SmokeHabits ("we", "our", "the app") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information, as well as your rights under EU data protection laws (GDPR).

1. Information We Collect

We collect the following types of data when you use the app:

Account Information: Email, hashed password, and consent timestamp.
Health Data: Cigarettes logged, cravings, contexts, and optional notes.
Usage Data: App interactions, analytics, and anonymized performance data.

All data collected is necessary to provide the functionality of SmokeHabits and to help you track and improve your smoking habits.

2. How We Use Your Data

Your data is used for:

Logging cigarettes and contexts.
Providing analytics and insights about your smoking behavior.
Improving the app's performance and features.
Ensuring security and compliance with legal obligations.

We do not sell or share your personal data for marketing purposes.

3. Legal Basis for Processing

We process your data on the following bases:

Consent: You provide explicit consent when registering an account.
Legitimate Interest: For internal analytics to improve app functionality, without impacting your rights or freedoms.

You can withdraw your consent at any time.

4. Data Retention and Deletion

Your data is retained until you delete your account or withdraw consent.
Deleting your account will remove all associated personal and health data.
You can request data export in JSON format before deletion.
Accounts may also be placed in a "maintenance mode" if inactive, anonymizing personal identifiers.

5. Your Rights

Under GDPR, you have the right to:

Access your personal data.
Correct or update your information.
Delete your account and associated data.
Withdraw consent at any time.
Export your data in a machine-readable format (JSON).

To exercise any of these rights, contact us at yassin@yassinsassi.com.

6. Security Measures

We implement reasonable technical and organizational measures to protect your data:

Encrypted connections (HTTPS) for all data transmission.
Hashed passwords.
Token-based authentication (access and refresh tokens).
Regular reviews of security practices.

7. Data Sharing

We may share your data with:

Service Providers: Hosting, storage, and analytics providers who process data on our behalf.
Legal Obligations: If required by law or legal process.

We do not sell or rent your personal information.

8. Cookies and Tracking

If the app uses cookies or tracking scripts for analytics, the purpose and users' ability to opt-out will be disclosed in this section.

9. Policy Updates

We may update this Privacy Policy from time to time. The latest version will be posted on our website.

10. Contact Us

For questions about this Privacy Policy or to exercise your data rights:

Email: yassin@yassinsassi.com