Paff · Privacy

Privacy Policy

Version 1.4 · Effective 5 October 2026

Paff helps you stop smoking. To do that it keeps what you tell it about your smoking and your quit. This page says exactly what that is, why we keep it, who else touches it, and how you delete it.

The short version

• No account. No name, email or phone number is needed. Your data sits under a random ID the app creates.
• No ads, no tracking, nothing sold. Paff shows no ads and has no tracking SDK. If one of our own App Store search ads brought you here, Apple tells us which one (see Section 2).
• We ask first. Your smoking and quit data is sensitive, so Paff asks for your explicit consent before it saves any of it. See the Explicit Consent Notice.
• What you write stays out of analytics and crash reports. Those tools only see event names, counts and error types.
• The coach runs on Google’s Gemini. Your coach messages go to Google to generate a reply, and Google does not use them to improve its products.
• Delete everything in one tap: Settings › Delete all my data.

1. Who is responsible for your data

Paff is published by the person named as the seller on Paff’s App Store page. That person is the data controller for the purposes of the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the EU and UK General Data Protection Regulation (“GDPR”) and similar laws. Paff has not appointed a data protection officer.

Contact for everything in this policy: getpaff@gmail.com.

2. What we collect

Everything below comes either from you, when you type or tap it in the app, or automatically from the app while you use it.

Identifiers and device data (automatic)

• A random anonymous user ID (Firebase Authentication), which links your data to your install.
• An app-instance ID for analytics, a Firebase installation ID, and an App Check token that confirms requests come from the genuine app. None of these reveal who you are.
• Device model, iOS version, app version, language and time zone.

What you tell Paff when you start

• The name you give your companion and, if you choose, the name you want to be called.
• How much you smoke, your pack price and size, how long you have smoked, how soon after waking you used to smoke, whether people around you smoke and whether there is tobacco at home, your longest previous break, how confident you feel, your hardest hours, your usual triggers and places.
• Your reasons for quitting, including the optional preset “pregnancy” and any reason you type yourself; the future-self lines you pick or write; your commitment statement; your quit path and quit date.

What you record while quitting

• Moments you log: when, a place category, what was going on, how you felt, who was with you, how strong the urge was, and any note you add.
• Slips: how many, when, and anything you write about them.
• Daily check-ins: your mood, whether the day had a hard moment, and any journal text.
• Coach conversations: the messages you type and the coach’s replies, and how the session ended.
• Your plan cards and which moves worked for you, your badges and milestones, and your progress counters.

What Paff writes about you

• Texts the AI generates from the data above: your trigger map summary, your plan, personal lines for your home screen and milestones, and reflections after a slip.

Purchase data

• Whether you have Premium and when it started; which plan you are on (the yearly plan, its free week, or lifetime) and when a plan renews or ends; and, if Paff offered you its one-time lifetime sale, when that offer opened and ends. Apple processes the payment; RevenueCat keeps your purchase and subscription history under your anonymous ID, and our server reads your current plan from RevenueCat. Paff never sees your card details.
• If you installed Paff from one of our own App Store search ads: which ad campaign and keyword brought you. Apple provides this through its AdServices framework, without your advertising identifier and without tracking you across other apps. RevenueCat stores it with your purchase history so we can see whether our ads pay for themselves.

Usage and crash data (automatic)

• Usage events: which screens and features are used, as event names, counts and fixed categories. Google Analytics also derives an approximate country or region from your IP address. You can turn usage analytics off at any time: Settings › Share usage analytics.
• Crash reports: error type, technical stack, device and app version, and your anonymous ID. Personal content is removed before a report is sent.

Support

• If you email us, we receive your email address and whatever you write.

Notifications are scheduled on your phone; Paff does not use push servers. The home-screen widget keeps a copy of your numbers on your phone only.

3. Why we use it, and on what legal basis

• To run the app you asked for (keep your ID, settings and purchase status, sync your data): performance of our contract with you. KVKK Art. 5(2)(c); GDPR Art. 6(1)(b).
• To build your map and plan, run the coach, write your personal lines, and track your progress using your smoking and quit data: your explicit consent, because this is health-related data. KVKK Art. 6(2); GDPR Art. 9(2)(a) and 6(1)(a).
• To improve the coach: we read coach conversations and notes, under your anonymous ID only, to judge and refine how the coach responds. This is covered by the same explicit consent. We do not use your data to train an AI model; if that ever changes we will ask you first.
• To keep Paff working and safe (content-free usage analytics, measuring our own App Store ads, crash diagnostics, blocking fake clients, per-user cost limits): our legitimate interest in a reliable, affordable service. KVKK Art. 5(2)(f); GDPR Art. 6(1)(f). You can object to usage analytics by switching off Settings › Share usage analytics.
• To answer you and meet legal duties (support emails, rights requests, legal claims): KVKK Art. 5(2)(ç), (e) and (f); GDPR Art. 6(1)(c) and (f).

We do not sell your data, use it to target ads, or make decisions about you that have legal or similar effects by automated means.

4. The AI coach

When you use the coach, or when Paff writes your plan and personal lines, the relevant data is sent from our servers to Google’s Gemini API to generate text. Under Google’s terms for paid use, Google does not use these prompts or replies to improve its products, and keeps them only for a limited period to detect abuse and meet legal requirements. Our AI keys live on our servers, never in the app.

Before anything you type in the coach reaches the AI, our server checks it for crisis language. If it finds any, it shows you a crisis line straight away. The message itself is stored like your other coach messages.

5. Who receives your data

We use a small set of service providers, each bound by its own data processing terms and given only what it needs:

• Google Cloud / Firebase (Google LLC and affiliates): sign-in, the database (EU multi-region, Belgium and the Netherlands), server functions (Frankfurt, Germany), App Check, Remote Config (settings we can change without an app update), usage analytics (processed by Google, including in the United States) and this website.
• Google Gemini API (Google LLC): generates coach replies and personal texts. Google may process this data in any country where it has facilities, including the United States.
• RevenueCat, Inc. (United States): manages and validates your purchase, and records which of our App Store ads, if any, brought you.
• Expo (650 Industries, Inc., United States): delivers app updates (fixes) over the air; receives your app version, platform, a random install ID and your IP address.
• Sentry (Functional Software, Inc.): crash diagnostics, stored in its EU (Germany) region.
• Apple: distributes the app and handles payment and refunds under Apple’s own privacy policy.
• Google Workspace / Gmail: receives support emails.

We share data with public authorities only when the law requires it.

6. Transfers outside Türkiye

Paff is published from Türkiye, and all the providers above process data abroad: in the European Union and, for Google’s analytics and Gemini services, RevenueCat and Expo, in the United States. These transfers rely on the providers’ data processing terms and the safeguards in them, including the EU standard contractual clauses. For users in the EU and UK, transfers to the United States rely on those clauses or on the provider’s certification under the EU-US Data Privacy Framework where it has one.

7. How long we keep it

• Your app data is kept while you use Paff and deleted when you tap Settings › Delete all my data. That deletes your profile, logs, check-ins, slips, coach conversations, plan and your anonymous sign-in, from our servers, straight away.
• If you delete the app without using that button, your data stays tied to an ID no device can reach any more. We delete data that has not been used for 12 months.
• Crash reports are kept for up to 90 days. Usage analytics are kept for up to 14 months. Support emails are kept as long as needed to handle your request and any claim arising from it.
• Google may keep Gemini prompts for a limited period for abuse monitoring, as described in Section 4. RevenueCat and Apple keep purchase records under their own retention rules.

When the reason to keep data ends, it is deleted, destroyed or anonymised.

8. How we protect it

Data is encrypted in transit and at rest. Server-side security rules let each install read only its own data. App Check blocks requests that do not come from the genuine app. AI keys are held as server secrets. Access to production data is limited to the publisher.

9. Your rights

Under KVKK Art. 11 you can ask us to: tell you whether we process your data and give you information about it; tell you why we process it and whether it is used for that purpose; name the parties in Türkiye or abroad who receive it; correct it; delete or destroy it; tell the recipients about a correction or deletion; and you can object to an outcome against you that results only from automated analysis, and claim compensation if unlawful processing harms you.

Under the GDPR and UK GDPR you can also access, correct and erase your data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time without affecting processing that happened before.

How to use them. Deletion is instant from Settings. For anything else, email getpaff@gmail.com from the address you want the answer sent to, say which right you are using, and include the date you started using Paff so we can find your data; we may ask a question to confirm the data is yours. We answer free of charge and within 30 days at the latest.

Complaints. You can complain to the Personal Data Protection Board in Türkiye (kvkk.gov.tr), your local data protection authority in the EU, or the Information Commissioner’s Office in the UK. US residents of Washington, Nevada and Connecticut: see our Consumer Health Data Privacy Policy.

10. Withdrawing consent

You can withdraw your explicit consent at any time by tapping Settings › Delete all my data. Paff cannot run without that data, so withdrawing ends your use of the app and deletes your data.

11. Age

Paff is for adults. You must be 18 or older to use it.

12. Not medical or crisis support

Paff is a self-help tool, not a medical device or a crisis service. If you are in crisis, including thoughts of self-harm, contact a crisis line now:

13. Security incidents

If a breach puts your data at risk, we notify the authorities and affected users as the law requires, including the Turkish Personal Data Protection Board within 72 hours.

14. Changes

When this policy changes materially we tell you in the app before the change applies, and if a change needs new consent we ask for it. The version and date at the top always show the current text.

15. Contact

getpaff@gmail.com