Privacy Policy

Thank you for choosing Claro ("the App"), a quit-smoking application built on identity-based habit change, developed by Gravity Lab ("we", "us", or "our"). Claro helps you become a non-smoker by shifting your identity — not just counting days — using the behavioral psychology principles from James Clear's Atomic Habits. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application available on the Google Play Store. Please read this Privacy Policy carefully. By downloading, installing, or using the App, you agree to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access or use the App.

Claro is built with a privacy-first, offline-first architecture. We do not require account creation, login, or any form of user registration. All core health and behavioral data is stored locally on your device. The information associated with the App falls into the following categories:

a. Information You Provide (Stored Locally on Your Device)

All user-provided data is stored exclusively on your device using Hive, a local mobile database. This data never leaves your device to our servers. Locally stored data includes:

• Identity Statement: Your chosen non-smoker identity statement (e.g., "I am a non-smoker"), displayed as daily reinforcement when you open the App.
• Smoking Baseline: The number of cigarettes per day you smoked before quitting, cost per pack, and number of cigarettes per pack — used to calculate money saved and progress metrics.
• Trigger Data: Your identified smoking cues and triggers (e.g., after meals, stress, social situations), used to personalize craving management and replacement activity suggestions.
• Craving Logs: Timestamp, trigger ID, emotional state, craving intensity (1–5 scale), duration, replacement activity used, outcome (beaten or relapsed), and optional free-text notes for each craving event you log.
• Replacement Activity Preferences: Which 2-minute replacement activities you select from the library (e.g., deep breaths, glass of water).
• Daily Check-ins: Mood, craving count, and identity reinforcement confirmations.
• Quit Date: The date you started or intend to start your quit journey.
• Subscription Status: Your premium subscription entitlement status and billing cycle information (managed via RevenueCat; raw financial data is not stored by us).

b. Information Collected Automatically by Third-Party Services

The App integrates third-party services for analytics, advertising, and subscription management that may collect certain information automatically. This data is collected and processed by those third parties under their own privacy policies. See Section 6 (Third-Party Services) for details.

c. Information We Do NOT Collect

• Names, email addresses, phone numbers, or physical addresses
• Location data or GPS coordinates
• Photos, videos, or camera data
• Contact lists or call logs
• Browsing history or search queries
• Raw financial or payment information (card numbers, bank details)
• Biometric data (fingerprints, face scans, voice recordings)
• Contents of your messages or communications

All locally stored data is used solely to provide and improve the core functionality of the App. Specifically:

• Identity Reinforcement: Your identity statement is displayed every time you open the App to strengthen your self-perception as a non-smoker.
• Craving Management: Craving logs and trigger data are used to power the Pause Protocol — a structured 2–3 minute intervention flow that helps you outlast cravings through trigger identification, psychological reframes, and replacement activities.
• Progress Tracking: Smoking baseline data, quit date, and craving logs are used to calculate your streak (days smoke-free), money saved, health timeline milestones, and total "votes" cast for your non-smoker identity.
• Craving Pattern Analysis (Premium): Your craving and trigger history is analyzed entirely on-device to surface temporal patterns (e.g., "Your hardest time is 3pm on weekdays"), trigger success rates, and craving trend charts.
• Compassionate Relapse Handling: Craving logs are used to provide non-judgmental relapse context (e.g., vote ratio) and turn slips into learning opportunities without penalty messaging.
• Subscription Verification: Subscription status data from RevenueCat is used to unlock premium features and remove advertisements for paying users.
• Notifications: Scheduled reminders and motivational push notifications are sent using locally configured triggers and timing preferences.

The App requests the following device permissions to provide its core functionality. Each permission is used solely for the purpose described below:

The free tier of Claro is supported by advertisements served through Google AdMob. Advertisements are shown only to free-tier users and are completely removed upon upgrading to a premium subscription. The App may display the following types of ads:

• Rewarded Video Ads: Optional ads you can choose to watch in exchange for in-app benefits. These are user-initiated and do not interrupt core app flows.
• Interstitial Ads: Full-screen ads displayed at natural transition points within the App, such as between screens.

Google AdMob may collect device information, advertising identifiers, and usage data to serve and measure advertisements. Your health and behavioral data stored locally in the App (craving logs, triggers, identity statements) is never shared with AdMob or used for ad targeting.

For more information about how Google uses your data, please visit: Google Privacy Policy.

Claro offers an optional premium subscription that unlocks advanced features including unlimited trigger mapping, AI craving insights, craving trend charts, full replacement activity library, weekly AI summary reports, data export, and an ad-free experience.

All subscription transactions are processed through Google Play Billing and managed via RevenueCat. We do not collect, store, or have access to your payment card details, bank information, or any raw financial data. RevenueCat only shares subscription entitlement status (active or inactive) and billing cycle dates with the App to unlock premium features.

• Monthly plan and annual plan options available
• Subscriptions auto-renew unless cancelled at least 24 hours before the end of the billing period
• To cancel, manage your subscription through the Google Play Store
• Refund requests are handled in accordance with Google Play's refund policy

The App uses the following third-party services. Each service operates under its own privacy policy, and we encourage you to review them:

• Google AdMob: Used to display advertisements to free-tier users. AdMob may collect device identifiers, IP address, and usage data to serve and measure ads. Ads are automatically disabled and disposed of upon premium upgrade. Google Privacy Policy
• Firebase Analytics: Used to collect general app engagement metrics (e.g., session counts, feature usage) to help us understand how users interact with the App and improve its functionality. Firebase does not receive your personal health data, craving logs, or trigger information. Firebase Privacy Policy
• RevenueCat: Used to manage premium subscription entitlements and validate purchase receipts from Google Play. RevenueCat stores your subscription status, platform (Android), and purchase timestamps. It does not receive your health or behavioral data. RevenueCat Privacy Policy
• Google Play Services & Play Billing: Required for app distribution, in-app purchase processing, subscription management, and platform integration on Android devices. Google Privacy Policy

The security and privacy of your sensitive health data is a core design principle of Claro. All personal and behavioral data is stored locally on your device using Hive, a lightweight encrypted local database for Flutter.

• Local-Only Health Data: Your craving logs, trigger data, identity statements, progress metrics, and daily check-ins are stored exclusively on your device and never transmitted to our servers.
• No Cloud Sync: We do not sync your personal or health data to any cloud service. There are no backend servers operated by us that receive or store your behavioral information.
• No User Accounts: The App does not require account creation, login credentials, or authentication with any external identity service. Your data is not tied to any online identity.
• Offline-First Architecture: The core quit-smoking functionality — craving logging, progress tracking, and relapse handling — works entirely offline. Internet connectivity is only required for ads, analytics, and subscription validation.
• Data Deletion: You can delete all locally stored data at any time by clearing the App's data through your device settings or by uninstalling the App.

While we take reasonable measures to ensure your locally stored data is handled responsibly, please be aware that the security of data processed by third-party services (Firebase, RevenueCat, AdMob) is governed by their respective security practices.

Since all core data is stored locally on your device, data retention is entirely within your control:

• Identity Statement & Quit Date: Retained on your device indefinitely until you update them or uninstall the App.
• Craving Logs & Trigger Data: Retained on your device indefinitely as part of your cumulative quit history, enabling long-term pattern analysis and progress review.
• Progress Metrics: Streak counts, votes, money saved, and health milestones are retained on your device as your ongoing quit record. Daily streaks reset after a relapse, but lifetime statistics remain visible.
• Subscription Status: Entitlement data from RevenueCat is retained according to RevenueCat's data retention policies and is only used to verify your current access level.
• Analytics Data: Engagement data collected by Firebase Analytics is retained according to Firebase's data retention policies (typically up to 14 months by default).
• Ad Data: Data collected by Google AdMob is retained according to Google's data retention policies.

Claro is a quit-smoking application intended for adult users. The App is not directed at children under the age of 13 (or the applicable age of consent in your jurisdiction), and we do not knowingly collect personally identifiable information from children. The App does not require account creation or submission of any personal information.

Given that smoking is an adult behavior and the App is designed for people actively seeking to quit smoking, we take reasonable steps to ensure the App is not marketed to or used by minors. If you are a parent or guardian and believe your child has used this App and provided personal information, please contact us at the email address provided below and we will take appropriate steps to address the matter promptly.

You have the following choices regarding your data and privacy:

• Data Deletion: You can erase all locally stored data (craving logs, triggers, progress, identity statement) at any time by clearing the App's data through your device settings or by uninstalling the App.
• Notifications: You can disable push notifications from the App at any time through your device's notification settings. This will prevent craving reminders and motivational prompts.
• Ad Personalization: You can manage ad personalization through your device's advertising settings or by opting out via the Google settings on your device.
• Advertising ID: You can reset or limit your device's advertising identifier through your Android device settings under Privacy or Ads.
• Permission Management: You can revoke the Boot Completed or Notifications permissions at any time through your device's app settings. Revoking notifications will affect the App's ability to send reminders.
• Subscription Cancellation: You can cancel your premium subscription at any time through the Google Play Store. Cancellation takes effect at the end of the current billing period.

If you are located in the European Economic Area (EEA) or another region with applicable data protection laws, you may have additional rights including the right to access, rectify, or request erasure of data processed by third-party services. To exercise these rights regarding third-party data, please contact the respective service providers directly or reach out to us for assistance.

We may update this Privacy Policy from time to time to reflect changes in our practices, third-party services, or applicable laws. When we make changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of the App after any modifications to this Privacy Policy constitutes your acceptance of such changes.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: