Overview

Vaply ("we", "us", or "our") helps you track puffs, follow a taper plan, and monitor progress. This policy explains what we collect, how we use it, and your choices when you use the Vaply mobile app and related websites (the "Service"). The app does not require an account. Your plan and puff logs stay on your device. We do not sell your personal data.

1. Information we collect

2. How we use your data

• Show your taper plan and progress on this device
• Process subscriptions and restore purchases
• Analyze product usage to improve reliability and features
• Measure and optimize advertising campaigns and attribution
• Respond to support requests and prevent abuse
• Comply with legal obligations and App Store requirements

3. Analytics

We use PostHog for product analytics and related measurement. PostHog may receive event data, device and session information, IP address, and an anonymous app user id that links those events together. We do not send your name, email, weekly spend, or puff logs to PostHog.

Analytics is used to operate and improve Vaply. It is not sold. We may expand the events and properties we send to PostHog over time as we add more product instrumentation (similar to our other apps); those uses remain covered by this section. We do not use your puff logs to sell advertising profiles.

4. Advertising, attribution & tracking

We use the Meta (Facebook) SDK and related advertising/attribution tools (including Apple AdServices / SKAdNetwork where applicable, and RevenueCat device identifiers for purchase attribution) to measure installs, app events, and campaign effectiveness.

On iOS, if we access data that Apple defines as "tracking," we request permission via the App Tracking Transparency prompt. You can change this later in iOS Settings → Privacy & Security → Tracking.

If you deny tracking permission, we may still process limited non-tracking measurement allowed by Apple and Meta, and we still use first-party analytics as described above.

5. Third-party services

We share limited data with trusted providers that help run Vaply:

• RevenueCat — subscription status with the App Store
• PostHog — product analytics as described above
• Meta Platforms — advertising measurement and attribution
• Apple — In-App Purchases and platform services
• Hosting providers (for example Vercel) — operate our websites

6. Data security

• Your plan and puff logs stay in the app's local storage on your device
• Data sent to analytics and subscription providers uses HTTPS

7. Retention and deletion

Your plan, name, and puff logs live on the device. Uninstalling Vaply deletes that local data. We do not keep a copy on our servers. Analytics events already sent may remain, linked only to that anonymous id.

• There is no account to delete inside the app
• Limited technical logs may remain for security, fraud prevention, or legal compliance

Purchase records retained by Apple or RevenueCat may persist according to their rules and are not fully controlled by us.

8. Your rights & choices

• Access — request a copy of your personal data
• Delete — uninstall the app to remove the plan and puff logs stored on that device, or email us about analytics data
• Correct — your name stays on the device; email us if an analytics record needs a correction
• Tracking — manage ATT permission in iOS Settings
• Opt out / GDPR / CCPA — contact us about non-essential processing or additional rights where applicable

9. Children's privacy

Vaply is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have, we will delete it. The App Store age rating for Vaply is 17+ because of tobacco/vaping-related themes.

10. International transfers

We and our providers may process data in the United States and other countries. Where required, we rely on appropriate transfer mechanisms.

11. Changes to this policy

We may update this policy from time to time. Significant changes will be reflected by the “Last updated” date on this page. Continued use of Vaply after changes means you accept the updated policy.

12. Contact

Privacy questions or data requests:

replydock@outlook.com

We aim to respond within 7 business days.