Privacy Policy

Who we are

Camp Zero is made by Jaka Smid, Martina Krpana ulica 24, 1000 Ljubljana, Slovenia ("we", "us"). We decide how your data is used, which makes us the controller under the EU General Data Protection Regulation (GDPR). Write to jaka.smid@gmail.com with any question about your data.

This policy covers the Camp Zero app for iPhone and the website campzero.app.

What the app keeps on your phone

Your quit date, slips, the details of your habit you enter (pouches a day, strength, price, brand, how many years), your reasons and your summit reason, the milestones you reach, when you use SOS and when you open the app, your first name and photo if you add them, and the friend you choose for SOS (only their name and number). This stays on your iPhone, in the app's own storage and in your phone's backups. The widgets read it on the same phone, and reminders are scheduled on the phone too. We receive none of it unless you sign in.

If you sign in

An account is optional. When you sign in with your email, we store:

• Your email address, to send your sign-in code and to recognise you.
• A copy of your climb (the data listed above), so it can be restored on another phone.
• Sign-in records: a keyed hash of your IP address and a random install id, used only to stop abuse such as guessing codes. They are deleted after one to two days.
• A session that keeps you signed in until you sign out or it expires.

We use your email and account to provide the service you asked for (GDPR Art. 6(1)(b)). Information about your nicotine use can count as health data, so we store your climb on our server only because you chose to save it there (your explicit consent, Art. 9(2)(a)). You can withdraw that consent at any time by deleting your account.

Your support crew

Once you are signed in, you can invite up to three people to follow your climb, by email or with a link you share yourself. For this we store:

• Your first name and, if you add one, your photo, shown on your crew's page and in their invite.
• The people you invite: the name you give each of them and, if you invite them by email, their email address. Camp Zero sends that address one email, the invite with your note, and never another. A link at the invite's foot stops all invites to that address; we then keep only a hash of the address, so the stop lasts.
• Their messages to you (60 characters at most) and when you saw them. A message you report is hidden from both of you and emailed to us so we can check it.
• Your phone's push token and time zone, so a new message reaches you as a notification, silently at night. You can turn these notifications off in the app under You.

Your crew's page, on crew.campzero.app, shows your first name and photo, the day of your climb, the pouches you've skipped, the money you've kept and the last camp you reached. It never shows a slip, your pouch-free time, your reasons or your habit, and it sets no cookies and has no analytics. Each person's link is secret (we store only a hash of it) and stops working when you remove them, when they leave, or when you delete your account.

We use this data to provide the support crew you asked for (GDPR Art. 6(1)(b)). For the people you invite, we rely on a legitimate interest in delivering your invite and their messages (Art. 6(1)(f)). Anyone in a crew can leave it from their page at any time, and anyone can write to us to have their data deleted.

Anonymous usage data from the app

To see where people get stuck and what helps them stay pouch-free, the app sends anonymous usage data to PostHog, on its EU cloud in Frankfurt:

• What you do in the app: which onboarding screens you see, the paywall, which plan you buy or whether you cancel (never your payment details), START, SOS and which of its tools you use, slips you log, milestones you reach, opening the map, your milestones and You.
• Context: how many days into your climb you are, the app version, which build (App Store or TestFlight), your device model, iOS version, your phone's region and language.
• A random id the app creates on your phone, so the same phone's events belong together. It is not your account, it is never linked to your email, and a reinstall makes a new one.
• Screen recordings of onboarding and the paywall only: what those screens looked like and where you tapped, with every word on them masked. Nothing is recorded once you reach your climb.

We never send your email, your account id, your answers to the questions (brand, strength, how many, price, years), your reasons or your summit reason. PostHog discards your IP address. We use this data because we have a legitimate interest in making the app work better (GDPR Art. 6(1)(f)). You can turn it off at any time in the app under You › Share usage data; from then on nothing is sent.

Purchases

In the app

Subscriptions are sold and charged by Apple. We never see your card or your Apple ID. To know what you have unlocked we use RevenueCat, which receives your purchase receipts from Apple, a random app user id (your account id if you are signed in), your device type, iOS version, country and currency.

Founding access on campzero.app

Founding access is sold by Lemon Squeezy, the merchant of record, which handles payment, tax and receipts under its own privacy policy. We receive your name, email, order number, amount and whether the order was refunded. We use them to unlock Camp Zero when you sign in with that email, to email you about your order and the launch, and to keep our accounts.

Emails

Sign-in codes, support crew invites and order emails are sent through Resend. We don't track opens or clicks. Resend keeps delivery logs for about 30 days.

This website

• Google Analytics 4 counts visits and shows which pages work. It sets analytics cookies. Advertising features (ad storage, ad personalisation, remarketing) are switched off.
• The Meta pixel measures whether our ads on Facebook and Instagram lead to visits and purchases. It sets Meta's cookies (_fbp, _fbc).
• When you buy founding access, our server tells Meta (your email and name, hashed) and Google Analytics (the order) that a purchase happened, so each ad is credited correctly.
• Vercel hosts the site and the app's server and briefly logs requests, including IP addresses, for security and to keep the service running.

We use these because we have a legitimate interest in knowing which pages and ads work. You can block them with your browser's cookie settings or a content blocker, with Google's opt-out add-on, and in Meta's ad preferences.

Who processes data for us

When data leaves the EU, it goes to providers certified under the EU–US Data Privacy Framework or bound by the European Commission's standard contractual clauses.

What we don't do

• We don't sell or rent your data, and we don't share it with data brokers.
• The app shows no ads and doesn't track you across other apps or websites.
• The app doesn't ask for access to your location, your contacts, your photo library or Apple Health. When you choose a friend for SOS or a photo for your profile, Apple's own picker hands the app only that one; the friend's name and number stay on your phone.

How long we keep it

• Account, email and saved climb: until you delete your account. Database backups that may still contain them expire within 10 days.
• Your first name, photo, support crew, their messages and your phones' push tokens: until you delete your account. An invited person's email address goes as soon as you remove them or they leave, and a phone's push token when you sign out on it.
• Addresses that stopped invites: as a hash, for as long as the stop applies.
• Sign-in attempts: 1 day. Abuse-prevention records: 2 days.
• Records of founding access purchases: while they are needed to unlock your account and for our accounting. Lemon Squeezy keeps its own order records as tax law requires.
• Email delivery logs: about 30 days, at Resend.

When you delete your account in the app, we delete your account, saved climb, support crew (with its messages and links) and purchase records from our database at once, and ask RevenueCat to delete its record of you.

Your rights

You can ask for a copy of your data, have it corrected or deleted, take it with you, object to or restrict how we use it, and withdraw consent at any time. Write to jaka.smid@gmail.com and we'll answer within a month. You can also complain to the Slovenian Information Commissioner (Informacijski pooblaščenec) or the data protection authority where you live.

Age

Camp Zero is for adults who use nicotine. It isn't meant for anyone under 18, and we don't knowingly collect data from children.

Changes

When we change this policy, we update the date at the top. If a change matters for how we use your data, we'll tell you in the app or by email before it applies.