Privacy Policy

Effective Date: October 18, 2026
Last Updated: October 18, 2026

This Privacy Policy explains how SmokeCounter for iOS ("the App"), including its widget and companion Apple Watch app, handles information. It applies to SmokeCounter version 3.2.0 and later versions until this policy is updated. The App is a self-tracking tool. It does not provide medical treatment, diagnosis or advice, and it does not guarantee that you will stop smoking.

1. Data Stored on Your Device

The App saves your smoking entries, preferences, Quit Plan schedules and saved program records on your device.

• The iPhone app and its widget share this local app data.
• The companion Apple Watch app exchanges app state with your paired iPhone.
• There is no app account, and there is no developer-operated cloud service that synchronizes your smoking history.
• Device backups (for example, iCloud or computer backups you have enabled) may contain the App's local data.
• If you choose to export or share data, the destination you choose (for example, a file location, app or recipient) receives the exported data and handles it under its own privacy practices.

2. Product Usage Analytics

The App uses Google Analytics for Firebase and a developer-operated analytics backend to understand how the App is used and improve it. Product analytics is enabled automatically. The App does not provide a product-analytics opt-out.

Analytics events may include:

• smoking interactions, including bounded count changes, post-write daily totals, affected local days and time zones, and coarse source or quality categories;
• screen views and interactions with controls;
• purchase and restore outcomes;
• the App's language;
• Quit Plan interactions, including opening setup, preview, subscription, editing, Progress and Today screens; changing configuration controls without their free-text values; saving previews and revisions; checkout, restore and activation outcomes; selecting a Progress time range; the current program phase; and selecting a return route.

Because these events describe how you use the App, they can reveal that you use smoking-related features. Quit Plan analytics can include bounded confirmed-day counts and coarse plan state. Event payloads exclude free-text reasons, triggers, craving details and personal notes.

Analytics data is not anonymous. The developer-operated backend receives a pseudonymous, app-scoped analytics identity that expires and is replaced after no more than 90 days, plus a local ledger-generation identifier that changes when the App detects that the entire smoking ledger has been cleared. It does not receive account identifiers, advertising identifiers or Apple transaction identifiers. Events awaiting delivery are held in an app-private queue for no more than seven days and are also limited to 10 MB or 10,000 records; some events can be discarded when these limits are reached or delivery remains unavailable. The queue and local analytics identity are excluded from device backup.

Firebase separately receives the App's approved event names and parameters, Firebase app-instance and technical device information, and verified StoreKit transaction data for purchase analytics. Firebase may also process general location inferred from your connection. This Firebase transaction route is separate from the developer-operated event backend and from the server-side purchase-reporting service described below.

3. Advertising

The free version of the App shows ads using Google AdMob and uses Google's User Messaging Platform (UMP) to manage advertising consent. These services may process your IP address, device identifiers, advertising interactions, coarse location inferred from your IP address, and diagnostic and performance data.

• The App does not pass your saved smoking counts or Quit Plan records as ad request parameters.
• Advertising choices are separate from product usage analytics described above.
• Where required, UMP asks for your advertising choices. When required, a Privacy options entry appears in Settings so you can revisit those choices.
• The iOS tracking permission (App Tracking Transparency) is a separate control. When tracking is not authorized, the App requests non-personalized ads. Non-personalized ads may still involve technical processing, such as the data listed above.
• Active Pro benefits remove in-app ads.

To learn more, see Google's Privacy Policy and How Google uses information from sites or apps that use its services.

4. Purchases and Subscriptions

Purchases and subscriptions are processed by Apple. To unlock and restore features, the App receives StoreKit product information and verified transaction details, such as product and transaction identifiers, whether access is valid, and whether a purchase has been revoked. The App does not receive your full payment card details. Apple handles payment information under the Apple Privacy Policy.

Our server receives purchase notifications and verified purchase records from Apple to reconcile purchases, renewals, expirations and refunds and to produce private commercial reports. These records include Apple transaction identifiers, product identifiers, purchase and subscription dates, purchase status, and reported amounts and currencies. Restricted copies of Apple's signed records are encrypted. Purchase identifiers are pseudonymous, not anonymous.

This server processing is separate from Firebase usage and purchase analytics and from the developer-operated product-event backend. We do not join these purchase records with Firebase identifiers, advertising identifiers, app installations or your smoking history and Quit Plan records. Reports contain aggregate purchase information. The server does not control access to the App's local features: purchase verification and restoration in the App use Apple's StoreKit.

Uninstalling the App or deleting records in the App does not cancel a subscription. You can manage or cancel subscriptions in your Apple account settings.

5. Reminders

The App can send optional reminders as local notifications. They are scheduled on your device only after you choose to enable them and grant notification permission. You can change the App's reminder settings and your iOS notification permissions at any time. Depending on your system settings, reminder text may appear on your lock screen.

6. Retention and Deletion

• Local records remain on your device until you delete them using the controls available in the App, remove the App, or erase or manage your device.
• Copies in device backups, on paired devices, and in data you have exported must be managed separately.
• Saved Quit Plan history remains readable after your access to Quit Plan features expires.
• Delete saved Quit Plan records removes the records described in its confirmation message. It keeps your general cigarette history and does not cancel any subscription.

In the developer-operated analytics system, raw pseudonymous events become unavailable to analytics queries after 90 days, and short-lived aggregate contributions become unavailable after eight days. Identifier-free aggregate snapshots, when produced, are configured to expire after 13 calendar months. Underlying storage cleanup is asynchronous and can complete later than those query-retention periods. No analytics backup copies are currently configured.

For our purchase-reporting service, raw signed Apple records are available for processing for 30 days after their original receipt and are deleted from the live server within 31 days. Categorical operational records are kept for 14 days, and completed processing records for 90 days, with server cleanup within the following day. Normalized purchase and correction records are retained for seven calendar years after the relevant verified purchase, subscription period end or correction date; necessary current subscription state is kept while it remains applicable. Receiving a duplicate, restoring a purchase or restoring a database does not restart these periods.

Encrypted database backups are eligible for restoration for 35 days from their original creation. Server backups are deleted within 36 days. We also keep an encrypted copy on a separate Mac, outside cloud synchronization and automatic backup history. That copy is updated and cleaned when the Mac is running; physical deletion can be delayed while it is switched off or asleep. Expired copies are excluded from restoration and removed when cleanup resumes. Restored databases are cleaned of expired records before the reporting service starts.

Data processed by third-party services (Google and Apple) is retained according to those providers' policies and the settings configured for those services.

Third-party providers may process data in countries other than your own, in accordance with their privacy policies.

7. Your Rights and Requests

Depending on where you live, applicable law may give you rights regarding your personal data, such as the right to request access, correction or deletion, or to object to or restrict certain processing. You can revisit advertising choices as described above. For privacy questions, data-access or deletion requests, or to exercise rights available to you under applicable law, contact us using the details below.

8. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in the App or legal requirements. Any changes will be posted on this page, and the effective date at the top will be updated accordingly.

9. Contact Us

If you have questions or concerns about this Privacy Policy, you can contact us at:
zjunk58@gmail.com