Last updated 9 October 2026.
Your quiz answers, your quit plan, your craving and slip log, your check-ins and your breakup video are stored on your device only. We cannot read them. They are backed up to your own iCloud account if you have iCloud backup switched on, and come back on a new phone when you restore it from that backup.
Three things, and only when the feature is used: a random device identifier so your subscription can be recognised, your subscription status from Apple through RevenueCat, and the messages you type to the coach along with the numbers shown on your dashboard (day count, vape-free hours, dependence score, trigger tags, local time, recent slips). Coach messages are sent to Anthropic's API to generate the reply and are not used to train any model. We do not store the text of your coach messages after the reply is returned.
No name, no email address, no phone number, no contacts, no photos, no location, and no advertising identifier. Signing in with Apple or Google is optional and the app works fully without it. Our server never receives your email address or name, and we never post anything anywhere.
We use Mixpanel to count anonymous product events, such as which quiz step was completed and whether a paywall was shown. Events are tied to the random device identifier, never to you as a person, and are processed in the European Union.
If you signed in, Delete account in the You tab erases everything on the device, signs you out and ends the Apple or Google sign-in for PuffShift. For Apple, the app sends a one-time code from Apple to our server, which uses it only to revoke the sign-in and does not store it. Deleting the app also deletes everything stored on the device. To delete the subscription record held on our server, email hello@puffshift.com from any address with your device identifier, shown in Settings inside the app, and we will remove it within 30 days.
PuffShift is not directed at children under 13 and we do not knowingly collect data from them.
Questions: hello@puffshift.com.