Privacy Policy for TaperSense
Effective Date: August 3, 2026
Last Updated: October 18, 2026
TaperSense ("we," "our," or "us") respects your privacy and is committed to protecting the personal data of our users. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application.
1. Information We Collect
To provide app functionality, authentication, and personalized progress analysis, we collect the following types of information:
- Account Information: When you create an account or sign in, we collect your name, email address, account identifier, and authentication credentials. If you choose Google Sign-In, we may also receive the profile picture associated with your Google account.
- Smoking & Habit Log Data: Information you log regarding your smoking habits, reduction milestones, urges, daily tracking, and progress metrics.
- Payment & Subscription Data: Transaction details related to your Pro membership status. Purchases are processed through third-party services; we do not store or process your credit card or financial details on our servers.
- Technical & Usage Data: Standard technical identifiers, such as device type, OS version, and app diagnostic logs, necessary to ensure app stability.
- Basic app counts: Unless you turn them off in Settings, the app sends TaperSense servers a random installation ID, the time of each event, and these event names: install, app open, setup started and finished, setup steps (daily count entered, Continue tapped, and which setup field was not filled in correctly, not what you typed), morning reminder opened, plan created (with its category: quit, reduce, or track), savings preview shown during setup (not the amounts), first wait completed, paywall shown (with where in the app it was opened), progress card shared (not the card itself), your reminder choice, your measurement choice, AI coach use (coach opened, welcome shown, message sent, reply received, a button in a reply tapped, free messages used up, and a reply reported; never what was written), and trial or subscription started (with the product and the paywall it came from). Each event also carries the app version that sent it. Campaign labels supplied by Google Play are included. When the counts arrive, our server also notes the country they were sent from, worked out from your IP address; only the country is kept, never the IP address itself (this uses GeoLite2 data created by MaxMind, available from maxmind.com). Basic counts never include cigarettes, cravings, your notes, email, or account ID.
- Optional detailed measurement: If you choose “Allow detailed,” the app also sends whether a cigarette or craving was logged (the event name only, not counts or details).
- Ad measurement (from version 1.0.23): With basic app counts on, three of those events (setup finished, first wait completed, and free trial started) are also sent to Google Analytics for Firebase, together with Firebase's automatic install and session events, basic device information (such as model, OS version, and approximate location derived from a masked IP address), a Firebase app instance ID, and your device's Advertising ID. This lets Google Ads tell which ads bring people who actually use the app. Ad personalization signals are off, and Firebase never receives cigarettes, cravings, notes, your email, or account ID. Turning off basic app counts in Settings turns this off too and resets the Firebase app instance ID. You can also reset or delete your Advertising ID in your device settings.
- AI coach messages (from version 1.0.24): Only after you agree in the app, each time you write to the coach (or tap a suggested message), and once for its welcome message, the app sends TaperSense servers your message, up to five earlier messages of the conversation, and a short summary of your plan: your plan type, daily count and target, cigarettes so far today, time until your next planned one, the craving check-in if you came from it (how strong, how you felt, and where you were), and the same habit summary the coach card uses (counts, common triggers and feelings, helpful coping actions, and time windows; notes only if you turn note sharing on). Our server sends this to Google Gemini to write the reply. The conversation itself is stored only on your device. Our server does not store your messages or the replies; it keeps a count of replies for a random coach ID created on your device (not linked to your account or the installation ID) to apply the free message limit, and daily totals not linked to anyone. Your IP address is used for a short time in memory to limit abuse and is not stored. If you bought Pro without an account, the app also sends RevenueCat's anonymous ID for your purchase so the server can confirm Pro with RevenueCat. Messages that mention an emergency or self-harm get a fixed safety reply and are not sent to Gemini.
- Reported coach replies: If you report a coach reply, the app sends us that one reply and the reason you typed (if any), not your other messages. We keep reports for up to 90 days to review and improve the coach.
- Invite code: “Invite a Quit Buddy” adds a random six-character code, created on your device, to the link you share. It is not linked to your account, email, or device. A friend who installs from your link is counted under that code unless they turn off basic app counts. When you open the invite screen, the app sends the code to TaperSense servers to show how many friends installed and created a plan.
2. How We Use Your Information
We process your data for the following purposes:
- To authenticate your identity and maintain your account.
- To store and sync your smoking reduction logs securely across your sessions.
- To provide the AI Coach (a few free messages, then with Pro) by using your messages and a summary of your plan and habit logs to write personalized replies.
- To manage active subscriptions and entitle Pro features.
- To maintain server security and troubleshoot technical issues.
- With your choice, to compare acquisition sources with onboarding, active use, returns, trials, and confirmed purchases.
3. Data Storage, Security, and Retention
Storage Location: Account credentials and habit log data are securely stored and processed on our private server databases. We implement standard encryption and access control protocols to prevent unauthorized access.
Account Deletion: You have the right to request deletion of your account and all associated habit logs stored on our servers at any time by contacting support or using the in-app account management options.
Usage measurement choice and retention: Basic app counts are on by default; detailed measurement is off until you allow it. You can turn either off in Settings at any time. Turning off detailed measurement stops cigarette and craving events; turning off basic app counts stops all measurement uploads, including ad measurement through Google Analytics for Firebase, and clears events waiting to upload. If you chose “Keep on device” in an app version before 1.0.10, basic app counts stay off. Previously received measurement events are kept for up to 180 days. They are indexed by a random installation ID rather than your account. To request earlier deletion, copy the “Measurement reference” from Settings and send it to our support address. Turning off measurement alone does not remove events already received by the server.
4. Third-Party Services & Data Sharing
We do not sell, trade, or rent your personal data to third parties. We only share specific data elements with trusted third-party service providers necessary to operate the application:
- Google Gemini API: When you use the AI Coach, the messages you write to it and the plan and habit summary described above are processed via the paid Google Gemini API to write the reply. Under Google's terms for the paid API, Google does not use them to improve its products. Personal identifiers, such as your email or account ID, are not transmitted to the AI provider. The summary includes counts of how you said you felt when a craving came (for example, bored or stressed). Those feelings are otherwise kept only on your device and are not part of your cloud backup.
- RevenueCat: Used to manage in-app subscriptions, verify entitlement status, and communicate with Google Play billing channels. When a subscription renews or is cancelled, RevenueCat tells our server, and we keep a count of these by product and store country, not linked to you.
- Google Analytics for Firebase and Google Ads: Unless you turn off basic app counts, receive the three ad measurement events described above with the Advertising ID, to measure which ads lead to setups, first waits, and trials. Ad personalization signals are off.
- Google Sign-In: Used strictly for authentication if chosen as your login method.
- Resend: Delivers the one-time code email when you ask to reset your password. It receives your email address and the code, nothing else.
5. Google Play Data Safety Alignment
For transparency, the data collected and shared maps to the following Google Play Data Safety declarations:
- Personal Info — Name, Email, User ID, and Optional Profile Picture: Collected for account management, authentication, and app functionality.
- Health & Fitness / App Activity — Habit Logs: Collected for app functionality and AI analysis.
- App Activity and device identifier: Basic app count event names and a random installation ID are collected for analytics unless turned off in Settings; cigarette and craving event names only with detailed measurement; campaign labels are collected when supplied by Google Play. The country the counts were sent from (approximate location, from the IP address, which is not stored) is collected for analytics with them. From 1.0.23, Google Analytics for Firebase collects app interactions (installs, sessions, and the three ad measurement events), approximate location derived from a masked IP address, a Firebase app instance ID, and the Advertising ID, for analytics and advertising measurement, unless basic app counts are turned off. Review the final Google Play Data Safety form against this implementation.
- Messages — Other in-app messages: What you write to the AI coach is collected (processed by our server and Google Gemini to write the reply, and not stored, except replies you report) for app functionality. Using the coach is optional.
- Financial Info — Purchase History: Processed via RevenueCat and Google Play for subscription management.
6. Children's Privacy
TaperSense is not directed to individuals under the age of 18, or under the legal smoking age in your jurisdiction. We do not knowingly collect personal information from minors.
7. Changes to This Privacy Policy
We reserve the right to modify this Privacy Policy at any time. Any updates will be posted at https://tapersense.com with a revised "Last Updated" date.
8. Contact Us
If you have questions regarding this Privacy Policy or wish to exercise your data rights, please contact us:
- Website: tapersense.com
- Email: support@xpworx.com