Privacy Policy
Last updated: September 8, 2026
Dehaze (“we,” “us,” “our”) makes iOS and Android apps for people quitting cannabis. Quitting is private, so the app is built to work without knowing much about you. This policy explains exactly what we collect, what never leaves your phone, and how to delete the rest.
The short version
- Dehaze uses an account to back up your quit profile and progress. A subscription is required to access the full app.
- Your quit data is stored locally first. Signing in enables account sync and backup. Usage analytics and subscription services may operate before sign-in.
- We do not sell your personal information.
- We never share what you log — your urges, triggers, streak, or notes — with advertisers.
What we collect
1. Account information (only if you sign in)
- Email address from Google sign-in, or the private relay address Apple gives us via Sign in with Apple
- A display name, if you set one
We do not ask for your real name, address, phone number, or date of birth.
2. What you log in the app
- Your quit date and clean-day count, including past streaks and your personal best
- Urge logs: intensity, whether you got through it, and any trigger you tagged or typed
- Answers you gave during onboarding, including what you used to spend and how often
- Milestones and badges you have reached
This is the sensitive part, and we treat it that way. It is stored on your device first. If you are signed in, it syncs to our database so you can get it back on a new phone. It is never sold, never shared with advertisers, and never used to build an advertising profile of you.
3. Subscription information
Subscriptions are processed by Apple on iOS and Google Play on Android. We use RevenueCat to tell whether your subscription is active. We receive purchase history, subscription status, and a customer identifier that is linked to your account when you sign in. We never receive or store your card number or any other payment details — those go to the store where you purchased your subscription.
4. Usage analytics
We use Mixpanel to understand which screens people reach and how features are used. This includes device type, OS version, app version, usage events, onboarding answers, and an identifier. If you sign in, analytics may be linked to your account identifier and email address. Onboarding answers can include information about your cannabis use. We use this information to understand and improve the app. Free-text urge notes are not included in usage analytics.
5. Advertising attribution (iOS)
If you install Dehaze after seeing an ad, we use the TikTok App Events SDK and Apple’s SKAdNetwork to learn that the ad worked. This reports app events in an aggregated, privacy-preserving form defined by Apple. It is subject to Apple’s App Tracking Transparency prompt — if you decline, tracking does not happen.
6. What stays entirely on your device
- Screen Time blocking. App blocking uses Apple’s Screen Time API, which is designed so that the list of apps you block is never visible to us. We cannot see which apps you chose, and we do not receive that data.
- Unsynced quit logs. Before sign-in, quit logs stay on your phone. This does not exclude the analytics and subscription data described above.
Why we are allowed to process this
Where the GDPR applies, we rely on: performance of a contract (running the app and your subscription), your consent where required, including for ad tracking on iOS, and legitimate interests (security, abuse prevention, and fixing bugs). Because information about substance use is sensitive under the GDPR, we process it on the basis of your explicit consent, given when you choose to log it.
Who we share it with
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We use a small number of processors who handle data on our behalf:
- Supabase — database and authentication for synced accounts
- RevenueCat — subscription status
- Mixpanel — product analytics
- Apple — iOS payments, sign-in, SKAdNetwork attribution
- Google — Android sign-in and Google Play payments
- TikTok — ad attribution, only if you consented via the ATT prompt
We may also disclose information if legally required to do so, or to protect the safety and rights of our users. If Dehaze is ever acquired, data would transfer with it, and we would say so here first.
How long we keep it
Synced data is kept while your account exists. Delete your account and we remove it from our production systems, with backups aging out within 30 days. Aggregate analytics that cannot identify you may be retained beyond that.
Your choices and rights
- Account and data deletion. See our Dehaze account-deletion page for in-app and email options.
- Delete everything. In the app: Settings → Account → Delete account. Or email us and we will do it.
- Access or export your data. Email us and we will send you a copy.
- Decline tracking. Say no to the App Tracking Transparency prompt, or turn it off in iOS Settings → Privacy & Security → Tracking.
Depending on where you live you may also have rights to correct data, object to processing, or complain to a data protection authority. Contact hello@infinique.org and we will respond within 30 days.
Children
Dehaze is not directed at children under 13 and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
International transfers
Our processors operate in the United States and elsewhere. Where data is transferred out of the UK or EEA, we rely on Standard Contractual Clauses or an equivalent safeguard.
Security
Data is encrypted in transit and at rest, and access to production systems is limited to people who need it. No system is perfectly secure, and we will not pretend otherwise — but the strongest protection here is structural: if you do not sign in, we do not hold your logs at all.
Changes
We will update this page when our practices change and move the date at the top. Material changes will be flagged in the app.