Sutts Privacy Policy

Who we are

Sutts is published by broooapps (the developer, also referred to as “we”). This policy describes how the Sutts Android app handles your information. If you have questions, email swapniltiwari775@gmail.com.

Data we collect

Sutts does not ask for your name, email address, phone number, or any other directly identifying information. The data the app handles falls into three buckets:

1. Data that stays on your device

• Cigarettes you log (timestamp, mood, trigger, optional notes).
• Your onboarding answers (smoking history, intent — track, reduce, or quit — daily baseline).
• App preferences and settings.
• Subscription/entitlement state cached locally.

This data is stored in an on-device database. We have configured Android to exclude the database and its encryption key from Google’s automatic cloud backup, so your logs are not silently uploaded to your Google account.

2. Data sent to the AI Coach (Premium feature)

When you use the AI Coach feature, the prompt text you send (which may include a summary of your recent logs and patterns that you choose to share) is transmitted to our server. Our server forwards it to Google’s Gemini API to generate a response, then returns the response to your app. We do not store the prompt or the response on our servers beyond what’s needed to handle the request.

To prevent abuse and control costs, we keep a small per-user record (anonymous user ID, request count, reset timestamp) in Firestore. This record contains no message contents and no personal information.

3. Diagnostics and account identifiers

• Anonymous Firebase Authentication — Sutts signs you in with a random anonymous user ID so the AI Coach knows the request is from a real installation. No email, password, or social account is involved.
• Firebase Crashlytics — if the app crashes, we receive a crash report (stack trace, device model, OS version, app version). These reports are used to fix bugs.
• Firebase Analytics — aggregated, anonymous usage events (e.g., “onboarding completed”, “log created”) help us understand which features are useful. Logged events do not include the contents of your logs or notes.
• Google Play Billing — if you purchase a subscription, Google Play handles the transaction. We receive a purchase token to confirm your entitlement; we do not see your payment details.

How we use the data

• To run the app and show you your own logs and insights.
• To generate AI Coach replies when you request them.
• To diagnose crashes and improve stability.
• To understand which features are used so we can improve the product.
• To validate and unlock your subscription.

We do not sell your data. We do not share it with advertisers. Sutts contains no third-party advertising SDKs.

Third-party services

The following processors receive limited data on our behalf:

• Google Firebase (Authentication, Cloud Functions, Firestore, Crashlytics, Analytics) — see Firebase Privacy.
• Google Gemini API — only for AI Coach prompts you send. See Gemini API terms.
• Google Play Billing — for subscription processing. See Google Privacy Policy.

Data retention and deletion

• On-device data is removed when you uninstall the app or use the in-app reset option in Settings.
• Anonymous account and rate-limit record are removed when you tap “Delete account” in Settings, or by emailing us at the address below.
• Crash and analytics data follow Firebase’s default retention (typically up to 14 months for analytics, 90 days for unsymbolicated crash data).

How to request deletion

You have two ways to delete your data, and you do not need the app installed to use the second one:

1. From the app: open Sutts → Settings → Delete account. This wipes your on-device database, your anonymous Firebase user, and your rate-limit record.
2. By email (no app required): send an email to swapniltiwari775@gmail.com with the subject line Delete my Sutts data. We will delete your anonymous account and any associated server-side records within 30 days and reply to confirm.

What gets deleted: your anonymous Firebase Authentication user, your rate-limit/usage record in Firestore, and any pending diagnostic data tied to that user. What we cannot delete: data already aggregated and anonymised for crash/analytics reporting (no longer linked to you), and on-device data on devices you no longer use — uninstalling the app removes that copy.

Children

Sutts is intended for adults who smoke or vape and want to track or change their habit. It is not directed at children under 13 (or under 16 in regions that apply that threshold). We do not knowingly collect data from children.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Because Sutts collects so little data and stores most of it on your device, you can satisfy most of these rights directly in the app:

• View your data — every log is visible in the app.
• Delete your data — uninstall the app or use Settings → Delete account.

For anything else, email swapniltiwari775@gmail.com and we will respond within 30 days.

Security

We use HTTPS for all network calls. The on-device database key is stored in the Android Keystore where supported. No system is perfectly secure, but we apply standard practice for the data we hold.

Changes to this policy

If we make material changes, we’ll update the “Last updated” date above and, where appropriate, surface a notice in the app.