Privacy Policy
Last updated: August 25, 2026
Dehaze (“we,” “us,” “our”) makes an iOS app for people quitting cannabis. Quitting is private, so the app is built to work without knowing much about you. This policy explains exactly what we collect, what never leaves your phone, and how to delete the rest.
The short version
- You can start using Dehaze — counting clean days, logging urges, breathing exercises — without creating an account at all.
- Until you sign in, your data lives on your device and is not sent to us. Signing in is what turns on sync and backup.
- We do not sell your personal information.
- We never share what you log — your urges, triggers, streak, or notes — with advertisers.
What we collect
1. Account information (only if you sign in)
- Email address, or the private relay address Apple gives us via Sign in with Apple
- A display name, if you set one
We do not ask for your real name, address, phone number, or date of birth.
2. What you log in the app
- Your quit date and clean-day count, including past streaks and your personal best
- Urge logs: intensity, whether you got through it, and any trigger you tagged or typed
- Answers you gave during onboarding, including what you used to spend and how often
- Milestones and badges you have reached
This is the sensitive part, and we treat it that way. It is stored on your device first. If you are signed in, it syncs to our database so you can get it back on a new phone. It is never sold, never shared with advertisers, and never used to build an advertising profile of you.
3. Subscription information
Subscriptions are processed by Apple. We use RevenueCat to tell whether your subscription is active. We receive your subscription status and an anonymous customer identifier. We never receive or store your card number or any other payment details — those go to Apple and stay with Apple.
4. Usage analytics
We use Mixpanel to understand how the app is used in aggregate — which screens people reach, where onboarding loses people, whether a feature is working. This includes device type, OS version, app version, and a pseudonymous identifier. It does not include the content of your urge notes.
5. Advertising attribution (iOS)
If you install Dehaze after seeing an ad, we use the TikTok App Events SDK and Apple’s SKAdNetwork to learn that the ad worked. This reports app events in an aggregated, privacy-preserving form defined by Apple. It is subject to Apple’s App Tracking Transparency prompt — if you decline, tracking does not happen.
6. What stays entirely on your device
- Screen Time blocking. App blocking uses Apple’s Screen Time API, which is designed so that the list of apps you block is never visible to us. We cannot see which apps you chose, and we do not receive that data.
- Everything, if you never sign in. No account means no sync, which means your logs stay on the phone.
Why we are allowed to process this
Where the GDPR applies, we rely on: performance of a contract (running the app and your subscription), your consent (analytics and ad attribution, which you can decline), and legitimate interests (security, abuse prevention, and fixing bugs). Because information about substance use is sensitive under the GDPR, we process it on the basis of your explicit consent, given when you choose to log it.
Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use a small number of processors who handle data on our behalf:
- Supabase — database and authentication for synced accounts
- RevenueCat — subscription status
- Mixpanel — product analytics
- Apple — payments, sign-in, SKAdNetwork attribution
- TikTok — ad attribution, only if you consented via the ATT prompt
We may also disclose information if legally required to do so, or to protect the safety and rights of our users. If Dehaze is ever acquired, data would transfer with it, and we would say so here first.
How long we keep it
Synced data is kept while your account exists. Delete your account and we remove it from our production systems, with backups aging out within 30 days. Aggregate analytics that cannot identify you may be retained beyond that.
Your choices and rights
- Use the app anonymously. Do not sign in and nothing syncs.
- Delete everything. In the app: Settings → Account → Delete account. Or email us and we will do it.
- Access or export your data. Email us and we will send you a copy.
- Decline tracking. Say no to the App Tracking Transparency prompt, or turn it off in iOS Settings → Privacy & Security → Tracking.
Depending on where you live you may also have rights to correct data, object to processing, or complain to a data protection authority. Contact hello@infinique.org and we will respond within 30 days.
Children
Dehaze is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
International transfers
Our processors operate in the United States and elsewhere. Where data is transferred out of the UK or EEA, we rely on Standard Contractual Clauses or an equivalent safeguard.
Security
Data is encrypted in transit and at rest, and access to production systems is limited to people who need it. No system is perfectly secure, and we will not pretend otherwise — but the strongest protection here is structural: if you do not sign in, we do not hold your logs at all.
Changes
We will update this page when our practices change and move the date at the top. Material changes will be flagged in the app.