Vapexit privacy policy
Last updated 31 July 2026
Vapexit is made by Serhii Alpieiev. This page describes what the iPhone app stores, who else touches it, and how to get it back or destroy it. It covers Vapexit only — Unbottle, the quit-drinking app from the same developer, is a separate app with its own storage, its own fields and its own policy, published on its own site.
The short version
- There is no account. No email address, no name, no phone number, no password.
- What you log is stored under a random anonymous ID so it survives a new phone.
- Nothing is sold, and nothing is shared with advertisers or data brokers.
- The app never asks to track you across other companies' apps, and never reads the advertising identifier.
- You can export everything, or delete everything, from Settings — both free, at any time.
What is stored
What you enter and log
Kept under your anonymous ID in Google Firestore:
- Your setup: what you use (vape, pouches or cigarettes), your goal, your quit date, when you started, what a unit costs you, how much you were using a day, nicotine strength in mg, and your reminder time.
- Your reasons for quitting — the chips you pick and anything you type. This is the most personal text in the app. It is never sent to analytics, and notifications only ever say that you wrote something down, never what it says.
- Your dependence questionnaire — which instrument you were shown and the score it produced.
- Every day you track: the count, nicotine in mg, which hours of the day they fell in, your morning pledge, your evening check-in (a mood rating and a craving rating), how many slips, and your taper limit for that day if you are on one.
- Every slip and craving you log: when, which triggers you picked, how strong it was if you said, which tool you used, and how it ended.
All of it is health information about substance use, and it is treated as such: the storage is scoped to your anonymous ID, and the security rules deny any other signed-in user access to it.
What the app measures about itself
Usage events go to Amplitude and to Google Analytics for Firebase — which screens you open, which onboarding pages you complete, that a puff was logged, that a craving tool ran, whether a paywall was shown or dismissed. Some carry values from your history: a check-in sends the mood and craving ratings; onboarding sends your substance, product mode, goal, the band your dependence score fell in and how many reasons you wrote — never the reasons themselves and never the raw score.
Crashes
Firebase Crashlytics receives crash traces, your device model and iOS version, tied to the anonymous ID, so a crash can be fixed.
Purchases
Subscription state is handled by RevenueCat on top of Apple's own receipt. Apple takes the payment; card numbers never reach the app or the developer.
Identifiers
- A random anonymous account ID created by Firebase Authentication on first launch. It is the key everything above is filed under, and it is also the ID sent to Amplitude, Google Analytics, Crashlytics and RevenueCat so those records line up.
- A Firebase app-instance ID and your device's vendor identifier, shared with RevenueCat so a purchase can be matched to an install.
- If you arrived from an Apple Search Ads ad, Apple's attribution token. It is not the advertising identifier and it does not identify you.
What is never collected
- Your name, email address, phone number or postal address.
- Your location, contacts, photos, microphone or camera.
- Anything from Apple Health — Vapexit does not request HealthKit access.
- Your body weight. (Vapexit has no reason to ask; Unbottle's morning-after estimator does, and says so in its own policy.)
- The advertising identifier. There is no App Tracking Transparency prompt because there is nothing to ask for.
Who processes it
| Who | What they get | Why |
|---|---|---|
| Google (Firebase Authentication, Firestore, Crashlytics, Analytics) | The anonymous ID, everything you log, crash traces, usage events | Storing your history and keeping the app working |
| Amplitude | Usage events and the anonymous ID | Understanding which parts of the app help |
| RevenueCat | The anonymous ID, the two install identifiers, purchase state | Knowing whether you have Pro |
| Apple | The purchase itself | Taking the payment, running the App Store |
They act as processors on the developer's behalf and are not permitted to use your data for their own purposes. Data is stored on Google's and these providers' servers, which may be outside your own country.
Your data, in your hands
Settings → Data → Export my data writes your profile, every day and every logged event to JSON or CSV and hands the file to you. It is free, unlimited and covers your whole history, not a recent window — it is a complete copy, produced instantly, without asking anyone.
Settings → Data → Delete all my data destroys your profile, your days and your events. It cannot be undone, so export first if you want a copy. Your anonymous ID and your purchase record survive, so a subscription you paid for keeps working.
Deleting the app from your iPhone does not delete the stored copy, and reinstalling starts a new anonymous ID rather than reconnecting to the old one — so the old records become unreachable rather than deleted. Use Delete all my data first, or email support@vapexit.mriy.io and we will do it.
Because there is no account, a request by email cannot be matched to a particular person's records — which is a privacy feature, not an obstacle: the export and delete buttons in the app do the same job immediately, from the one device that can prove it is yours.
Children
Vapexit is not intended for anyone under 17, and it is rated accordingly on the App Store. It is not knowingly used to collect information from children.
Changes
If what the app collects changes, this page changes with it and the date at the top moves. A change that materially affects what is stored will be described here rather than quietly folded in.