Ashtrack Privacy policy

01 What the app stores

On your phone, always

Each cigarette you log: the moment it was logged, your timezone, which of your devices logged it, and the pack price and size at that time. Your settings, and a history of changes to them. This data lives in the app's private storage on your device. No other app can read it, and it never leaves your phone unless you turn on cloud sync.

In the cloud, only if you turn on cloud sync

Cloud sync is off by default. If you turn it on — the app asks for your explicit agreement first, and tells you what will leave the phone — the same log is stored under a randomly generated ID, not your name, in Google Firebase, on servers located in the European Union. If you create an account, your email address is stored alongside it so you can sign in on another device. That is the complete list.

Never

The app contains no analytics, no advertising, no trackers, and no third-party SDKs beyond Google Firebase itself. Your consumption data is never used for anything except showing it back to you. It is never sold, shared, or used for profiling.

02 Why we may process it

The GDPR asks what our legal ground is for each kind of processing. There are two, and they are different:

• The log on your phone stays on your phone; the app processes it there to show you your own statistics. This never reaches us.
• Cloud sync and accounts run on your explicit consent (Article 9(2)(a) GDPR) — a smoking log is health-related data, and we treat it that way. You give consent by turning sync on or creating an account, and you withdraw it at any time by turning sync off, deleting your data, or deleting your account. Withdrawing is as easy as giving it: each is one control in Settings.

03 Who else processes it

Google Ireland Limited (Firebase: Authentication, Cloud Firestore, App Check) acts as our processor for the cloud copy, under the Google Cloud Data Processing Terms. Data is stored in the EU (eur3 multi-region). Google's own privacy documentation for Firebase is at firebase.google.com/support/privacy. No other party receives any data.

04 How long it is kept

Until you delete it. There is no retention schedule because there is no secondary use: your log exists for you, so it exists exactly as long as you want it to.

If you delete the app without deleting your synced data first, the synced copy remains under its random ID until you ask us to remove it — see deleting your account.

05 Your controls

All four are controls in the app. None of them is a support request, and none of them needs us.

• Export (Settings → Your data) hands you your complete log as a file, in a machine-readable format (Article 20, portability).
• Cloud sync off stops all cloud processing immediately (withdrawal of consent).
• Delete everything (Settings → Your data) erases the log from your phone and from the cloud, immediately and irreversibly (Article 17, erasure).
• Delete account (Settings → Account) erases your synced log, your synced settings, and the account itself — email address included — from Firebase. The log on your phone stays yours.

06 Deleting your account

In the app: Settings → Account → Delete account. It erases your synced log, your synced settings and the account itself — email address included — from Firebase. The log on your phone stays yours until you delete that too.

07 Children

Ashtrack is a tool for adult smokers and is not directed at anyone under 18.

08 Changes to this policy

If this policy changes, the effective date on this page changes with it, and the in-app "Your data" screen is updated in the same release. The app will never start collecting something new without asking you first.

09 Contact

Anything in this policy — a question, a correction, a deletion request — goes to one inbox, and both of us read it.

twosolodevelopers@gmail.com