Privacy Policy

LessSmoke - Quit Smoking App

Effective Date: January 1, 2025

Last Updated: September 15, 2026

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address, username, and password when you create an account
• Profile Information: Smoking history, quit date, personal goals, and preferences
• Usage Data: Your interaction with the app, smoking cessation progress, token usage, and feature preferences
• Subscription Information: Purchase history, subscription status, and payment information (processed by Apple)

1.2 Automatically Collected Information

• Device Information: Device type, operating system, app version, and unique device identifiers
• Usage Analytics: App usage patterns, feature usage, crash reports, and performance data
• Location Data: We do not collect precise location data, but may collect general location based on IP address for regional features

1.3 Sign in with Google

If you choose Sign in with Google, Lessmoke requests only openid email profile. Google provides your account identifier, e-mail address and basic profile information, such as your name and profile picture when available. We use these details only to authenticate you, maintain your Lessmoke account and support account sync. We do not receive your Google password or access your Gmail messages, Drive files or contacts.

Google sign-in account details are stored with your account in our self-hosted Supabase authentication service on Oracle Cloud in Ashburn, United States, and are protected in transit with TLS. They are retained while your account exists and removed with account deletion as described below. Our hosting provider processes them to operate this service. We do not sell Google user data or use or share it for advertising. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

2. How We Use Your Information

3. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share your information only in the following circumstances:

3.1 Service Providers

• Supabase: Database and backend services for data storage and user authentication
• Apple: Payment processing for subscriptions and app analytics
• Mixpanel: Anonymous product-interaction analytics processed in Mixpanel's EU data region

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights or the safety of users.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business transaction.

4. Data Storage and Security

4.1 Data Storage

• Your account and sync data are stored in our self-hosted Supabase service on Oracle Cloud in Ashburn, United States
• Data is encrypted in transit and at rest
• We implement industry-standard security measures to protect your information

4.2 Data Retention

• Account data is retained while your account is active
• Usage data may be retained for up to 2 years for analytics purposes
• You can request data deletion by contacting us

5. Your Rights and Choices

5.1 Access and Control

• Access: Request a copy of your personal data
• Correction: Update or correct your information through the app settings
• Deletion: Request deletion of your account and associated data
• Portability: Request your data in a machine-readable format

5.2 Communication Preferences

• Manage notification preferences in app settings
• Opt out of promotional communications
• Critical service notifications cannot be disabled

5.3 Subscription Management

• Manage subscriptions through your Apple ID account settings
• Cancel subscriptions at least 24 hours before renewal
• Contact Apple for subscription-related issues

6. Children's Privacy

LessSmoke is intended for users 18 years and older. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

8. Third-Party Services

8.1 Apple Services

• App Store purchases and subscriptions
• Apple's privacy policy applies to payment processing
• We do not have access to your Apple ID or payment information

8.2 In-App Advertising

Lessmoke does not display in-app advertisements. Consented measurement of Lessmoke marketing campaigns is described in section 8.5.

8.3 RevenueCat

• RevenueCat manages subscription state and entitlements on our behalf.
• It receives an anonymous app user ID or your Lessmoke account ID after sign-in, purchase records and subscription state. Consented advertising attribution is described in section 8.5; no quit data or payment card details are sent.

8.4 Analytics Services

• We use Mixpanel's EU data region to understand anonymous app opens, screen usage, feature interactions, and subscription-flow outcomes.
• We do not send names, email addresses, free-form notes, smoking or craving values, or other health data to Mixpanel.
• Analytics are enabled by default, including in guest mode. Guest-mode quit and craving records remain on your device; product-interaction analytics are separate from these records.
• Analytics include general context such as app language, account mode and subscription product, price and currency when relevant. We disable IP-based geolocation in our Mixpanel configuration.
• You can stop future analytics collection at any time in Settings by turning off Share Anonymous Analytics.

8.5 Meta advertising measurement

With your iOS App Tracking Transparency (ATT) permission and Share Anonymous Analytics enabled, we use the Meta (Facebook) SDK to measure and improve Lessmoke advertising. Meta receives advertising/device identifiers (including IDFA and a Facebook anonymous ID), app/device and network information, and limited events such as app activation, onboarding completion, sign-in, paywall views, plan selection, checkout and restore outcomes. These may be matched with information Meta holds to attribute activity to ads. This can apply to guests and Premium subscribers.

RevenueCat manages subscriptions using an anonymous app user ID or, after sign-in, your Lessmoke account ID, and purchase records. With the same measurement consent, device identifiers (including IDFA and IDFV), Facebook anonymous ID and IP address are collected for attribution. RevenueCat sends trial starts, initial subscriptions, trial conversions, renewals and one-time purchases (including Lifetime), with product, event time, revenue and currency, to Meta through the Conversions API. Renewals can be sent while the app is closed, using the last consent status received by RevenueCat. Payment card details are handled by Apple.

We do not send smoking history, quit progress, craving logs, onboarding health answers, notes, names, email addresses or Google sign-in profile data to Meta. You can refuse tracking without losing app features, purchasing or restoring. Change ATT in iOS Settings → Privacy & Security → Tracking, or turn off Share Anonymous Analytics in Lessmoke Settings. The app updates RevenueCat when it next runs; consent changes do not recall events already sent. Meta and RevenueCat may process data outside your country, including the United States. Contact us for access or deletion requests.

9. California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to delete personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising privacy rights

10. European Privacy Rights

If you are in the European Union, you have rights under the General Data Protection Regulation (GDPR):

• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy in the app
• Updating the "Last Updated" date
• Sending a notification through the app or email for significant changes

12. Data Breach Notification

In the unlikely event of a data breach that affects your personal information, we will:

• Notify affected users within 72 hours of discovery
• Provide details about the breach and steps we're taking
• Offer guidance on protecting your information
• Report to relevant authorities as required by law

This Privacy Policy is designed to help you understand how we protect your privacy while providing you with the best possible experience in your journey to quit smoking.