Your progress is personal.

This Privacy Policy applies to the Downshift iOS app and related support services (together, “Downshift,” “we,” “us,” or “our”). Downshift is operated by Gabriel Perez. By using Downshift, you acknowledge the practices described here.

Downshift can be used without creating an account. Optional cloud backup and synchronization require an account but do not require a Premium subscription. Downshift is a behavior-change and tracking tool; it is not a medical service and does not provide medical advice.

Information you enter or generate

Depending on how you use Downshift, the app may handle your nicotine-use profile, product and strength selections, baseline use, goals, plans, usage logs and timestamps, check-ins, cravings, triggers, progress, savings estimates, notification preferences, and other app settings. Because these details can relate to health or habits, we treat them as sensitive.

Account information

Sign in with Apple is Downshift’s only account method. If you choose it, Apple provides an app-specific account identifier and, only if you choose to share them, your name and email address. Apple may provide a private relay email instead of your personal address.

Subscription information

Apple and RevenueCat process information needed to offer and manage Downshift Premium, such as an app user identifier, product purchased, transaction and renewal status, entitlement status, subscription dates, store, price and currency information, and limited device or network information used to operate and secure the service. We do not receive your full payment card details.

Screen Time and accountability app blocking

If you enable accountability app blocking, Downshift asks Apple for Family Controls permission and stores Apple-protected application-selection tokens on your device. If you exceed your daily pouch or vape allowance, the selected apps can be temporarily blocked as an optional consequence. Downshift does not receive the underlying app identities from those opaque tokens, and those tokens, permission status, and active session details are excluded from cloud backup.

Technical and product analytics information

Downshift may process basic technical information needed for app operation, security, subscription validation, authentication, and support. If you leave optional analytics enabled, Downshift uses PostHog to record coarse product events such as app launches, screen categories, onboarding steps, feature actions, subscription-flow actions, and sign-in or restoration outcomes. These events exclude email addresses, Apple or Supabase account identifiers, nicotine amounts, health answers, progress contents, trigger choices, Screen Time selections, and session or identity tokens. Session replay, surveys, autocapture, and automatic exception capture are disabled.

We use information only as reasonably necessary to:

• provide nicotine tracking, plans, progress, reminders, craving tools, and other app features;
• save your settings and maintain continuity across app sessions;
• create and authenticate an account when you request one;
• provide optional account cloud backup and synchronization;
• process, validate, restore, and manage subscriptions and entitlements;
• provide customer support, troubleshoot problems, and maintain security;
• comply with applicable law and enforce our legal rights.

We do not use your nicotine history, health-related answers, or Screen Time selections for advertising, and we do not build advertising profiles about you.

We do not sell or rent personal information. Information is disclosed only as needed to provide Downshift, at your direction, or as required by law. Our principal service providers are:

These providers process information under their own privacy terms and contractual obligations. We require service providers handling data for us to use appropriate safeguards and to process it only for the services they provide. We may also disclose information when we reasonably believe it is necessary to comply with law, protect rights or safety, investigate fraud or abuse, or complete a business transfer subject to appropriate protections.

• Use Downshift as a guest. Core tracking can remain on your device without an account.
• Cloud backup. Cloud synchronization is used only for a signed-in account and does not depend on subscription status. You can sign out to stop future synchronization from that device and choose whether to retain or remove its local copy.
• Screen Time. You can decline or revoke Family Controls permission in Apple’s device settings.
• Notifications and Live Activities. You can turn these features off in Downshift or iOS Settings.
• Local product logs. You can turn off “Share anonymous product analytics” in Downshift settings.
• Subscriptions. You can manage or cancel an App Store subscription in your Apple Account settings. Deleting Downshift or your Downshift account does not cancel an Apple subscription.

Local app data remains on your device until you reset it, delete it through the app, or remove it through the operating system. Uninstalling an app may not remove data maintained separately by Apple, RevenueCat, or a cloud account.

If you use cloud backup, account and synchronized data are retained while your account is active and as needed to provide the service. You can use the in-app Delete Account control to delete your Downshift account, cloud backup, and local app data. You may also request access, correction, or deletion by emailing downshiftsupport@gmail.com. We may retain limited records where reasonably necessary for fraud prevention, security, dispute resolution, or legal compliance.

Subscription and transaction records are also retained by Apple and RevenueCat under their respective policies and legal obligations. Contact us if you want help with a request involving information associated with your Downshift customer identifier.

We use reasonable administrative and technical measures designed to protect information, including authenticated access and database rules that restrict cloud records to the applicable signed-in user. No method of electronic storage or transmission is completely secure, so we cannot guarantee absolute security.

Our service providers may process information in the United States and other countries. Where required, they use legal mechanisms intended to protect information transferred across borders.

Downshift is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to Downshift, contact us so we can investigate and delete it as appropriate. Depending on where you live, a higher minimum age may apply to creating an account or consenting to data processing.

We may update this policy as Downshift changes or as legal requirements evolve. We will post the updated policy here and change the effective date above. If a change materially affects how we use personal information, we will provide additional notice when required.

For privacy questions, support, or data requests, contact the Downshift operator: