Privacy policy

Overview

This Privacy Policy explains what data CannaClear may process for the iOS app and website, why it is processed, and your rights. CannaClear is designed with data minimization in mind.

1. Data collection

Depending on how you use CannaClear, we may process:

• App profile and progress data (primarily local): name/nickname, quit date, goals, check-ins, cravings, triggers, journal entries, and reminder preferences.
• Purchase/subscription data: entitlement and transaction metadata required to activate and restore premium access.
• Push notification data (if enabled): push token, OneSignal player/subscription identifier, and notification preferences.
• Website newsletter data (if submitted): email address, consent timestamp, confirmation status (double opt-in), and request metadata needed for security/abuse prevention.
• Website usage/performance data: basic analytics and performance telemetry (for example page views and speed metrics).

If you do not use optional features (for example newsletter signup or push notifications), related data is not collected for that feature.

2. Data usage

We process data for the following purposes:

• Provide core app functionality (tracking, journaling, reminders).
• Enable subscription validation and restore purchases.
• Deliver push notifications when you opt in.
• Operate and improve website reliability and performance.
• Manage early-access/newsletter communication (including double opt-in confirmation emails).
• Prevent spam, fraud, and abuse on web forms.

3. Third-party services

CannaClear may use the following providers:

• RevenueCat: subscription management, entitlements, and purchase restore logic. May process purchase and technical device/app metadata.
• OneSignal: push notification delivery. May process push token, notification identifiers, and delivery/engagement events.
• Supabase: backend database/storage for website newsletter records and related consent/confirmation data.
• Resend: transactional email provider used for double opt-in and newsletter confirmation flows.
• Cloudflare Turnstile: bot/spam protection for website forms; processes security signals required for challenge validation.
• Vercel (hosting, Web Analytics, Speed Insights): website hosting plus aggregated usage/performance telemetry.

4. Data sharing

We do not sell personal data. Data may be shared only with the service providers above when necessary to operate the app/website, process subscriptions, send requested emails, secure forms, or maintain infrastructure.

We may also disclose data if required by applicable law or to protect rights, safety, and platform integrity.

5. Data storage and security

• Most sensitive progress content is intended to remain on your device unless you submit data through online features.
• Web data is stored in managed infrastructure (for example Supabase/Vercel) with access controls and transport encryption.
• We apply reasonable technical and organizational safeguards, but no system can guarantee absolute security.

6. Your rights (GDPR and similar laws)

Where applicable, you may request:

• Access to your personal data.
• Correction of inaccurate data.
• Deletion of your personal data.
• Restriction or objection to certain processing.
• Data portability (where applicable).

You may also withdraw newsletter consent at any time via unsubscribe links or by contacting us.

7. Contact information

For privacy requests (access, correction, deletion) or general data questions, contact: cannaclearapp@gmail.com.

8. Tracking and ATT (iOS)

CannaClear does not currently use cross-app tracking for advertising. If this changes in the future, we will update this policy and request consent via Apple AppTrackingTransparency (ATT) where required.