Privacy Policy

Last Updated: February 10, 2026

Introduction

PuffApp (“we,” “us,” “our,” or “Company”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the “Application”) and related services (collectively, the “Services”).

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our Services.

Privacy-First Architecture: PuffApp is designed with your privacy as a core principle. Your health behavior data — including puff logs, craving records, and quit journey information — is stored exclusively on your device and is never transmitted to our servers or any third party.

1. Information We Collect

1.1 Information You Provide Directly

Baseline and Setup Data: When you set up the Application, we collect information you enter locally on your device, including your device’s baseline puff count per day, nicotine strength, estimated cost per pod or cartridge, chosen quit method (gradual reduction or cold turkey), and target quit date. This information is stored only on your device.

Daily Puff Logs: The Application allows you to record your daily puff counts and optional context notes. This information is stored exclusively on your device using Apple’s SwiftData framework and is never transmitted externally.

Craving Logs: When you log a craving, we store on your device the craving intensity, identified trigger (e.g., stress, social situation, habit), outcome (resisted or gave in), duration, and any notes you add. This data never leaves your device.

Notification Preferences: Your preferences for reminders and motivational notifications are stored locally on your device.

Communication Information: When you contact us for support or feedback, we collect the content of your communications, your email address, and any additional information you choose to provide.

1.2 Automatically Collected Information

Device Information: We collect technical information about your device, including device model, operating system version, and mobile network information. This information is used only for analytics purposes.

Usage Data: We do not currently collect usage or analytics data through any third-party analytics provider.

2. How We Use Your Information

We use the information we collect for the following purposes:

Providing Services: To deliver, maintain, and improve the PuffApp Application and its features
On-Device Processing Only: All health behavior data (puff logs, craving records, reduction plans) is processed exclusively on your device; it is never transmitted to our servers
Subscription Management: To manage your subscription status through RevenueCat, our billing provider
Improvement: To troubleshoot issues and develop new features based on support communications
Notifications: To send you locally scheduled reminders, check-ins, and motivational messages based on your preferences
Security: To detect, prevent, and address technical issues and security incidents
Communication: To respond to your inquiries and provide customer support

3.1 Third-Party Service Providers

RevenueCat: We use RevenueCat (https://www.revenuecat.com/) to manage in-app subscriptions and billing. RevenueCat receives your purchase transaction information, subscription status, and a pseudonymous device identifier to verify and manage your subscription. RevenueCat does not receive your health behavior data. This is governed by RevenueCat’s Privacy Policy.

3.2 Legal Requirements

We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., court orders, law enforcement requests). Note that your health behavior data exists only on your device, so we have no access to it and cannot be compelled to produce it.

3.3 Business Transfers

If PuffApp is involved in a merger, acquisition, bankruptcy, or other business transaction, any information we hold (limited to analytics and contact data) may be transferred as part of that transaction. We will notify you of any change in ownership or control of your personal information.

4. Data Security

Your privacy is protected by design:

On-Device Storage: All health behavior data — puff logs, craving records, reduction plans — is stored exclusively on your device using Apple’s SwiftData framework. This data is protected by iOS’s built-in encryption and data protection.
No Transmission of Health Data: Your personal health behavior data is never transmitted to our servers, our analytics providers, or any third party.
Device Encryption: Data stored on your device benefits from iOS hardware-level encryption when your device is locked.
No Third-Party Analytics: We do not send usage data to any third-party analytics provider.

However, no security system is impenetrable. We recommend protecting your device with a strong passcode or biometric authentication to safeguard the data stored locally.

5. Data Retention

Health Behavior Data (Puff Logs, Craving Records, Quit Progress): This data is stored entirely on your device under your complete control. It is retained until you delete it within the Application or uninstall the Application.
Analytics Data: We do not currently collect analytics data through third-party providers.
Communication Data: If you contact us for support, we retain your communication for as long as necessary to resolve your inquiry and for a reasonable period thereafter.

To delete all health behavior data, you may use the data deletion option within Application settings or uninstall the Application from your device.

6. Your Privacy Rights

6.1 Access and Portability

Your health behavior data is stored directly on your device, giving you direct access at all times. For any other information we hold (such as support communications), you have the right to request access in a structured, commonly used format.

6.2 Correction and Deletion

You may correct or delete your health behavior data directly within the Application at any time. For other information we hold, you may contact us to request correction or deletion.

6.3 Opt-Out of Analytics

We do not currently collect analytics data through third-party providers, so no opt-out is required.

If you are a resident of the European Union, you have additional rights including the right to restrict processing, object to processing, data portability, and to lodge complaints with your local data protection authority.

6.5 CCPA Rights (California Residents)

If you are a California resident, you have rights to know what personal information is collected, to delete personal information, and to opt out of the sale or sharing of personal information. We do not sell your personal information.

7. Children’s Privacy

PuffApp is intended for users aged 17 and older due to its subject matter (nicotine and vaping cessation). The Application is rated 17+ on the App Store. We do not knowingly collect personal information from individuals under the age of 17. If you believe a minor has used the Application, please contact us and we will take appropriate steps.

8. International Data Transfers

Your health behavior data never leaves your device and is therefore not subject to international data transfer. Subscription data (via RevenueCat) may be processed in countries other than your country of residence. By using PuffApp, you consent to such transfers for these limited purposes.

9. Not a Medical Device

Important: PuffApp is a wellness and behavior-tracking application, not a medical device, and it does not provide medical advice. The Application is not intended to diagnose, treat, cure, or prevent any disease or medical condition, including nicotine addiction.

If you are concerned about nicotine dependency or need help quitting vaping, please consult a qualified healthcare professional. Resources such as your doctor, a nicotine replacement therapy specialist, or a certified addiction counselor can provide personalized medical guidance that PuffApp cannot.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available at https://nightcodeapps.com/apps/puff-app/privacy. We will notify you of material changes by posting the updated policy in the Application and updating the “Last Updated” date. Your continued use of PuffApp after changes become effective constitutes your acceptance of the updated Privacy Policy.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our privacy practices, please contact us at:

Artur Gorbaczewski NightCode Apps Email: contact@nightcodeapps.com

Your health data belongs to you — and only to you. Thank you for trusting PuffApp with your quit journey.