Nicofade Privacy Notice

Who is responsible

The party responsible for Nicofade is Firas Al-Baroody, Myrstigen 20, Lgh 1001, 151 60 Södertälje, Sweden, operating as an individual activity in Sweden. For privacy or support questions, contact info@nicofade.com.

Information that stays on your device

Your smoking logs, timestamps, gaps, progress, and behavioral history are stored locally on your device. Nicofade does not send this smoking history to its servers. In Production version 1.0.2 (19), Android cloud backup and device-to-device transfer are disabled for Nicofade app data.

Removing the app or losing the device may therefore remove local history. Nicofade does not operate a cloud backup from which that history can be restored.

Nicofade also provides a manual export initiated by the user. The exported file may contain smoking-history data. You choose where to save or share it, and the destination you choose may process it under its own privacy terms. Nicofade does not automatically upload the exported file.

Local 14-day trial

The 14-day trial begins on first actual use. It is granted locally by Nicofade on the device, requires no payment card, and is not a Google Play introductory or free-trial offer. Starting the local trial does not send smoking history to Nicofade, Google Play, or the subscription verifier.

Subscription verification

If you buy or restore a Google Play subscription, the app sends the following information over encrypted HTTPS to Nicofade's Production subscription verifier hosted on Supabase:

• the Google Play purchase token;
• the subscription product identifier;
• an app installation identifier; and
• the Android package identifier.

The verifier contacts Google Play to validate and acknowledge the subscription. It stores hashed installation and purchase identifiers together with subscription status and expiry information. This processing is used to provide paid access, restore access, prevent replay or abuse, and keep entitlement decisions consistent. Subscription-verification records are retained for 90 days after subscription expiry and then deleted by the configured retention process, except where longer retention is required by law or necessary to resolve fraud, abuse, or a dispute.

Google Play separately processes payment and account information under Google's own terms and privacy notice. Nicofade does not receive or store your payment-card number.

Access codes

If you use an access code, the app sends the code, an app installation identifier, and the local trial end time over encrypted HTTPS to Nicofade's Production backend. The backend verifies the code and stores hashed code and installation identifiers together with the access period and redemption state. Unused access-code records are deleted 30 days after activation expiry; redeemed records are deleted 90 days after access ends; revoked records are deleted 90 days after the later of revocation or access end, subject to limited legal, fraud, abuse, or dispute exceptions.

Website and support

When you visit nicofade.com, Netlify provides server-side web analytics using information generated by ordinary web requests and Netlify's CDN server logs. The reports cover pageviews, unique visitors, frequently visited pages, referring URLs, and approximate locations. Netlify counts unique visitors using IP addresses.

These analytics are used only to understand aggregate website traffic and referral sources and to improve the website. Nicofade does not use them to identify individual visitors, build personal profiles, or link website activity to smoking history or activity inside the Nicofade app.

The website uses no client-side analytics code or analytics cookies and does not use advertising identifiers, fingerprinting, or cross-site tracking for these analytics. Nicofade does not receive identifiable visitor records through the Web Analytics dashboard. Dashboard reports are available for up to the prior 30 days. This dashboard period does not necessarily describe how long Netlify retains underlying hosting or CDN logs.

If you contact info@nicofade.com, the information in your message and your email address are used to answer and manage your request. Please do not include smoking history or other sensitive information unless it is necessary for us to help you.

Support messages are retained for 12 months after the last communication relating to the request, then deleted unless longer retention is required by law or necessary for an existing dispute.

What Nicofade does not use in the verified release

Production version 1.0.2 (19) of the Nicofade Android app does not include in-app analytics, advertising, crash reporting, or automatic Nicofade cloud backup, and does not use the Android Advertising ID. The website analytics described above are separate from the app and do not receive smoking history or in-app activity. This does not prevent the user-initiated manual export described above.

Service providers and international processing

Supabase provides backend hosting and subscription-verification infrastructure and acts as a processor/service provider. Production Supabase is hosted in Ireland/EEA. Google provides Google Play distribution, billing, and subscription validation. Netlify provides website hosting and server-side web analytics and processes ordinary web-request information on Nicofade's behalf to deliver, secure, and measure aggregate use of the website. Where a provider or subprocessor processes information outside the EEA, appropriate safeguards apply, including Standard Contractual Clauses where applicable. These providers process information under their applicable agreements and safeguards.

The controller operates in Sweden and is identified in the Contact section below.

Legal bases for EEA/UK users

Where European or UK data-protection law applies, subscription-verification information is processed because it is necessary to provide the subscription service requested by the user and for legitimate interests in preventing abuse and maintaining reliable entitlement records. Aggregate website analytics are processed for legitimate interests in understanding website use, measuring referral sources, and improving the website. These interests are balanced by using server-side analytics without client-side analytics code, analytics cookies, advertising identifiers, fingerprinting, or person-level tracking. Support communications are processed to answer the user's request and, where applicable, for legitimate interests in providing support and keeping necessary business records.

Retention and deletion

• Local smoking history remains on the device until the user deletes it or removes the app; Nicofade cannot remotely retrieve or delete data it does not receive.
• Subscription-verification records are retained for 90 days after subscription expiry, subject to the limited exceptions described above.
• Access-code records follow the 30/90-day periods described under “Access codes”.
• Website Analytics dashboard reports are available for up to the prior 30 days. Retention of underlying hosting or CDN logs is governed by Netlify's applicable terms and safeguards.
• Support-message retention: 12 months after the last communication relating to the request, unless longer retention is required by law or necessary for an existing dispute.

You may contact info@nicofade.com with privacy questions or requests. Nicofade does not have a dedicated in-app deletion-request mechanism; automatic retention and deletion schedules apply as described above. Because Nicofade has no separate account and stores pseudonymous or hashed verification identifiers, we may be unable to link a request to a record or fulfill a deletion request in every case. We may retain limited information where required by law or necessary to prevent abuse or resolve disputes.

Your rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, objection, or portability of personal information, and to complain to your local data-protection authority. Contact info@nicofade.com to make a request.

Children

Nicofade is intended only for adults aged 18 and over. It is not directed to children.

Health disclaimer

Nicofade is a self-tracking and behavior-change support tool. It does not provide medical advice, diagnosis, or treatment and does not guarantee smoking reduction or cessation. Seek advice from a qualified healthcare professional when appropriate.

Changes to this notice

This notice may be updated when Nicofade's data practices or legal obligations change. The effective date above will be updated when a revised notice is published.

Contact

Firas Al-Baroody
Myrstigen 20, Lgh 1001, 151 60 Södertälje, Sweden
info@nicofade.com