Puff Counter
EN
Get the app

Privacy Policy

Last updated: 2026-10-15

This policy applies to the Puff Counter apps for iPhone and Apple Watch (App Store) and for Android (Google Play), and to puffcounterapp.com. Puff Counter is made by Rıdvan Uyan, an individual developer. Puff Counter has no ads, we do not sell your data, and the app does not use the advertising ID.

1. What stays on your device

Your puff history, daily limits, program plan, streaks, challenges, craving log, savings settings and preferences are stored on your device. Puff Counter copies the numbers it shows (for example today's puff count and your streak) to the home-screen and lock-screen widgets and, on iPhone, to the paired Apple Watch, so they can display them. Your full puff history is not uploaded to our servers. However, individual events from it (for example that you logged puffs, or resisted a craving) and a score calculated from it are sent as described in section 2.

2. What we collect, and why

Some information does leave your device, because the features below need it:

  • Account (Firebase Authentication) — an anonymous guest ID created on first launch. If you choose to sign in with Google or Apple we also receive the name, email address and profile photo your provider shares (Apple may give a private relay address). We use this to keep your account, link it across devices and restore your access.
  • Leaderboard profile (Cloud Firestore) — a record kept for your account (including guest accounts) once you log puffs or open the leaderboard: your display name, avatar or profile photo URL, a points score and streak statistics, and a two-letter country code taken from your device language settings (not your location). The points are calculated on your device from your logged puffs, smoke-free days and completed challenges, so they reflect your quitting progress; the puff history itself is not uploaded. Other users of the leaderboard can see your display name, avatar and points, and the record is readable by other signed-in users of the app.
  • Usage analytics (Firebase Analytics and Mixpanel) — events such as screens viewed, onboarding steps, paywall views, and feature actions. This includes health-related information about your quitting: each time you log puffs (number of puffs, your daily total and goal, and whether you are over your goal), your craving sessions (trigger, intensity and whether you resisted), mood check-ins, streak changes, changes to your reduction plan, and a savings goal amount you set. Events are linked to your account ID (the Firebase user ID) so that we can see which parts of the app help people, and come with device model, OS version, app language, days since install and whether you are subscribed. The events say that something happened, not your full history.
  • Diagnostics (Sentry) — crash reports and performance traces with device model, OS version, app version, the error that occurred and the screens you navigated through before it, linked to your account ID (not your name or email), so we can fix bugs. Sentry is used in its EU region.
  • Notifications (Firebase Cloud Messaging and local notifications) — a push token for your device if you allow notifications. Daily reminders are scheduled locally on your device.
  • Purchases (RevenueCat, App Store, Google Play) — your app user ID, which products you bought and whether your subscription or lifetime purchase is active. On iPhone, RevenueCat also receives Apple's Search Ads attribution token (not the advertising ID), which tells us whether an install came from an Apple Search Ads campaign. Payment details are handled only by Apple or Google. We never see your card number.
  • App configuration (Firebase Remote Config) — the app downloads settings that control features such as the paywall.
  • Technical data and approximate location — your IP address and device identifiers (such as the Firebase installation ID) are processed by the services above when the app connects to them. Mixpanel and Firebase Analytics may use your IP address to derive an approximate location (such as your country, region or city) for their reports. The app itself never requests or uses your device's location.
  • Public data requests — to show what your saved money could have become, the app requests public Bitcoin and NVIDIA share prices from CoinGecko and Yahoo Finance. Default avatars are loaded as images from DiceBear. These requests contain no account information, but those services see your IP address like any website you visit.

We do not collect your precise location, contacts, photos from your library, microphone or camera data. We do not use or collect the advertising ID, and we do not show ads. We do not sell your data and we do not share it for advertising.

3. Third parties that process data for us

These providers process data only to run the app on our behalf, under their own privacy terms:

Data may be processed in countries other than yours, including the United States, by these providers. We may also disclose information if the law requires it.

4. How long we keep it

  • Account and leaderboard data are kept until you delete your account (see section 5).
  • Analytics and diagnostics data is kept by Firebase Analytics for at most 14 months and by Mixpanel and Sentry according to the retention settings of our projects with them. Deleting your account in the app does not by itself remove it from these providers: email us and we will ask them to delete or detach the records linked to your account ID, where the provider supports it.
  • Purchase records are kept by Apple, Google and RevenueCat for as long as tax and accounting law requires.
  • Data stored only on your device stays there until you delete it or uninstall the app.

5. Deleting your data and account

In the app, open the Profile tab and choose Delete My Data. This deletes your leaderboard profile, your authentication account and everything stored on the device. It does not remove analytics, diagnostics and purchase records that Mixpanel, Firebase Analytics, Sentry and RevenueCat already hold; to have those deleted, email us as described below. Step by step instructions, and what we keep, are on the Delete your account page.

You can also email [email protected] to ask us to delete your data, and we will do so within 30 days. Uninstalling the app removes the data on your device only. It does not cancel a subscription, so cancel that in the App Store or Google Play first.

6. Your rights

Depending on where you live (for example under the GDPR, UK GDPR, KVKK or CCPA) you may have the right to access, correct, delete or export the data we hold about you, to object to or restrict processing, and to complain to your data protection authority. Email us to use any of these rights.

7. Security

Data sent between the app and our providers is encrypted in transit (HTTPS). No system is perfectly secure, so we cannot guarantee absolute security.

8. Children

Puff Counter is for adults aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has used the app, email us and we will delete the data.

9. Not medical advice

Puff Counter is a habit tracker and not a medical device or treatment. Information in the app is general and does not replace advice from a healthcare professional.

10. Changes to this policy

If we change this policy we will update the date at the top of this page, and if the change is material we will say so in the app.

11. Contact

Rıdvan Uyan, developer of Puff Counter. Email: [email protected]