Privacy Policy

Last updated: October 5, 2026 · Data controller: Corposphere LLC (Florida, USA)

Tar2Star is a mobile app that supports your smoking-cessation journey. This policy explains what data is processed when you use the app and tar2star.com. Short version: we collect as little as possible, your health sensor data never leaves your device, and we never sell your data.

1. Data we collect

2. Health & sensor data — stays on your device

Optionally, we may read your daily step, distance and floors-climbed totals via Health Connect (Android) / Apple Health (iOS), solely to auto-verify measured wellness tasks (e.g. "walk 5,000 steps"). This data is processed on your device only; it is never transmitted to our servers, never stored by us, never used for advertising, never sold, and never shared with third parties. You can revoke access at any time in system settings; the app works fully without it.

2a. Other data that never leaves your device

The following are stored only on your phone and are never sent to our servers:

• Morale voice note: the optional recording (max 1 minute) you make to play back during a craving. The microphone permission is used solely for this; the file lives in the app folder on your device and can be re-recorded anytime or removed by deleting the app.
• Emergency contact: the phone number you enter for the "text a loved one" shortcut. The message is sent through your device's own SMS app with your confirmation; the app never sends SMS in the background and the number is never transmitted to us.
• Goal and background photos: images you pick for your financial goal or home scenery stay on your device.

2b. App Store waitlist

If you leave your address in the form under the "App Store — next" badge on our site, we store only your email address, the language of the page, and the date you signed up. It serves a single purpose: telling you once when the iOS version is released (that announcement also carries an opening offer just for the list). We never share the address and never add it to another list or newsletter. No account is needed to sign up, and the address is not linked to your app account. The record is deleted once the announcement has been sent or when you leave; every email carries a one-click unsubscribe link.

2c. Tar2Star cards in ChatGPT and Claude

Tar2Star also offers cards inside ChatGPT and Claude (the "plugin"). The plugin needs no account and does not ask who you are.

What you enter. When a card is needed, the assistant sends our server the values that card uses — for example your quit date, how many cigarettes you smoked per day, pack price and currency, country or language. ChatGPT also attaches technical details to every request on its own: your language setting, an approximate location (such as city and country), anonymous user and conversation IDs, and the app version. Each request also says which service sent it. We use only the language setting and the service name, to choose the card language and to count usage by assistant. Some card values describe your smoking, which can count as health-related information, so we use them only in memory to calculate the card you asked for and send it back. We do not store or log the card values or the technical details, and we do not link them to you.

Anonymous usage counters. For each card requested and each click on a card's link we record one row: which card (or link), which assistant (ChatGPT, Claude or other), the card language (Turkish or English), whether it worked, how long it took in milliseconds, and the time. No IP address, no account or device ID and nothing you typed is recorded. Rows are kept in our database in the EU (Frankfurt) and deleted automatically after 90 days. We use them only to count usage and fix errors.

The card's link. Each card has one link to the Tar2Star blog. It goes through tar2star.com/mcp/r, which counts the click (see above) and adds a label naming the assistant and the card to the blog address (for example utm_source=chatgpt&utm_campaign=yontem). If you then tap the Google Play button on the blog, the same label is passed to Google Play so we can count, in total, installs that came from the cards. The label contains nothing about you. If you prefer not to be counted, open tar2star.com/blog directly instead of using the card's link.

Photo in the craving card. If you choose a photo to remind yourself who you are quitting for, it is shown only inside the card on your device. It is never uploaded to us or stored, and it is cleared when the card closes.

Your conversation. Your chat with ChatGPT or Claude is covered by OpenAI's or Anthropic's own privacy policy. We receive only the card values described above, not your conversation.

Hosting logs. Our hosting providers (Vercel and Supabase) keep standard technical logs, such as IP address, browser type, requested address and time, for security and operations, and delete them automatically after at most 7 days. This includes the requests your device makes when a card loads its images and fonts from tar2star.com and when you click a card's link. We do not use these logs to identify you.

The cards give general health information, not medical advice.

Your choices. You can disconnect Tar2Star at any time in ChatGPT or Claude settings. Because the counters and card values are never linked to you, we cannot find or delete them for one person; they are deleted automatically as described above. Questions: privacy@tar2star.com.

3. Sharing and selling

We do not sell personal data and do not share it with ad networks. Data is processed only by the service providers above (Supabase and Vercel for hosting, PostHog, Firebase, and Resend for transactional email), who may not use it beyond our instructions. Install counts from the Google Play button are reported to us by Google Play in aggregate (section 2c). The app contains no ads.

4. Retention and deletion

• Account data is kept while your account is active.
• You can delete your account inside the app: Profile → Settings → Danger zone → Delete account. All server data (identity mapping, calendar, XP/oxygen ledgers, profile) is permanently deleted. Details: account deletion page.
• Waitlist emails are kept only for the launch announcement; email privacy@tar2star.com to be removed.

5. Children

The Tar2Star app and account are intended for users 18+; given the tobacco-cessation context they are not directed at children and we do not knowingly collect data from them. The ChatGPT and Claude cards (section 2c) need no account, ask for no name or contact details, keep none of the values you enter, and contain only general educational information suitable for a general audience, including teens.

6. Your rights

Depending on your jurisdiction (GDPR, etc.), you have rights of access, rectification, deletion and objection. Contact: privacy@tar2star.com.

7. Changes

Updates to this policy will be published on this page; material changes will be announced in the app.