Privacy Policy
Last updated: July 19, 2026 · Data controller: Corposphere LLC (Florida, USA)
Tar2Star is a mobile app that supports your smoking-cessation journey. This policy explains what data is processed when you use the app and tar2star.com. Short version: we collect as little as possible, your health sensor data never leaves your device, and we never sell your data.
1. Data we collect
| Data | Purpose | Where stored |
|---|---|---|
| Email address | Account creation and sign-in (one-time code, or Google/Apple sign-in) | Supabase (EU — Frankfurt) |
| Account identifiers | Preserving your progress (streaks, XP, calendar, profile draft) across devices | Supabase (EU — Frankfurt) |
| Quit details (quit date, daily cigarettes, pack price, chosen name/avatar) | Computing counters and personal statistics | Your device + account backup |
| Usage analytics | Product improvement (screen/feature usage) | PostHog (USA) |
| Crash logs | Debugging and stability | Firebase Crashlytics (Google) |
2. Health & sensor data — stays on your device
Optionally, we may read your daily step, distance and floors-climbed totals via Health Connect (Android) / Apple Health (iOS), solely to auto-verify measured wellness tasks (e.g. "walk 5,000 steps"). This data is processed on your device only; it is never transmitted to our servers, never stored by us, never used for advertising, never sold, and never shared with third parties. You can revoke access at any time in system settings; the app works fully without it.
2a. Other data that never leaves your device
The following are stored only on your phone and are never sent to our servers:
- Morale voice note: the optional recording (max 1 minute) you make to play back during a craving. The microphone permission is used solely for this; the file lives in the app folder on your device and can be re-recorded anytime or removed by deleting the app.
- Emergency contact: the phone number you enter for the "text a loved one" shortcut. The message is sent through your device's own SMS app with your confirmation; the app never sends SMS in the background and the number is never transmitted to us.
- Goal and background photos: images you pick for your financial goal or home scenery stay on your device.
2b. App Store waitlist
If you leave your address in the form under the "App Store — next" badge on our site, we store only your email address, the language of the page, and the date you signed up. It serves a single purpose: telling you once when the iOS version is released (that announcement also carries an opening offer just for the list). We never share the address and never add it to another list or newsletter. No account is needed to sign up, and the address is not linked to your app account. The record is deleted once the announcement has been sent or when you leave; every email carries a one-click unsubscribe link.
3. Sharing and selling
We do not sell personal data and do not share it with ad networks. Data is processed only by the service providers above (Supabase, PostHog, Firebase, and Resend for transactional email), who may not use it beyond our instructions. The app contains no ads.
4. Retention and deletion
- Account data is kept while your account is active.
- You can delete your account inside the app: Profile → Settings → Danger zone → Delete account. All server data (identity mapping, calendar, XP/oxygen ledgers, profile) is permanently deleted. Details: account deletion page.
- Waitlist emails are kept only for the launch announcement; email privacy@tar2star.com to be removed.
5. Children
Tar2Star is intended for users 18+; given the tobacco-cessation context it is not directed at children and we do not knowingly collect data from them.
6. Your rights
Depending on your jurisdiction (GDPR, etc.), you have rights of access, rectification, deletion and objection. Contact: privacy@tar2star.com.
7. Changes
Updates to this policy will be published on this page; material changes will be announced in the app.