Privacy Policy

This Privacy Policy explains how Unpuff (“we”, “us”, “our”) collects, uses, stores and protects your personal information when you use our mobile application and related services (the “App”).
‍

We are committed to protecting your privacy and handling your data in a transparent, lawful and secure way.
‍

1. Who We Are

Data Controller: Unpuff LTD
Email: support@unpuff.app

We operate in the United Kingdom and process personal data in accordance with the UK GDPR, Data Protection Act 2018, and, where applicable, the EU GDPR.

If you have questions about this Privacy Policy, contact us anytime at support@unpuff.app.
‍

2. Information We Collect

We collect the following categories of data to provide and improve the Unpuff experience.

‍

2.1 Personal Data You Provide

Account Information

• Email address
  
  
• Password (encrypted)
  
  
• Display name
  
  
• Profile picture (optional)
  
  
  

Quit-Smoking / Health-Related Data (special category data)

• Smoking habits (cigarettes per day/week)
  
  
• Time smoked (years/months)
  
  
• Quit date
  
  
• Cravings and journal entries (mood, trigger, location, notes)
  
  
• Time of first & last cigarette
  
  
• Money spent per pack / roll-up / liquids
  
  
• Smoke-free days, money saved, health improvements
  
  
• Motivations, challenges, and personal notes you record
  
  
• Progress and milestone completions
  
  
  

Demographic Information (optional)

• Date of birth / age
  
  
• Gender
  
  
• Country or region
  
  
  

Support & Communication

• Messages you send to us
  
  
• Feedback or feature suggestions
  
  
• Responses to surveys or research prompts (optional)
  
  
  

2.2 Buddies / Social Features (Optional)
‍

If Unpuff includes “buddy” or support-circle features, you may choose to share:

• Username
  
  
• Profile picture
  
  
• Smoke-free days
  
  
• Money saved
  
  
• Cravings defeated
  
  
• Milestones achieved
  
  
  

You control what is shared and can disable this at any time.

‍
‍

2.3 Automatically Collected Data
‍

Device & Technical Information

• Device model
  
  
• Operating system version
  
  
• App version
  
  
• Language & region
  
  
• IP address
  
  
• Crash logs and error reports
  
  
• Performance / analytic data
  
  
• Mobile network information (if applicable)
  
  
  

Usage Information

• Features used (e.g. cravings logs, health tracking)
  
  
• Time spent in sections of the App
  
  
• Interactions with push notifications
  
  
• Dates/times you open the App
  
  ‍
  

We do not build hidden profiles or sell this data.

‍
‍

2.4 Payment Data (Stripe)

If you make a purchase in Unpuff, payments are handled by Stripe.
‍

Stripe processes:
‍

• Card details
  
  
• Billing information
  
  
• Transaction amounts and currency
  
  
• Fraud-prevention data
  
  
  

Unpuff receives only:
‍

• Subscription status
  
  
• Payment success/failure indicators
  
  
• Last four digits of your card
  
  
• Expiry month/year
  
  
• Billing country
  
  
  

We do not store full payment card details.
‍

‍

3. Special Category (Health) Data
‍

Your smoking behaviour and cravings logs relate to your health, which is considered special category data under UK/EU law.
‍

We only process this data where:
‍

• You actively provide it within the App
  
  
• It is necessary to deliver Unpuff’s features
  
  
• You give us explicit consent to process it
  (this occurs when you create an account and use these features)
  
  
  

You may withdraw consent at any time (see Section 11).
‍

Withdrawing consent may disable certain features of Unpuff.
‍

‍

4. Why We Use Your Data (Purposes & Legal Bases)

Below is a clear breakdown of what we do with your data.

‍
‍

4.1 To create and maintain your account

Legal basis: Performance of a contract; Legitimate interest (app security)

‍
‍

4.2 To provide quit-smoking / cravings tracking features

Legal basis: Performance of a contract; Explicit consent (health data)

This includes logging cigarettes avoided, cravings, moods, triggers, health progress, and money saved.

‍
‍

4.3 To personalise your experience

Legal basis: Legitimate interests

This may include tailored suggestions, insights, or cravings-support messages.

‍
‍

4.4 To send reminders, notifications, and progress alerts

Legal basis: Legitimate interests; Performance of a contract

You can disable notifications at any time.

‍
‍

4.5 To process payments and manage subscriptions

Legal basis: Performance of a contract; Legal obligations

Handled by Stripe.

‍
‍

4.6 To improve, secure and monitor the App (analytics and diagnostics)

Legal basis: Legitimate interests

We analyse app performance, detect issues, and monitor usage trends.

‍
‍

4.7 To send marketing emails or promotions (optional)

Legal basis: Consent

You can opt out anytime via the unsubscribe link.

‍
‍

4.8 To comply with legal obligations

Legal basis: Legal obligation

Including tax, accounting and compliance requirements.

‍
‍

4.9 To produce aggregated, anonymised statistics or research

Legal basis: Legitimate interests

This data contains no information that identifies you.

‍
‍

5. Who We Share Your Data With

We do not sell your data.

We only share information with:

‍
‍

5.1 Service Providers (Processors)
‍

These help us operate Unpuff, including:
‍

• Cloud hosting providers
  
  
• Database and storage providers
  
  
• Analytics & crash reporting
  
  
• Email and push notification platforms
  
  
• Authentication services
  
  
• Customer support tools
  
  
  

All processors are bound by strict data processing agreements and only act on our instructions.

‍
‍

5.2 Stripe (Payments)

For processing subscriptions and in-app purchases.

Stripe may process data as an independent controller for fraud prevention and regulatory compliance purposes.

‍
‍

5.3 Buddies / social features (optional)

Only the data you choose to share becomes visible to other users.

‍
‍

5.4 Legal authorities (only when required)

We may disclose data if required to comply with applicable law or to protect the rights, safety or property of Unpuff or others.

‍
‍

5.5 Business transfers

If Unpuff is involved in a merger or acquisition, your data may be transferred under the same or stronger protections.

‍
‍

6. International Transfers

We are based in the UK. Some of our service providers (e.g., hosting or payment services) may operate outside the UK/EEA.

When this occurs, we ensure one of the following applies:
‍

• An adequacy decision exists, or
  
  
• We use Standard Contractual Clauses (SCCs), or
  
  
• Another lawful safeguard is in place
  
  
  

You may request details of these safeguards at support@unpuff.app.

‍
‍

7. How Long We Keep Your Data

We retain data only as long as needed:
‍

Account data

Kept while your account is active. Deleted when you delete your account.
‍

Quit-smoking / health data

Deleted or anonymised after account deletion.
‍

Payment / billing information

Kept for up to 6 years (UK tax law).
‍

Support messages

Kept up to 3 years after your last contact.
‍

Analytics logs

Anonymised and may be kept indefinitely for statistical purposes.

‍
‍

8. Children

Unpuff is intended for users 18 or older.
‍

We do not knowingly collect data from anyone under 18.
‍
If this has happened, contact us immediately at support@unpuff.app and we will delete it.

‍
‍

9. Your Data Rights

Under the UK GDPR and (where applicable) EU GDPR, you have the right to:
‍

• Access your data
  
  
• Correct inaccurate data
  
  
• Delete your data (“right to be forgotten”)
  
  
• Restrict how your data is used
  
  
• Object to certain processing
  
  
• Data portability
  
  
• Withdraw consent at any time
  
  
• Complain to a supervisory authority (e.g., the UK ICO)
  
  
  

You can exercise these by emailing us at support@unpuff.app.

‍
‍

10. Security

We use appropriate technical and organisational measures to protect your data, including:
‍

• Encrypted data transmission (HTTPS)
  
  
• Secure password hashing
  
  
• Access controls and authentication
  
  
• Limited staff access
  
  
• Regular security updates and monitoring
  
  
  

No system is 100% secure, but we take every reasonable step to protect your information.

‍
‍

11. Deleting Your Account and Data

You can delete your account at any time via the App settings.

When deleted:
‍

• Your personal data will be permanently deleted or anonymised
  
  
• Backup copies may persist briefly for security and disaster recovery
  
  
• Billing and legal-obligation data may be retained as required by law
  
  
• Anonymised analytics data may be kept indefinitely
  
  
  

If deletion fails or you need help, contact support@unpuff.app.

‍
‍

12. Changes to This Privacy Policy

We may update this policy from time to time.

We will always:
‍

• Update the “Last updated” date, and
  
  
• Notify you in-app or by email if changes are material
  
  
  

continued use of Unpuff after updates means you accept the updated policy.