Privacy Policy

This Privacy Policy explains how Puffless ("we", "us") handles information across the Puffless website (https://puffless.app) and the Puffless mobile app. We built Puffless to be private by default.

The short version

• The mobile app needs no account — no sign-up, email, or password.
• Your quit data (habit details, streak, craving log, settings) is stored only on your device and is never sent to our servers.
• We don't sell your data, we don't run ad networks, and we don't embed third‑party advertising trackers.

The mobile app

The app stores the information you enter — what you're quitting, how much you used, its cost, your quit date, cravings you log, and app settings — locally on your device using encrypted on‑device storage. This information is not transmitted to us and we cannot see it. You can erase it at any time from Settings → Reset all data, or by deleting the app.

Purchases. If you buy a Puffless Premium subscription or lifetime unlock, the transaction is processed by Apple or Google. To validate purchases and manage subscription status without operating our own server, we use RevenueCat, Inc. as our payments processor. RevenueCat receives purchase/transaction history, an anonymous app‑user identifier, and a device identifier. We do not link this to your name or contact details because we don't collect those. See RevenueCat's privacy policy at https://www.revenuecat.com/privacy/.

Notifications. If you enable reminders, they are scheduled locally on your device. No push tokens are created and nothing is sent to a server.

The website

The website is informational. We do not require an account to read it.

• Analytics. We use Vercel Analytics (privacy‑friendly and cookieless) for aggregate traffic. We also use Google Analytics, which sets cookies — but only after you opt in via the cookie banner. If you decline (or ignore the banner), Google Analytics is never loaded. You can change or withdraw your choice anytime via "Cookie settings" in the footer. We do not use advertising cookies or build advertising profiles of you.
• Hosting & logs. Our host (Vercel) processes standard technical request data (such as IP address and user agent) to serve the site securely. Article content is served from a Supabase database that contains no personal data about visitors.
• Email. If you email support@puffless.app, we receive the contents of your message and your email address so we can reply.

Cookies

We don't use advertising or cross‑site tracking cookies. The only non‑essential cookies are Google Analytics cookies, and they are set only if you accept them in the cookie banner. Decline and none are set. You can revisit the choice anytime via "Cookie settings" in the footer.

Third parties we rely on

• Apple / Google — app distribution and payment processing.
• RevenueCat — subscription validation for the app.
• Vercel — website hosting and cookieless analytics.
• Google Analytics — website usage analytics (loaded only with your consent).
• Supabase — stores and serves our published articles.

Children

Puffless is intended for adults who want to reduce or stop nicotine use. It is not directed to children.

Your choices and rights

Because your in‑app quit data never leaves your device, you control it directly — view, change, or permanently delete it in the app at any time. For purchase data held by RevenueCat, Apple, or Google, you may exercise rights through those providers, or contact us and we will help.

Changes

We may update this policy. Material changes will be reflected by the "Last updated" date above.

Contact

Questions? Email support@puffless.app.