, a single progress number (days on target while cutting down, or vape-free days after quitting; while in the first observation days, only that fact), a randomly generated ID, your friend connections and the ready-made cheers you exchange are stored on Puffgap's server running on Cloudflare. Only friends you add with an invite code can see them. Your logs, times, notes, triggers and purchases are not sent. Friends → Leave Friends deletes everything at once; it is also deleted automatically if you do not open the app for 180 days. Cheers are deleted from the server once you have seen them. When you open an invite link, your IP address is kept on the server together with the invite code for up to 30 minutes, so the invite can be added automatically once you install and open the app; it is deleted when the app picks up the code or the time runs out.
Crash reports: if the app crashes or freezes, the technical report Apple creates on your device (call stack, app and OS version, device model) is sent to Puffgap's server on Cloudflare at the next launch and kept in the server log for a few days. It contains nothing that identifies you or describes your use. It is not sent while Settings → Anonymous usage data is off.
TelemetryDeck GmbH (Germany): to improve the product, we send usage events:
- setup steps and completion (with the chosen plan length),
- the paywall being shown and purchases (which screen, which product, whether it is a trial, store country and price),
- a week advancing or repeating (with that week's days on target), a hard week being marked, reaching quit day,
- opening and finishing SOS (not its outcome), opening the share screen, answering the day-30 and day-90 question (not the answer itself),
- joining Friends, inviting, accepting, cheering and leaving (not who, and not your nickname), and the number of crashes and freezes.
Each event also carries the app version, OS, device model, language and region settings, and whether you have Premium. Nothing that identifies you is sent: the device identifier is hashed one-way on your device, and TelemetryDeck does not store IP addresses. Your individual session logs, SOS outcomes, notes, triggers, moods, setup answers (price, reasons), purchases you log, survey answers and Ramadan setting are not sent. You can turn this off in Settings → Anonymous usage data; while it is off, no events are sent.
4. Children
Puffgap is for people aged 18 and over.
5. Your rights
You can ask us what personal data we hold about you, and ask us to correct or delete it, by writing to info@puffgap.com. We reply within 30 days. We cannot see the information that stays on your device; to delete it, delete the app.
If you are in the EEA or the UK, the GDPR gives you the rights of access, rectification, erasure, restriction, portability and objection, and the right to complain to your data protection authority. Subscription data is processed to perform our contract with you; usage events are processed on the basis of our legitimate interest in improving the app. Coach messages and plan summaries may be health data (special category data under Art. 9); they are processed only with your explicit consent (Art. 9(2)(a)) to write the coach's replies. For the same reason, your Friends nickname and progress number are processed only with your explicit consent, to show them to your friends. Usage events are processed by TelemetryDeck in the EU. Transfers to the USA (RevenueCat; Cloudflare for Friends and crash reports; and for the coach Cloudflare and Anthropic) rely on the European Commission's Standard Contractual Clauses.
We do not sell or share personal information, as those terms are defined in the California Consumer Privacy Act.
6. Changes
When we update this policy, the date above changes. If what leaves your device changes, we will also tell you in the app.