Privacy Policy

At Mindful Unsmoke (“we”, “our”, or “us”), we take your privacy and personal autonomy with the utmost seriousness. Reclaiming your subconscious from nicotine addiction requires complete confidentiality. This Privacy Policy details how we collect, use, store, and protect your information when you visit mindfulunsmoke.com and use our cognitive cessation companion.

1. Data Controller

Mindful Unsmoke operates as the Data Controller responsible for your personal data under the EU/UK General Data Protection Regulation (GDPR) and other applicable privacy laws. For any questions regarding your data or to exercise your statutory rights, you may contact us at support@mindfulunsmoke.com.

2. Information We Collect

We only collect information necessary to provide, protect, and personalize your cognitive cessation experience:

• Account Credentials: Name, email address, and hashed password required to maintain your authenticated account.
• Cessation Progress & Somatic Metrics: Quitting date and time, historical cigarette consumption, local pack costs, smoke-free duration, money saved, cravings resisted, and craving surfer logs.
• Reframing & Educational Progress: Lessons completed in The Truth School, bubble-popping distraction scores, and personalized somatic reflections.
• Technical Data & Device Logs: IP address (anonymized for analytics), browser type, device category, and standard HTTP headers utilized for security, DDoS protection, and rate-limiting.

3. Legal Bases for Processing (GDPR Article 6)

We process your personal data on the following lawful grounds:

• Performance of a Contract: Processing necessary to provide you with your account, personal cessation dashboard, progress calculations, and security verification.
• Consent: Where you have provided unambiguous, affirmative consent, such as opting into performance analytics via our Cookie Consent Banner. You may withdraw consent at any time.
• Legitimate Interests: To safeguard our infrastructure against fraudulent attacks, abuse, automated bots, and unauthorized server access.
• Compliance with Legal Obligations: Where required by applicable law, tax, or regulatory standards.

4. Cookies and Preferences

We use essential cookies and browser storage strictly to operate our platform—such as maintaining your authenticated session, protecting forms against automated abuse, and remembering your interface preferences. With your consent, we also utilize privacy-conscious performance measurements to ensure our cognitive tools run smoothly and reliably.

We do not use advertising cookies, nor do we track you across external websites. You can review, modify, or revoke your preferences at any time using the Cookie Preferences link located in our website footer.

5. Confidentiality & Data Protection

Your habit records, reflections, and cessation metrics remain strictly confidential. We work only with reputable cloud infrastructure and security providers that maintain industry-standard safeguards and comply with international privacy frameworks.

We never sell, rent, monetize, or trade your personal health logs, habit data, or identity to third-party advertisers, pharmaceutical corporations, data brokers, or insurance providers.

6. Your Statutory Rights (GDPR & CCPA/CPRA)

Depending on your jurisdiction, you have extensive legal rights regarding your personal information:

• Right of Access & Portability: You can request a copy of your personal data or export your complete progress dataset in JSON format directly from your Account Settings.
• Right to Rectification: You can update or correct your profile and cessation metrics at any time in Account Settings.
• Right to Erasure (“Right to be Forgotten”): You can permanently delete your entire account and all associated metrics with a single click in your Settings “Danger Zone”, or by contacting us.
• Right to Restrict or Object to Processing: You have the right to limit or object to our processing of your personal information.
• Right to Withdraw Consent: You can revoke your cookie consent at any moment via the Cookie Preferences link.
• Right to Lodge a Complaint: If you are an EU/UK resident, you have the right to lodge a complaint with your local Data Protection Authority (DPA).
• California Privacy Rights (CCPA/CPRA): We do not sell or share personal information as defined by California law. California residents have the right to request notice of our data practices and to non-discrimination for exercising their rights.

7. Age Limitation & Protection of Minors (18+)

Mindful Unsmoke is strictly intended for individuals who are at least 18 years of age (or the legal age to purchase nicotine products in your jurisdiction, whichever is older). We do not knowingly collect personal data from anyone under 18 years of age. If we learn that a minor has provided us with personal information, we will immediately delete the account and associated records.

8. Data Retention and Security

We retain your account data and cessation logs for as long as your account remains active. If you choose to delete your account, your personal identification and habit records are permanently purged from our primary database. We employ TLS/HTTPS encryption in transit, strict CORS and CSRF verification, password hashing, and HttpOnly session cookies to secure your data.

9. Updates to This Policy

We may update this Privacy Policy from time to time. When significant changes are made, we will revise the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal information, please reach out to our privacy team at:

Email: support@mindfulunsmoke.com