Last Updated on the 30th of April, 2026
PastIt ("PastIt," "we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy describes how we collect, use, disclose, store, and safeguard information when you download, access, or use the PastIt mobile application and related services (collectively, the "App").
By using the App, you agree to the practices described in this Privacy Policy. If you do not agree, you should discontinue use of the App and delete it.
This Privacy Policy should be read together with our Terms of Service.
Important Disclaimers
PastIt is a non-medical, educational, and self-help application designed to assist users with personal habit tracking and motivation related to quitting nicotine products including cigarettes, heated tobacco (IQOS), vapes, e-cigarettes, nicotine pouches, cigars, roll-your-own tobacco, and hookah.
The App is **not** a healthcare service, medical device, therapy platform, counseling service, or treatment program.
PastIt does **not** provide medical advice, diagnosis, or treatment.
PastIt does **not** create, receive, maintain, or transmit Protected Health Information (PHI) under the Health Insurance Portability and Accountability Act (HIPAA).
**No doctor–patient, therapist–client, or healthcare provider relationship** is created through the App.
Information entered by users may include personal or sensitive behavioral information. Such information is voluntarily entered by users for personal habit tracking purposes within the App.
Users seeking professional assistance related to nicotine addiction, substance dependence, or mental health concerns should consult a qualified healthcare professional.
Informational and Self-Help Use
The App is intended to provide informational tools and personal habit-tracking features to support user-directed behavior change related to nicotine cessation.
PastIt does not monitor user activity outside the App and does not guarantee any specific outcomes related to behavioral change, habit formation, or abstinence from nicotine.
Users remain solely responsible for their personal decisions, actions, and behaviors. The App should not be relied upon as a substitute for professional medical, psychological, or counseling services.
Health milestones presented in the App are based on publicly available data from the World Health Organization (WHO), the Centers for Disease Control and Prevention (CDC), and the National Health Service (NHS). These milestones describe general population-level health improvements and may not reflect individual outcomes.
Information We Collect
We collect only the data necessary (or voluntarily provided) to deliver App functionality, personalization, insights, and improvements.
**Information you provide:** Account details (email, name, Apple/Google ID), profile preferences (quit goal, strategy, products, reasons), habit tracking data (check-ins, journal entries, trigger logs, pledges, community posts), and payment information processed through Apple App Store, Google Play, and RevenueCat.
**Automatically collected:** Device model, OS version, app version, device identifiers, IP address, crash reports, usage analytics (features used, session duration, navigation patterns).
**Permissions:** Push notifications only. PastIt does **not** access contacts, microphone, camera, or precise geolocation.
**Community content:** Posts, comments, and display names shared in community areas are visible to other participants.
**AI coach:** Conversation messages and quit context (products, streak, triggers) are sent to our server and processed by Anthropic's Claude AI. Messages are **not** used to train AI models and are not stored permanently beyond the session.
Sensitive Information
Information related to nicotine use habits, emotional states, or addiction behaviors may be considered sensitive data in some jurisdictions. This information is processed only to provide habit tracking, progress metrics, and AI coaching. It is **never** sold, used for advertising profiling, or shared with data brokers. Users may delete entries or their account at any time.
3. User Control
Personal logs, check-ins, and trigger entries are created and controlled by the user. Users may enter, edit, or delete their information at any time. PastIt does not evaluate user entries as medical or psychological assessments.
How We Use Information
To provide App functionality, maintain accounts, generate insights and pattern analysis, power the AI coach, improve performance, communicate updates, process subscriptions, detect fraud, enforce Terms of Service, and comply with legal obligations.
Legal Basis (EEA/UK)
Under GDPR: **Performance of a Contract** (App services), **Legitimate Interests** (security, analytics, fraud prevention), **Consent** (notifications, optional analytics), **Legal Obligations** (compliance with law).
Data Sharing
PastIt does **not** sell personal information. We share data only with: **Supabase** (EU hosting/database), **Anthropic** (AI coach processing), **RevenueCat** (subscriptions), **Apple/Google** (auth and payments). We may also disclose information to comply with law, enforce Terms, protect safety, or as part of a business transfer.
Data Security
We use encryption in transit (TLS), row-level security on all database tables, secure EU-hosted cloud infrastructure, access controls, and security monitoring. No system can guarantee absolute security.
Security Incidents
In the event of unauthorized access to personal information, we will investigate, mitigate harm, and provide notice as required by law.
9. Data Retention
We retain information only as long as necessary for App functionality, accounts, subscriptions, and legal obligations. Account deletion removes associated data unless retention is legally required. Anonymized aggregate data may be retained indefinitely.
Tracking Technologies
The App may use mobile identifiers and SDKs for functionality and analytics. PastIt does **not** use behavioral data for advertising targeting or marketing profiling.
Aggregated Data
De-identified, aggregated data that cannot identify individual users may be used for usage analysis, feature development, and research, and may be retained indefinitely.
Your Privacy Rights
Under GDPR, UK GDPR, CCPA/CPRA, and other applicable laws, you may have rights to access, correct, delete, restrict, object to processing, withdraw consent, data portability, and opt-out. Contact **support@pastit.app** to exercise these rights. We respond within 30 days for GDPR requests.
International Transfers
Data is primarily stored in the EU (Supabase EU region). Transfers outside the EU are protected by Standard Contractual Clauses.
Automated Processing
The App uses automated systems for progress insights, pattern analysis, and AI coaching. These do **not** constitute medical or psychological evaluation. Users control their data and may delete it at any time.
Age Restrictions
PastIt is intended for users at least 17 years old. We do not knowingly collect information from minors and may suspend accounts that do not meet age requirements.
Third-Party Services
This policy does not cover third-party services. Review:
[Apple](https://www.apple.com/legal/privacy/),
[Google](https://policies.google.com/privacy),
[Supabase](https://supabase.com/privacy),
[RevenueCat](https://www.revenuecat.com/privacy),
[Anthropic](https://www.anthropic.com/privacy).
Account Deletion
Delete your account via Settings → Delete Account or by contacting **support@pastit.app**. Deletion removes check-ins, triggers, journal entries, community posts, and profile data, except where legally required.
Policy Changes
We may update this policy and will communicate material changes through the App, email, or an updated posting. Continued use constitutes acceptance.
Contact Us
If you have any questions or concerns about our Privacy Policy or the handling of your personal information, please contact us at support@pastit.app