Paff · United States
Consumer Health Data Privacy Policy
Version 1.0 · Effective 17 September 2026
This policy applies to consumers in Washington (My Health My Data Act, RCW 19.373), Nevada (SB 370) and Connecticut, and to anyone else covered by a similar consumer health data law. It adds to our Privacy Policy.
1. Consumer health data we collect
- Your smoking history and habits (amount, years smoked, time to first cigarette, hardest hours, triggers, places, people around you who smoke, past quit attempts, confidence).
- Your reasons for quitting, which can include pregnancy.
- Records of urges, slips, mood and journal check-ins.
- Your conversations with the coach.
- Summaries, plans and personal texts generated from the data above.
2. Why we collect and use it
To provide the Paff app you asked for: store your progress, build your trigger map and plan, run the coach, and improve how the coach responds. We do not use consumer health data for advertising, and we do not sell it.
3. Where it comes from
From you, when you answer questions and use the app, and from text our AI generates from what you provided. We do not buy health data or collect it from other sources.
4. Who we share it with
Only the processors that run the service on our behalf:
- Google LLC and its affiliates (Google Cloud / Firebase for storage and server functions; the Gemini API to generate coach replies and personal texts).
- Functional Software, Inc. (Sentry), for crash reports, with personal content removed.
We do not share consumer health data with any other third party or affiliate, and we never sell it.
5. Consent
Paff asks for your consent in the app before it collects or shares any consumer health data. You can withdraw it at any time; see Section 6.
6. Your rights
- Confirm and access: ask whether we collect, share or sell your consumer health data, and get a copy of it and the list of processors that received it.
- Withdraw consent: tap Settings › Delete all my data in the app.
- Delete: the same button deletes your data from our servers immediately. We also tell our processors to delete it.
- Not be discriminated against for using these rights.
To use a right other than deletion, email getpaff@gmail.com with the subject “Consumer health data request” and the date you started using Paff. We answer within 45 days, free of charge, and tell you if we need an extension the law allows.
7. Appeals
If we decline your request, you can appeal by replying to our answer with the subject “Appeal”. We decide appeals within 45 days and explain our decision in writing. If you are unhappy with the result, Washington residents can contact the Washington State Attorney General at atg.wa.gov/file-complaint; Nevada and Connecticut residents can contact their state Attorney General.