FreshAirPrivacy policy
Last updated: 15 November 2026
FreshAir helps adults quit vaping. Some of what you record in the app is about your health, so we keep what we collect to a minimum, never sell it, and never use it for advertising. This policy explains what we collect, why, who helps us run the app, and your rights.
Who we are
FreshAir is run by Dafydd John, a sole trader based in the United Kingdom, who is the “controller” of your personal data under UK data protection law (the UK GDPR and the Data Protection Act 2018). Contact: freshairapp.support@gmail.com.
What we collect
| Information | Why |
|---|---|
| Account: your email address, or the details Apple or Google share when you sign in with them | To sign you in, back up your progress and let you use it on a new phone |
| About your vaping: weekly spend, nicotine strength, years vaping, your reasons for quitting and what motivates you | To set up your programme and show money saved and your reasons when you need them |
| Your programme: start date, quit date, cold turkey or gradual, vape window times and any changes | To run your plan, reminders and progress |
| What you record: daily entries (vape-free, cravings, lapses), mood, craving strength and triggers, journal notes, milestones and game scores | To show your progress, calendar, summaries and patterns |
| Support chat: the messages you send and the replies, plus a few facts to make replies relevant (your programme day, days vape-free, approach and reasons for quitting) | To answer your questions |
| Purchase: a record that your account bought FreshAir (product, transaction number, date and status). We never see your card details | To unlock the app, restore it on a new phone, and keep financial records |
We don’t use advertising, tracking or analytics tools, and we don’t collect your location, contacts or photos. Vape window reminders are set up on your phone and don’t send us anything.
Health information and your consent
Your cravings, lapses, mood, journal and support chat can reveal information about your health, which the law treats as “special category” data. We only process it with your explicit consent, which you give when you set up FreshAir. You can withdraw consent at any time by deleting your data in the app (Profile, then Your data). The rest of your information is used because it’s needed to provide the app you bought (our contract with you) and, for purchase records, because the law requires us to keep financial records.
Where your information is kept
Everything you record is saved on your phone first. If you sign in, it’s also backed up to our database so you don’t lose it. Our database is hosted by Supabase in London, UK.
Who helps us run FreshAir
These companies process data for us, only to provide their service, under contracts that require them to protect it:
- Supabase: database, sign-in and backup (UK).
- Anthropic: the AI that writes support chat replies (USA). It receives your chat messages and the few facts listed above, never your name or email. Anthropic doesn’t use them to train its models under its terms for business customers.
- Apple: the App Store, payments and Sign in with Apple. Google: Sign in with Google.
- RevenueCat: checks App Store purchases so we can unlock the app (USA). It receives an anonymous account number and your purchase, not what you record.
- Resend: sends sign-in codes by email (USA).
Where data goes outside the UK, it’s protected by approved safeguards such as the UK International Data Transfer Agreement or standard contractual clauses.
How long we keep it
We keep your information while you have an account. You can delete your account and everything in it at any time in the app (Profile, then Your data). When you do, we delete it from our database straight away. The only exception is the purchase record, which we must keep for up to 6 years for tax and accounting; it’s no longer linked to you. Information saved only on your phone is removed when you delete your data or the app.
Your rights
You can ask to see, correct, export or delete your information, object to or restrict how we use it, and withdraw your consent. You can export or delete your data yourself in the app (Profile, then Your data), or email us. We’ll reply within one month.
If you’re unhappy with how we’ve handled your data, please contact us first. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint or 0303 123 1113.
Age
FreshAir is for adults aged 18 and over. We don’t knowingly collect information from anyone under 18.
Security
Your data is encrypted in transit, each account can only ever read its own data, and our service keys are never stored in the app. No system is perfectly secure, so please keep your email account safe too.
Changes
If we change this policy, we’ll update the date at the top and tell you in the app if the change is important.