No Vape
Privacy Policy
No Vape is made by NorthPixel Studio. A record of your attempt to stop vaping is health information, and we treat it that way. This policy explains exactly what the app collects, where it goes, and how to get rid of it.
The short version. We collect what the app needs to keep your 21-day challenge going — your Apple sign-in, your onboarding answers, and your daily check-in log — plus anonymous product analytics. There are no ads, no advertising SDKs, and no tracking of you across other apps or websites. We never sell or share your data. You can delete everything from the Profile tab.
Who we are
NorthPixel Studio ("NorthPixel", "we", "us") is the developer of No Vape and the controller of the personal data described here. You can reach us any time at hello@northpixel.studio.
What we collect
Your account
No Vape uses Sign in with Apple as its only sign-in method. When you sign in, we receive a stable Apple user identifier and an email address — which is a private relay address unless you choose to share your real one — plus your name if you choose to share it. We never see or store your Apple ID password.
Your challenge data
This is the substance of the app, and it is stored against your account so it survives a lost phone and follows you to a new one. It is a short list:
- Your onboarding answers — including how often you vape and what it costs you
- Your daily check-in log: which day of the challenge you completed, and when
- Your current and longest streak, and the milestones you've reached
- Your reminder preferences
This information is health-related. We do not sell it, share it for advertising, or use it for anything other than running the app for you. There is nothing else: no journal entries, no free-text notes, no photos, no user-generated content of any kind.
Your subscription
Subscriptions are handled by Apple and managed through RevenueCat, our subscription infrastructure provider. RevenueCat receives an app user identifier and your purchase and entitlement status so the app knows your subscription is active. Payment itself happens entirely inside Apple's system — we never receive your card details or billing address.
Usage analytics
We use a product analytics service to understand how the app is used in aggregate: which screens are opened, which features are used, app version, device model, OS version, and coarse region. These events are tied to an anonymous identifier, not to your name or email. We use them to decide what to build and fix — nothing else.
If you have turned on "Share with App Developers" in your iOS settings, Apple also sends us aggregate App Store analytics and crash reports. That is controlled by you, in iOS Settings → Privacy & Security → Analytics & Improvements.
Notifications
All of the app's reminders are local notifications, scheduled and computed on your own device. The app never registers for remote push, so we do not receive a push token and we cannot send you anything from our servers. Notification permission is entirely optional — declining it does not restrict the app — and you can change or turn off reminders in the app at any time.
Widgets and Live Activities
The home-screen widgets and the Lock Screen Live Activity read your streak from storage on your device. They do not send anything anywhere.
What we don't do
- No ads, and no advertising or attribution SDKs in the app
- No tracking across other companies' apps or websites — the app does not use the App Tracking Transparency permission because it has nothing to ask for
- No selling or renting your data, and no sharing it with data brokers
- No remote push notifications, and no push token
- No Apple Health access — the app does not read from or write to HealthKit
- No user-generated content, no messaging, and no social features
- No advertising profiles, and no automated decisions with legal or similar effects
Why we're allowed to process it
Where the UK/EU GDPR applies, we rely on: performance of a contract for your account, your challenge data, and your subscription, since without them there is no app; your consent for notifications and, where required, for analytics — withdrawable at any time in the app or your device settings; and our legitimate interests in keeping the service secure and working. Because your challenge data concerns health, we process it on the basis of your explicit consent, given when you complete onboarding.
Who we share it with
With no one, other than service providers who process data on our instructions, under contract, and only to run the app:
- Apple — sign-in and payments
- RevenueCat — subscription and entitlement management
- Our hosting and database provider — where your account and challenge data are stored
- Our analytics provider — anonymous product usage events
We're happy to name our current providers — just ask at hello@northpixel.studio. We may also disclose data if the law genuinely requires it, or to protect the rights and safety of our users, and we'd tell you unless we were forbidden from doing so. If NorthPixel is ever acquired, your data may transfer to the buyer under this same policy, and we'd notify you first.
Where it's stored
Our providers operate servers in the United States and the European Union, so your data may be transferred outside your country. Where that involves data leaving the UK or EEA, transfers are covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.
How long we keep it
Your account and challenge data are kept for as long as your account exists — a streak is only useful if it's the whole history. When you delete your account, we delete your personal data from our live systems within 30 days and from backups within 90 days. Purchase records that Apple and tax law require us to retain are kept for as long as those rules demand, and aggregate analytics that can no longer be linked to you may be retained indefinitely.
Your choices and rights
- Delete everything — Profile → Delete Account removes your account, your sign-in identity, and your challenge data. You can also email us and we'll do it for you.
- Turn off reminders — in the app, or in iOS notification settings
- Access, correction, export, restriction, objection, and portability — email us and we'll respond within 30 days
- Withdraw consent — for notifications or analytics, without affecting anything we did before you withdrew it
- Complain — you can lodge a complaint with your local data protection authority, though we'd appreciate the chance to fix it first
If you're in California: we do not sell or share personal information as those terms are defined by the CCPA/CPRA, and we have not done so in the preceding twelve months. We do not knowingly collect personal information from anyone under 16. You have the right to know, delete, correct, and to be free from discrimination for exercising those rights.
Security
Data is encrypted in transit with TLS and encrypted at rest by our storage providers. Access to production systems is limited to those who need it. No system is perfect, but we keep the footprint small on purpose: fewer things collected means fewer things to lose.
Children
No Vape is intended for adults who vape and want to stop. It is not directed at children, and we don't knowingly collect data from anyone under 13 — or under 16 where local law sets that bar. If you believe a child has given us data, write to us and we'll delete it.
Changes to this policy
If we change how the app handles data, we'll update this page and change the date at the top. For anything material, we'll tell you in the app before it takes effect.
Contact
NorthPixel Studio — hello@northpixel.studio. We answer email; there's no ticket queue and no bot.