SmokeMate Privacy Policy

SmokeMate ("SmokeMate", "we", "us", or "our") is a smoke-free / health mobile application available on the Apple App Store (primary language: English; also supports Simplified and Traditional Chinese). This Privacy Policy explains what information we collect, how we use it, and the choices you have. By using SmokeMate you agree to the practices described in this policy.

1. Information We Collect and How We Use It

We collect only the information necessary to operate SmokeMate and provide its features.

Data	When collected	Purpose
Display name and profile photo (optional)	When you choose to set them	To identify you within Moments, Tribe, and notifications
Posts, comments, and other content you publish ("User Content")	When you post in Moments or comment	To display your content in the public feed and enable social interaction
Group chat messages (Tribe)	When you send messages in a Tribe group	To deliver and display group messages to members
Device token (Firebase Cloud Messaging / FCM)	When you enable notifications	To deliver push notifications (likes, comments, follows, group messages, system notices)
Purchase transaction records	When you subscribe to or purchase VIP	To unlock VIP features and validate receipts via our backend; payments are processed by Apple / Google, not by us
Login identity identifier	When you sign in with Apple or Google	To authenticate you and maintain your session

We do not collect your credit card number, do not read data from Apple HealthKit, do not collect your precise location, and do not track you across apps or websites (no cross-app IDFA/ATT tracking).

The "recovery trends" shown in the health module (e.g., cardiovascular/lung recovery percentages, money saved) are estimates computed and displayed inside the App based on the quit date and usage you enter. They are not collected from, and are not linked to, any system health data.

2. Analytics and Advertising

Usage analytics. To understand how the app is used and improve it, SmokeMate collects anonymous usage analytics: app launches, screen views, feature usage, login method, and purchase funnel events (started / completed / cancelled). These events are associated with a randomly generated installation identifier (not your IDFA or IMEI) and include platform, app version, language, and country-level location derived from your IP address. This data is processed by us (on our own servers) and by Google Firebase Analytics (GA4).

Advertising. SmokeMate is free to use with an optional paid VIP subscription. To keep the app free for users who do not subscribe, we may display ads in two placements only: a splash-screen ad when the app launches, and a banner in the Moments feed. When ads are shown, our ad partner (Google AdMob) may collect advertising identifiers and ad interaction data. For users in the European Economic Area (EEA), the UK, and Switzerland, advertising identifiers are only used with your explicit consent, which you can grant or withdraw at any time in the consent dialog shown at first launch or in Settings. You can also disable personalized ads in your device settings.

We do not sell your personal data, and analytics data is not used to profile you across other companies' apps.

3. Sign in with Apple and Sign in with Google

SmokeMate uses third-party identity providers for authentication. We do not operate our own username/password account system.

• Sign in with Apple: We receive a unique user identifier returned by Apple, and — only if you choose to share it — your name and email. If you use Apple's "Hide My Email" feature, we receive a relay email address managed by Apple. We use this information solely to create and authenticate your account.
• Sign in with Google: We receive the unique user identifier, and — if you authorize it — your basic profile (name and email) from Google. We use this information solely to create and authenticate your account.

We do not sell this identity information and we do not use it for advertising. Your authentication is handled by Apple and Google; their respective privacy policies govern how they process your data.

4. In-App Purchases and Payment

SmokeMate offers an optional VIP membership with three plans: Monthly, Annual, and Lifetime. Purchases are processed through the Apple App Store and Google Play using the platform in-app purchase systems.

• We do not collect or store your credit card number or any payment instrument details. All payment information is handled directly by Apple or Google.
• We receive and store purchase transaction records (such as product identifier, purchase date, and transaction status) so we can grant VIP benefits and validate receipts through our backend verification.
• Billing, refunds, and subscription management are governed by Apple's or Google's terms; you manage or cancel subscriptions through your App Store / Google Play account settings.

5. Push Notifications (Firebase Cloud Messaging)

With your permission, SmokeMate uses Firebase Cloud Messaging (FCM) to send push notifications about: likes, comments, new followers, Tribe group messages, and system announcements.

• We send notifications only for the purposes above.
• You can disable notifications at any time: On iOS: Settings → Notifications → SmokeMate, turn off "Allow Notifications"; or in SmokeMate, Settings → Notifications and adjust preferences.
• Disabling notifications does not disable other features; you can re-enable them at any time.

6. User-Generated Content (Moments & Tribe)

Content you publish in Moments (posts, comments, likes) and Tribe (group messages, images) is visible to other users as part of the social features. Such content is public within the community. We moderate reported content and may remove content that violates our rules.

• You can delete your own posts and comments at any time using the in-app controls.
• If you delete a Tribe message, it is removed from the group view.
• We do not use your user-generated content for advertising.

7. Data Retention, Deletion, and Your GDPR Rights

We retain your data only as long as your account is active or as needed to provide the service.

• Account deletion. You have the right to delete your account and associated personal data. In SmokeMate, go to Settings → Account → Delete Account. This permanently removes your account, profile, posts, comments, and Tribe messages from our active systems.
• You can also request deletion through our web forms: Delete Account (removes your account and all associated data) or Delete Data (removes selected data while keeping your account). We process these requests within 30 days.
• Analytics data. Anonymous usage events are retained for up to 24 months, after which they are aggregated or deleted.
• After deletion, we retain minimal records only where required for legal, accounting, or fraud-prevention purposes, and we erase or anonymize them thereafter.

Your rights (GDPR / CCPA). If you are in the EEA, the UK, or California, you have the right to:

• Access a copy of your personal data;
• Rectify inaccurate data (edit your profile in-app);
• Erase your data ("right to be forgotten" — delete your account in-app or contact us);
• Restrict or object to processing, including opting out of analytics;
• Data portability — receive your data in a structured format;
• Withdraw consent at any time (consent dialog in Settings);
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, email [email protected]. We respond within 30 days.

8. Children's Privacy

SmokeMate is not directed to and not intended for children under the age of 13. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA).

Because SmokeMate includes user-generated content and social features, its Apple App Store age rating is typically 17+ (Unrestricted Web Access / User-Generated Content). If you are under the minimum age required by your jurisdiction or by the App Store, do not use SmokeMate. If we learn that we have collected personal data from a child under 13, we will delete it.

9. Security and International Transfers

We use industry-standard measures to protect your data: HTTPS encryption in transit, encrypted token storage (iOS Keychain / Android EncryptedSharedPreferences), and server-side JWT authentication. Data is stored on servers in the United States. For EEA/UK users, international transfers are protected by EU standard contractual clauses (SCCs) and, where applicable, the EU-US Data Privacy Framework.

10. Contact Us

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you (for example, through an in-app notice or by updating the "Last updated" date above) before the changes take effect. Your continued use of SmokeMate after the update constitutes acceptance of the revised policy.

---

---

SmokeMate 隐私政策（简体中文版）

SmokeMate（"SmokeMate"、"我们"或"我们的"）是一款戒烟 / 健康类移动应用，上架于 Apple App Store（主语言为英文，同时支持简体中文与繁体中文）。本隐私政策说明我们收集哪些信息、如何使用，以及您享有的选择。使用 SmokeMate 即表示您同意本政策所述做法。

1. 我们收集的信息及用途

我们仅收集运营 SmokeMate 并提供其功能所必需的信息。

数据	收集时机	用途
昵称与头像（可选）	您主动设置时	在广场、部落与通知中标识您的身份
您发布的帖子、评论等内容（"用户内容"）	您在广场发布或评论时	在公共信息流中展示您的内容并实现社交互动
部落群聊消息	您在部落群组发送消息时	向群成员投递与展示群消息
设备推送令牌（Firebase Cloud Messaging / FCM）	您开启通知时	推送通知（点赞、评论、关注、群消息、系统公告）
购买交易记录	您订阅或购买 VIP 时	开通 VIP 功能并通过后端校验收据；支付由 Apple / Google 处理，不由我们处理
登录身份标识	您使用 Apple 或 Google 登录时	验证您的身份并维持登录会话

我们不收集您的信用卡号，不读取 Apple HealthKit 数据，不收集精确位置，也不跨应用或跨网站追踪您（不使用跨应用 IDFA/ATT 追踪）。

健康模块中显示的"恢复趋势"（如心血管 / 肺部恢复百分比、节省金额）是基于您填写的戒烟日期与使用情况在 App 内计算并展示的估算值，不采集自、也不关联任何系统健康数据。

2. 分析与广告

使用分析。 为了解应用使用情况并改进产品，SmokeMate 会收集匿名的使用分析数据：应用启动、页面浏览、功能使用、登录方式、购买漏斗事件（发起 / 完成 / 取消）。这些事件与随机生成的安装标识（非 IDFA 或 IMEI）关联，并包含平台、应用版本、语言及由 IP 地址推导的国家 / 地区层级信息。该数据由我们（自有服务器）与 Google Firebase Analytics（GA4） 处理。

广告。 SmokeMate 免费使用，并提供可选的付费 VIP 订阅。为让未订阅的用户也能免费使用，我们可能在仅两个位置展示广告：App 启动时的开屏广告，以及广场信息流中的横幅广告。展示广告时，广告合作伙伴（Google AdMob）可能收集广告标识符与广告交互数据。对于欧洲经济区（EEA）、英国与瑞士的用户，仅在您明确同意后才使用广告标识符；您可在首次启动的同意弹窗或设置中随时授予或撤回同意。您也可以在设备设置中关闭个性化广告。

我们不出售您的个人数据，分析数据也不会被用于在其他公司的应用中为您构建画像。

3. Apple 登录与 Google 登录的数据处理

SmokeMate 使用第三方身份提供商进行认证。我们不运营自己的用户名 / 密码账号体系。

• Apple 登录：我们接收 Apple 返回的唯一用户标识；仅在您选择共享时接收您的姓名与邮箱。若您使用 Apple 的"隐藏邮箱地址"功能，我们将收到由 Apple 管理的转发邮箱。我们仅将此信息用于创建与认证您的账号。
• Google 登录：我们接收 Google 返回的唯一用户标识，并在您授权时接收您的基本资料（姓名与邮箱）。我们仅将此信息用于创建与认证您的账号。

我们不会出售这些身份信息，也不会将其用于广告。您的认证由 Apple 与 Google 处理，其隐私政策分别约束其对您数据的处理方式。

4. 内购与支付

SmokeMate 提供可选 VIP 会员，共三个方案：月度、年度与终身。购买通过 Apple App Store 与 Google Play 的平台内购系统处理。

• 我们不收集或存储您的信用卡号及任何支付工具信息。所有支付信息均由 Apple 或 Google 直接处理。
• 我们会接收并存储购买交易记录（如商品标识、购买日期与交易状态），以便开通 VIP 权益并通过后端校验收据。
• 账单、退款与订阅管理遵循 Apple 或 Google 的条款；您可在 App Store / Google Play 账号设置中管理或取消订阅。

5. 推送通知（Firebase Cloud Messaging）

经您允许后，SmokeMate 使用 Firebase Cloud Messaging（FCM）推送以下通知：点赞、评论、新粉丝、部落群消息与系统公告。

• 我们仅出于上述目的发送通知。
• 您可随时关闭通知：iOS：设置 → 通知 → SmokeMate，关闭"允许通知"；或在 SmokeMate 内 设置 → 通知 中调整偏好。
• 关闭通知不影响其他功能，您可随时重新开启。

6. 用户生成内容（广场与部落）

您在广场（帖子、评论、点赞）与部落（群消息、图片）发布的内容对其他用户可见，属于社区内的公开内容。我们会审核被举报的内容，并可能移除违反规则的内容。

• 您可使用应用内控制随时删除自己的帖子与评论。
• 删除部落消息后，该消息将从群视图中移除。
• 我们不会将您的用户生成内容用于广告。

7. 数据保留、删除与您的 GDPR 权利

我们仅在您的账号存续期间或提供服务所需的期限内保留您的数据。

• 账号删除。您有权删除自己的账号及关联的个人数据。在 SmokeMate 中进入 设置 → 账号 → 删除账号，将永久移除您的账号、资料、帖子、评论与部落消息。
• 您也可以通过我们的网页表单申请删除：删除账号（移除账号及全部关联数据）或 删除数据（仅移除部分数据、保留账号）。我们将在 30 天内处理您的请求。
• 分析数据。匿名使用事件最多保留 24 个月，之后将被聚合或删除。
• 删除后，我们仅在法律、会计或防欺诈所需的范围内保留最少记录，随后将其擦除或匿名化。

您的权利（GDPR / CCPA）。 若您位于 EEA、英国或加州，您享有以下权利：

• 访问您的个人数据副本；
• 更正不准确的数据（在应用内编辑资料）；
• 删除您的数据（"被遗忘权"——在应用内删除账号或联系我们）；
• 限制或反对处理，包括退出分析；
• 数据可携带——以结构化格式获取您的数据；
• 随时撤回同意（设置中的同意弹窗）；
• 向当地数据保护机构投诉。

如需行使上述任何权利，请发送邮件至 [email protected]。我们将在 30 天内回复。

8. 儿童隐私

SmokeMate 不面向也不适用于 13 周岁以下的儿童（EEA 内为 16 周岁以下）。我们不会在知情的情况下收集 13 周岁以下儿童的个人信息。

由于 SmokeMate 包含用户生成内容与社交功能，其在 Apple App Store 的年龄分级通常为 17+（无限制网络访问 / 用户生成内容）。如果您未达到所在司法辖区或 App Store 规定的最低年龄，请勿使用 SmokeMate。如果我们得知收集了 13 周岁以下儿童的个人数据，将予以删除。

9. 安全与国际传输

我们采用行业标准措施保护您的数据：传输全程 HTTPS 加密、令牌加密存储（iOS 钥匙串 / Android 加密共享偏好）、服务端 JWT 认证。数据存储于美国境内的服务器。对于 EEA / 英国用户，国际传输受欧盟标准合同条款（SCCs）及适用的欧美数据隐私框架保护。

10. 联系我们

11. 政策更新

我们可能不时更新本隐私政策。发生重大变更时，我们将在变更生效前通知您（例如通过应用内提示或更新上述"最后更新"日期）。更新后继续使用 SmokeMate 即视为您接受修订后的政策。