Privacy Policy

Last updated: [DATE OF PUBLICATION]

Deep Breez is an iPhone app for adults who are stopping cigarettes, vapes or heated tobacco. When a craving comes, it gives you something short to do while it passes, and it keeps count of your days and the money you have kept.

What you tell the app is personal, and some of it is about your health. So the app is built to keep almost everything on your phone. This policy says exactly what stays there, what can leave, who receives it, and what you can do about it.

1. Who is responsible

Deep Breez is made and run by [DEVELOPER LEGAL NAME], an individual developer based in Georgia (the country). In this policy, "we" and "us" mean that person. In legal terms, we are the "controller" of the personal data described here.

• Email: [CONTACT EMAIL]
• Post: [POSTAL ADDRESS IF REQUIRED]

2. The short version

• Your plan, progress, journal and cravings are stored on your iPhone. You can use the whole app without an account, and then none of it is sent to us.
• Sign in with Apple puts a backup in your own iCloud. We cannot see it.
• Sign in with Google or email creates an account on our server. A backup is saved there only if you say yes when the app asks.
• Talk to your buddy with AI replies sends your messages and a short summary of your plan to an AI provider (Anthropic). This happens only if you allow it, and you can turn it off at any time.
• No ads. No tracking across other apps or websites. No analytics service. No sale of your data.
• Deep Breez is for people 18 and over.

3. What stays on your iPhone

Everything below is saved in the app's own storage on your phone. We do not receive it unless one of the choices in sections 4 to 6 applies.

A small part of this (your day count, money kept and today's session) is shared with the Deep Breez widgets, Live Activities and Siri shortcuts on the same phone, through Apple's App Group storage. It does not leave your phone that way.

How long: until you erase it with Profile › Start over, or delete the app. The random install ID stays in the Keychain and may remain after the app is deleted, until the phone is erased.

4. Your own iCloud (Sign in with Apple)

If you sign in with Apple, the app saves a backup in iCloud key-value storage, inside your own Apple Account. It is there so that your progress comes back on a new iPhone.

• The backup holds your plan, progress, journal, slips and, if it fits, your goal photo.
• It leaves out your quit aids, the days you ticked them off, your craving records and your limits on moving. Those stay on the phone only.
• Apple gives the app your first name and email address once, when you first sign in. The app keeps them on your phone to show which account is signed in. They are not sent to our server.
• We have no access to your iCloud. Apple handles that data under its own privacy policy.

How long: until you choose Profile › Account › Delete account, or remove Deep Breez's data in your iCloud settings.

5. What reaches our server

Our server is hosted by Supabase in the European Union ([SERVER REGION: owner to confirm, the project is set up as EU, Ireland]).

5.1 Your account (Google or email sign-in only)

If you choose Google, Google confirms who you are and passes your email address to our server. If you choose email, a code is emailed to you. There are no passwords.

5.2 Your backup (only if you agree)

After you sign in with Google or email, the app asks "Back up your progress?". If you tap Keep it on this phone only, nothing is uploaded.

The backup updates by itself while it is on.

5.3 Counters for the AI coach

When AI replies are used, the server keeps a daily count so that nobody can overload the service.

5.4 Connection data

Whenever the app talks to a server, that server sees your IP address and basic technical details of the request, as any internet service does. Our hosting provider keeps short-lived logs of these for security and fault-finding.

6. Talking to your buddy: the AI coach

"Talk to Breez" (or whichever buddy you picked) can answer in two ways: with replies built into the app, or with replies written by an AI. AI replies are part of the paid plan.

Nothing is sent until you tap Allow. The first time, the app asks "Use AI replies?" and explains what is sent. If you tap Not now, you get built-in replies and nothing leaves your phone.

If you allow AI replies, each message you send goes to our server, which passes it to Anthropic, PBC (United States), the company that makes the Claude AI models. Sent with it:

• the last messages of the current chat (up to 12, each up to 500 characters);
• your buddy's name;
• a short summary of your plan: your first name; what you are stopping; your quit day, or the time since your last one; your "why" and your reasons, in your own words; the tough moments you planned for and what you planned to do; the moment that is likely right now; any limits on moving you chose; and the money you have kept;
• the one-way code made from your install ID (section 5.3).

Not sent: your journal, your craving records, your quit aids, your age range, your gender, your goal photo or your email address, unless you type them into the chat yourself.

What you should know:

• It is an AI, not a person. It is not a doctor, therapist or counselor, and it can be wrong.
• We do not store your chats. Our server passes messages on and keeps only the counters in section 5.3. The chat is not saved on your phone either: it is gone when you close it.
• Anthropic processes the messages on our behalf to write the reply. Under its commercial terms it does not use them to train its models, and it deletes them after a limited period ([ANTHROPIC RETENTION: owner to confirm against Anthropic's current terms before publishing]).
• The legal basis is your explicit consent, because what you write may include information about your health.
• Turning it off: Profile › Sound & reminders › AI replies. From that moment nothing more is sent.
• If you write about being in danger, the app itself shows a way to find a helpline straight away, without waiting for the AI. In an emergency, call your local emergency number.

7. Purchases

Subscriptions are bought through Apple's App Store. Apple takes the payment and holds the records. We never see your card or your Apple Account details.

The app reads your subscription status from Apple on your phone to unlock the paid features. The random install ID is attached to the purchase inside Apple's records, so that a purchase can be matched to the app install that made it. We do not run a server that stores your purchase history.

8. Notifications, calendar, photos and sound

• Reminders. If you turn them on, the app schedules them on your phone, using your quit day and the tough moments you chose. We do not send push notifications from a server and do not hold a notification token for your phone. Turn them off in Profile › Sound & reminders, or in iOS Settings.
• Calendar. If you choose to add a trial reminder to your calendar, iOS shows its own screen and saves the event in your calendar. The app cannot read your calendar.
• Photos. If you add a goal photo, you pick that one photo with the iOS picker. The app cannot see the rest of your library.
• Sound. The app plays sounds and spoken guidance. It never uses the microphone or the camera.
• Location. The app does not ask for or use your location. To show the right quitline, it reads the region set on your phone, on the phone.

9. Reading and outside links

• To show recent articles, your phone fetches public lists directly from The Conversation and the U.S. Centers for Disease Control and Prevention (CDC). Those sites see your IP address, as with any web request, and nothing else from the app. The request carries no cookies and nothing about you.
• When you open an article, a source link, a quitline page or the helpline finder (findahelpline.com), it opens in Safari or in a Safari view inside the app. From there, that website's own privacy policy applies.

10. What we do not do

• No advertising, and no advertising identifiers.
• No tracking of you across apps or websites owned by other companies.
• No analytics or crash-reporting service. App events used to run the paywall are kept in memory on your phone and are not sent anywhere.
• No sale of personal data, and no sharing of it for advertising.
• No access to your contacts, location, microphone, camera, Apple Health data or motion sensors.
• No decisions about you made only by a machine that have a legal or similarly serious effect.

If any of this ever changes, this policy will be updated first, and the app will ask you where the law requires it.

11. Who else handles your data

These companies process data for us, or receive it because you chose their service.

We may also disclose data when the law requires it, or when it is needed to protect someone's safety. If Deep Breez is ever passed to another owner, your data would move only under this policy, and you would be told first.

12. Moving data between countries

• We are based in Georgia. When we administer the server (for example to fix a fault), data stored in the European Union can be accessed from Georgia.
• Anthropic is in the United States, so AI coach messages are processed there.
• The email provider and Supabase may use systems outside your country.

Where data about people in the European Economic Area, the United Kingdom or Georgia goes to a country that does not have an official adequacy decision, we rely on the safeguards the law provides, such as the European Commission's Standard Contractual Clauses (with the UK addendum where needed) in our agreements with these providers. You can ask us for more detail at [CONTACT EMAIL].

13. How long we keep things

14. Deleting your data

You can do all of this in the app, without writing to us.

To remove every trace, use Delete account first, then Start over.

Deleting your account or the app does not cancel a subscription. Cancel it in iPhone Settings › your name › Subscriptions.

If you signed in with Apple, you can also stop Deep Breez using your Apple Account in iPhone Settings › your name › Sign-In & Security › Sign in with Apple.

15. Your rights

Depending on where you live, the law gives you rights over your personal data. This includes the EU and UK General Data Protection Regulation, Georgia's Law on Personal Data Protection, and state privacy laws in the United States. We give the same rights to everyone, wherever they live.

You can:

• See the data we hold about you, and get a copy;
• Correct it;
• Delete it (section 14);
• Take it with you: ask for your server backup in a common, machine-readable format;
• Withdraw consent at any time, for the server backup and for AI replies. Withdrawing does not undo what happened before;
• Object to or restrict uses that rest on our legitimate interest (the coach counters);
• Complain to a data protection authority: for example the Personal Data Protection Service of Georgia, the Information Commissioner's Office in the UK, or the authority in your EU country.

Most of these you can do yourself in the app. For the rest, email [CONTACT EMAIL]. We answer within one month. We may ask you to write from the email address of your account, so that nobody else can ask for your data.

Because most of your data is only on your phone or in your own iCloud, we often hold nothing more than an email address, or nothing at all.

We do not sell personal data, do not share it for cross-context behavioral advertising, and will never treat you differently for using your rights.

16. Age

Deep Breez is for adults. You must be 18 or older to use it. During setup the app asks your age range. If you choose "Under 18", setup stops, nothing further is collected, and the app points to free support made for teenagers.

We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, email [CONTACT EMAIL] and we will delete it.

17. Security

• The connection between the app and every server is encrypted (HTTPS).
• Each account can read and change only its own backup. The server enforces this for every request.
• Sign-in sessions and the install ID are kept in the iPhone Keychain.
• The secret keys for the server and for the AI provider are never inside the app.
• Message text is not written to our server's logs.

No system is perfectly safe. If a breach puts your rights at risk, we will tell you and the authorities as the law requires.

18. Health information in the app

Deep Breez shows general information from public health sources, with the source named beside it (for example the NHS, the CDC and the World Health Organization). It is general information, not medical advice, and Deep Breez is not a medical device. Please talk to a doctor or pharmacist about medicines and about anything that worries you.

19. Changes to this policy

When this policy changes, the date at the top changes. If a change matters to how your data is used, the app will tell you before it applies, and will ask for your consent again where the law requires it.

20. Contact

[DEVELOPER LEGAL NAME]
[POSTAL ADDRESS IF REQUIRED]
Email: [CONTACT EMAIL]