Privacy Policy

Last Updated: February 12, 2025

UnVaped ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application (the "App").

1. Information We Collect

1.1 Information You Provide

When you use UnVaped, we collect information that you voluntarily provide:

• Quit Date: The date you stopped vaping
• Daily Vaping Costs: Your estimated daily spending on vaping products
• Craving Logs: Records of cravings including timestamps and intensity levels
• Daily Check-ins: Mood and motivation tracking data
• Notification Preferences: Your choices for reminder and milestone notifications

1.2 Automatically Collected Information

We automatically collect certain information when you use the App:

• Device Information: Device type, operating system version, unique device identifiers
• Usage Data: App launch times, feature usage, and navigation patterns
• Performance Data: Crash reports, diagnostic information for app stability

1.3 Subscription and Payment Information

We use RevenueCat for subscription management. RevenueCat processes your purchase information through Apple's App Store or Google Play Store. We collect:

• Purchase History: Subscription status, purchase dates, and transaction IDs
• Anonymous User ID: A unique identifier for managing your subscription

We do not directly collect or store your payment card information. All payment processing is handled securely by Apple or Google. RevenueCat acts as a data processor on our behalf.

2. How We Use Your Information

We use the information we collect to:

• Provide Core Features: Track your quit journey, calculate statistics, and display milestones
• Send Notifications: Deliver milestone alerts and daily reminders (if enabled)
• Manage Subscriptions: Verify premium access and manage billing through RevenueCat
• Improve the App: Analyze usage patterns to enhance features and user experience
• Customer Support: Respond to your inquiries and troubleshoot issues
• Legal Compliance: Comply with applicable laws and regulations

3. Data Storage and Security

3.1 Local Storage

Most of your data is stored locally on your device using secure AsyncStorage:

• Quit date and daily spending
• Craving logs and check-in history
• App settings and preferences
• Notification permissions

This data never leaves your device unless you choose to share milestone achievements via the built-in sharing feature.

3.2 Cloud Storage

Subscription status is managed by RevenueCat and synced across your devices. This includes:

• Anonymous user identifier
• Subscription status and purchase history
• Device associations for subscription access

3.3 Security Measures

We implement industry-standard security measures:

• Encrypted data transmission (HTTPS/TLS)
• Secure device storage with iOS Keychain and Android Keystore where applicable
• Regular security audits of third-party services
• Limited data retention policies

4. Third-Party Services

UnVaped uses the following third-party services that may collect information:

4.1 RevenueCat (Subscription Management)

• Purpose: Manage in-app subscriptions and validate purchases
• Data Collected: Anonymous user ID, purchase history, subscription status
• Data Processing: RevenueCat is GDPR and CCPA compliant
• Privacy Policy: https://www.revenuecat.com/privacy/

4.2 Apple App Store / Google Play Store

• Purpose: Process payments and manage subscriptions
• Data Collected: Payment information, Apple ID / Google Account
• Privacy Policies:
  • Apple: https://www.apple.com/legal/privacy/
  • Google: https://policies.google.com/privacy

4.3 Expo Push Notifications

• Purpose: Deliver local and push notifications for milestones and reminders
• Data Collected: Device push token (if notifications are enabled)
• Privacy Policy: https://expo.dev/privacy

5. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We only share data in the following limited circumstances:

• Service Providers: With RevenueCat and Expo for essential app functionality
• Legal Requirements: When required by law, court order, or government regulation
• Business Transfers: In the event of a merger, acquisition, or asset sale
• Your Consent: When you explicitly choose to share milestone achievements via social media or messaging

6. Your Rights and Choices

6.1 Access and Control

• View Your Data: All locally stored data is viewable within the App settings
• Delete Your Data: You can delete your account and all associated data from within the App
• Export Data: Contact us to request a copy of your data

6.2 Notification Preferences

You can enable or disable notifications at any time through the App settings or your device system settings.

6.3 Subscription Management

Manage your subscription through:

• iOS: Settings → [Your Name] → Subscriptions
• Android: Google Play Store → Menu → Subscriptions

7. Data Retention

• Local Data: Stored on your device until you delete the app or clear data
• Subscription Data: Retained by RevenueCat while your subscription is active and for 60 days after cancellation
• Support Data: Support inquiries are retained for 2 years

8. Children's Privacy

UnVaped is not intended for children under 13 years of age (or 16 in the EU). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses with service providers
• GDPR and CCPA compliance frameworks
• Privacy Shield certification where applicable

10. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Know what personal information is collected
• Know whether your personal information is sold or disclosed
• Opt-out of the sale of personal information (we do not sell personal information)
• Request deletion of personal information
• Non-discrimination for exercising your privacy rights

11. European Privacy Rights (GDPR)

If you are in the European Economic Area (EEA), you have the right to:

• Access your personal data
• Rectify inaccurate personal data
• Request erasure of your personal data
• Restrict processing of your personal data
• Data portability
• Object to processing
• Lodge a complaint with a supervisory authority

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of material changes by:

• Posting the updated policy in the App
• Updating the "Last Updated" date
• Sending an in-app notification for significant changes

Your continued use of the App after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your data:

• Email: privacy@unvaped.xyz
• Support: support@unvaped.xyz
• Website: https://unvaped.xyz

14. Apple App Store Privacy Details

As required by Apple, we disclose the following data collection practices in App Store Connect:

Data Used to Track You

We do not track you across apps or websites owned by other companies.

Data Linked to You

• Purchases: Subscription status and purchase history (via RevenueCat)
• User Content: Quit date, spending data, craving logs, check-in history
• Identifiers: Anonymous user ID for subscription management

Data Not Linked to You

• Diagnostics: Crash data and performance metrics
• Usage Data: Aggregated app usage statistics

By using UnVaped, you acknowledge that you have read and understood this Privacy Policy.