Your data, your choices
Privacy policy
What this policy covers
This policy describes the Unheated iPhone app and unheated.app. Optional services depend on the features enabled in your app build. Unheated is intended for adults aged 18 or older. It supports self-monitoring and coping; it does not provide medical treatment.
Your records on your iPhone
Your profile, usual stick count, products, pack price and currency, plans, stick logs, trigger tags and craving check-ins are stored on your device. Your personal reason, savings goal and reminder settings are also local. No account is required to use the core app. Records can reveal information about tobacco use and health, so treat exports as sensitive.
The app uses iOS file protection. Device backups may contain app data according to your Apple settings. An export is a file you choose to save or share; we do not receive it automatically. Local records remain until you delete them or remove the app, subject to any device backup you retain.
Optional account and cloud sync
If you choose an account, Supabase processes your email address, account identifier and authentication information to sign you in. When you select Sync now, your baseline, products, plans, daily targets, logs, trigger tags and check-ins are associated with that account. Your personal reason, savings goal and analytics choice remain on the device.
The configured database region is Tokyo, Japan. The purpose is to store and sync the records you choose to send. Cloud records remain with the account until you delete individual records through sync or delete the account. Access is restricted by account permissions. This is not a claim of end-to-end encryption.
Optional product analytics
When configured and you opt in, PostHog receives limited app-action events, permitted experiment identifiers, a pseudonymous device identifier and technical information used by the SDK. Session replay, automatic interaction capture and automatic screen capture are disabled. Personal reasons, trigger names and exact stick-log times are not included in analytics events. Analytics is not tied to the cloud account email by the app.
You can turn off analytics in You → Privacy & your data. This stops future optional events. It does not automatically delete events already received by the analytics provider. Contact us to request deletion of those records; we may need information that allows us to locate them. Analytics provider retention must be confirmed before analytics is enabled for the public release.
Purchases, if available
Apple processes App Store payments. Unheated does not receive your complete payment-card details. When subscription services are configured, RevenueCat and Superwall process purchase and app-user identifiers, entitlement status and associated technical or paywall information to present offers, restore purchases and provide access. They do not receive your local stick journal from the app.
Purchase records may need to be retained to restore access, handle refunds, prevent fraud or meet legal obligations. Deleting an Unheated account does not delete records Apple holds or cancel an Apple subscription.
This website and support
Vercel hosts the website and processes normal connection data, such as IP address, requested URL, browser information and request time, for delivery and security. This site does not install advertising pixels or website analytics, and it serves its fonts locally. The savings calculator and journal search run in your browser; their inputs are not uploaded or persisted.
If you email support, the message and contact details are used to answer your request. Send only information needed to investigate the problem. Do not send passwords or one-time codes. Support records should be kept only as needed to resolve the request, handle related follow-up and meet applicable obligations; final retention settings will be published before launch.
Service providers and international processing
The providers described above process information for the relevant service, subject to their terms and applicable data-protection obligations. Information may be processed outside your country. The operator must finalize provider agreements, applicable transfer safeguards and retention settings before public cloud or analytics processing begins. We do not sell your journal or use it for targeted advertising.
Provider information: Supabase, PostHog, RevenueCat, Superwall, Vercel, and Apple.
Your controls and deletion
- Export: You → Privacy & your data → Export my data.
- Delete local records: choose Delete data on this iPhone. Cloud records and subscriptions remain.
- Delete the account: while signed in, choose Delete account and all data. After successful cloud deletion, the app also clears this iPhone.
- Withdraw analytics consent: turn off Anonymous product analytics.
- Cancel purchases: use your Apple subscription settings.
Deletion from active account records does not necessarily erase copies already included in restricted provider backups immediately. The final policy will identify applicable backup and provider retention periods. Keep any export you want before deleting data.
Privacy requests
Depending on where you live, you may have rights to access, correct, erase or receive your personal data, restrict processing, object to processing, and withdraw consent. You may also complain to your local data-protection authority. The operator’s legal bases for processing and any required local representative details will be finalized before public release.
The privacy contact is awaiting publication. Do not submit sensitive information through the website; it has no collection form.
Updates
We will update the date above when this policy changes and explain material changes before introducing a new use of your data that requires notice or consent.