Privacy policy

Last updated: November 9, 2026

What we store

Your usage, your plan, your cravings, slips, check-ins and journal. All on your phone.

What we don't do

We don't use GPS. There are no ads or advertising SDKs. Usage statistics are anonymous, are only sent if you agree, and never carry what you write, what you answer, amounts or dates.

Who is responsible

Puff it Off is developed and published by Nico Borrazas, who is the data controller for the information described here. For any question or request about your privacy, write to hello@puffitoff.com.

Your data stays on your phone

Everything you enter (your consumption and prices, your quit plan, cravings, slips, check-ins, symptoms, journal, reasons and savings goals) is stored only in a database on your device. There is no account and no sign-up, and we have no server that keeps this information, so we cannot see it, read it or give it to anyone.

If you use your phone's backup (iCloud or Google), the app's data may be included in that backup under Apple's or Google's terms.

Purchases

Premium is sold through the App Store or Google Play. Apple or Google process the payment and keep your payment details; we never see them. The app only receives whether you have an active subscription or a lifetime purchase, which plan it is and when it renews or expires, and keeps that on the device to unlock Premium.

Anonymous usage statistics, only if you agree

They are off by default. When you set up the app, we ask you once whether you want to share anonymous usage data, with two choices: share it, or "No thanks". Nothing is sent before you answer, and if you say no, nothing is ever sent. You can change your answer at any time in Settings → Share anonymous usage data; if you turn it off, nothing more is sent from then on.

If you agree, the app sends anonymous feature-usage events so we can learn which parts help and which ones fail:

that you opened the app, saw a setup step or finished setup (with the product you are quitting and the method you chose, such as "cold turkey" or "gradual");
that you started a craving session and how it ended (resisted or smoked), completed a check-in, or logged a slip or relapse and what you decided next;
that you unlocked an achievement, completed a program day, opened a module or a notification;
that you saw the Premium screen, started, completed or could not complete a purchase (with the plan or the store's error code), or restored purchases;
whether you accepted notifications and whether an app update was applied.

Each event carries only its name, sometimes a fixed category from our own list (such as "slip" or "relapse", or the "monthly" plan), and technical details such as app version, operating system and language. The same connection is used to receive remote settings that turn app features on or off.

Events go to PostHog, on servers in the European Union. They have no identity attached: no name, email, account or advertising ID. We create no person profiles, we identify no one, and IP-based location (GeoIP) is turned off. There is no automatic tap capture, no screen tracking and no session recording. Events never include free text, the content of your answers, quantities such as cigarettes, money or days, or dates.

With the same consent, if the app crashes it sends an anonymous error report (what failed and on which screen, the app version and the type of phone) so we can fix it.

The legal basis is your consent, which you can withdraw at any time with the same switch.

Notifications

Reminders and milestone notifications are scheduled by the app on your phone itself. No notification server is involved and nothing about them leaves the device. You can turn them off in Settings or in your phone's settings.

No ads, no tracking

There are no ads and no advertising SDKs. We do not track you across other companies' apps or websites, we do not use your location, and we never sell or share your data. That is why the app never asks for permission to track you.

Keeping, exporting and deleting

Your data stays on the phone for as long as you keep the app. In Settings → Export data you can export all of it to a file (JSON or CSV), and in Settings → Delete all data delete all of it in one step; uninstalling the app deletes it too. Anonymous usage events are kept only as long as they are useful for understanding how the app is used, and are then deleted.

Your rights

Under the GDPR (European Union), the LGPD (Brazil), Argentina's Personal Data Protection Law 25.326 and similar laws, you have the right to access, correct, delete and take away your data, to object to or restrict its use, and to withdraw consent. Because your data lives on your phone, you can exercise most of these rights directly in the app.

Usage statistics are anonymous, so we usually cannot link them to you; if you want us to try, write to hello@puffitoff.com. You can also complain to your data protection authority: in Spain, the AEPD; in Argentina, the Agencia de Acceso a la Información Pública; in Brazil, the ANPD.

Age

Puff it Off is meant for adults and is not directed at anyone under 18.

This website

This website uses no cookies and no analytics. The typeface is loaded from Google Fonts, so Google receives your browser's IP address when you open it.

Changes to this policy

If this policy changes, the new version will be in the app and on this page with a new date at the top. If a change affects what leaves your phone, the app will tell you before it applies.