Privacy Policy

This comes first because it is the point of the design. Aeris has no server holding your progress. There is no account to create, nothing to sync, and no copy of your quit anywhere but the phone in your hand.

What you are tracking here is your own nicotine use — how often you crave it, when you slipped, what set it off. That is sensitive by anyone's standards, and the most reliable way to keep it private is not to collect it. So we do not. The few requests the app does make — the subscription check, a one-time advert lookup and anonymous usage events — are each described below, and none of them carries anything you logged or answered.

All of the following is stored locally, in app-private storage that only Aeris can read. None of it is sent to us:

• 01Your quit date, your streak and your full history of streaks
• 02Every craving you log, with its time, intensity and trigger
• 03Every relapse you record, and anything you wrote about it
• 04Your journal entries, reasons for quitting and personal notes
• 05What you used to vape and what it cost you, and the savings calculated from it
• 06Health milestones reached, badges and reminders
• 07Your settings, language and appearance

Deleting the app deletes all of it. We cannot recover it for you afterwards, because we never had a copy.

Information about your nicotine use and your health is a special category of personal data under Art. 9 GDPR, which normally means a controller has to meet an additional condition before processing it.

We meet none, and need none, because we do not process it. It is created on your phone, kept on your phone and deleted from your phone, and no part of that involves us. Aeris also does not read from or write to Apple Health, does not ask for HealthKit access, and holds no medical record of any kind.

Purchases are processed by Apple and managed through RevenueCat, which tells the app whether your subscription is active. We receive an anonymous subscriber identifier and a subscription status — nothing that says anything about your quit, your progress, or whether you are still going.

We never receive your name, your email address or your payment details. Apple does not share them with us, and there is no field in the app where you could give them to us instead.

Once, on your first launch, Aeris asks MakerVN, our attribution service, which campaign the install came from. This is how we learn whether an advert worked.

It sends four things: the anonymous subscription identifier described above, the platform ("ios"), your iOS version, and the two-letter code for the app's language. It sends nothing about your vaping. If the install came from one of our adverts, the answer is a campaign code, which is stored on your phone and attached to the same anonymous identifier in RevenueCat so that a later purchase can be counted against the right advert. Most installs come from no advert at all, and then nothing is attached.

It runs until it gets an answer, then never again. Aeris does not ask for tracking permission and does not use your advertising identifier, because this is not tracking across other companies' apps — it is a lookup against our own adverts.

Since version 1.1.0, Aeris sends anonymous usage events to PostHog, a product-analytics service run by PostHog Inc. on its US Cloud (us.i.posthog.com). They tell us where people stop during setup and whether the paywall works, so that we can improve the app. They are not used for advertising, they are not used to track you across other companies' apps or websites, and they are never sold.

An event can contain:

• 01Which setup screens you viewed and completed, in what order, how long each one took, and when you went back.
• 02When the paywall was shown and which plan you selected, and the outcome of a purchase or a restore: the product identifier, the period, whether it included a free trial, the price and the currency — or an error code if it failed.
• 03Whether you allowed notifications.
• 04When the app is opened or sent to the background, and when you reach the home screen.
• 05The app version and build, the language, the platform, and the basic device details the PostHog library adds on its own, such as the iOS version and the device model.
• 06The campaign code from the advert lookup above, if there was one.
• 07A random identifier created when the app is installed. It is not your name, your email or your Apple ID. After a purchase it is linked to the anonymous RevenueCat identifier described above, so that a purchase can be joined to the steps that led to it, and RevenueCat stores the PostHog identifier for the same reason.

An event never contains your name, any answer you gave during setup (how often you vape, what it costs you, what sets it off, how you feel, your reasons or your pledge), your journal or anything else you log, any health data, your contacts, your location beyond the approximate country PostHog works out from the connection's IP address, or your advertising identifier. Session recording and automatic capture of what is on screen are switched off.

PostHog keeps events for its standard retention period. You → Delete everything also resets the analytics identifier, so anything sent afterwards starts from a new random identifier and cannot be linked to what came before.

Aeris contains no advertising SDK and no crash-reporting SDK, and the analytics and attribution described above are the only usage data it sends. Specifically, we do not collect:

• 01Your name, email address, phone number or any account credentials — there is no account to hold them
• 02Your quit date, cravings, relapses, journal entries or any other thing you record
• 03Your contacts, calendar, photos, location or Apple Health data
• 04Your advertising identifier (IDFA). Aeris shows no ads, and is not something we would ever let an ad network profile you against
• 05Any record of what is on a screen — the anonymous analytics above record which screens are reached, never what you entered on them

If you have iCloud Backup or an encrypted computer backup switched on, your device may include Aeris's local data in it, as it does for other apps. That backup is between you and Apple: it is covered by Apple's privacy policy, it is not readable by us, and it is not something Aeris initiates or can see. You control it in your phone's own settings — and if you would rather no copy existed at all, that is where to check.

That is the complete list, and none of them receives anything about your quit. Transfers outside the European Economic Area are covered by the Standard Contractual Clauses in our agreements with each provider.

• 01Performance of a contract (Art. 6(1)(b) GDPR) — running your subscription.
• 02Legitimate interests (Art. 6(1)(f) GDPR) — knowing which of our adverts brought an install, understanding through anonymous analytics where the app can be improved, and answering you if you write to support. You can object to any of these at the address below.
• 03Consent — notification permission, granted through the iOS prompt and revocable at any time in your phone's settings. Reminders are scheduled by the app on your device; we do not send push messages, because we have nothing to send them from.

Under the GDPR you have the right to access, correct, erase, restrict and port your personal data, and to object to processing based on legitimate interests. Here they are unusually easy to exercise:

• 01Access and portability — there is nothing for us to send you beyond a subscription record and anonymous usage events, because your quit history has never been in our hands.
• 02Erasure — deleting an entry removes it; You → Delete everything, or deleting the app, removes everything on your phone immediately. Deleting everything also resets the anonymous analytics identifier. Events already sent carry no name and stay with PostHog for its retention period; write to us if you want us to delete them.

To ask about a subscription record, or to complain about how we handle your data, write to support@mirandanetwork.es. You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.

Aeris is about stopping nicotine use, not starting it, and it is not directed at children. We do not knowingly process personal data from anyone under 16, and because the app has no account system there is nothing for a child to register and nothing collected if one uses it. A young person trying to quit is welcome to use it; a parent or a doctor is a better first port of call than an app.

If we change how the app handles your data, we will update this page and the date at the top. Material changes will also be announced in the app before they take effect.

Miranda Network SL, Tenerife, Spain. Data protection enquiries: support@mirandanetwork.es.