Not One More

Privacy Policy

Last updated 14 August 2026

This app is about cravings, slips and relapses. That is sensitive, and the design reflects it: your phone is the source of truth, the app works with no network at all, and the voice note you record never leaves the device.

This policy describes what {{CONTROLLER}} ("we") does with your information when you use Not One More. It is written to be read, not to be survived.

The short version

What the app stores on your device

Your profile
What you use (cigarettes, vape or pouches), roughly how much per day and what it costs, how long you have used it, the triggers you picked, your preferred actions, any savings goal you set, and the written reasons you gave for quitting.
Craving events
One record each time you start a Hit: when you started and finished, the substance, how intense it felt, what set it off, which action you did, how many reps you completed and whether the phone verified them, whether you used discreet mode, the outcome you reported, how long it took to pass, the unit cost at the time, and the local hour and weekday. This is what every number in the app is calculated from.
Your voice note
An audio file recorded during setup and saved in the app's private storage on your device. It is played back to you, by the app, when a craving is severe. It is not uploaded to us or to anyone else. Deleting the app deletes it permanently, and we have no copy to restore.

What leaves your device, and when

Backup and restore

When you have a network connection, your profile and craving events are copied to Google Firebase (Cloud Firestore), stored against an account identifier. This is a backup, not a dependency — the app never waits for it, and every feature works with the network off. We restore from it only onto a device that is holding nothing, such as after a reinstall.

Your account identifier

On first launch the app creates an anonymous account through Firebase Authentication. It is a random identifier. It contains no name, no email address and nothing derived from your device or phone number.

You may optionally use Sign in with Apple so that your history survives losing the phone. If you do, we receive the identifier Apple provides, and your name and email address if you choose to share them. Apple's Hide My Email gives us a relay address instead of your real one, and that works normally here.

Subscriptions

Purchases are handled by Apple. We never see your card details. Subscription status is processed on our behalf by RevenueCat, which receives your app account identifier and the purchase receipt so the app knows what you have access to.

Motion data

During the Burn beat the app reads the accelerometer to count repetitions, so a Hit can be verified rather than self-reported. The readings are processed on the device as they arrive. Raw motion data is never stored and never transmitted. Only the resulting rep count and whether verification succeeded are kept. The camera is never used.

Notifications

Notifications are scheduled on your device by the app itself. There is no push server and we hold no push token, which means we cannot send you anything you did not already schedule by using the app. Exactly one exists: a reminder the day before a free trial ends, so a charge is never a surprise.

Nothing is ever sent about your cravings, your streak or your usage. An earlier version scheduled a nudge before the hours you tend to struggle in; it was removed, because announcing nicotine to someone who was not thinking about it works against the point of the app.

What we do not do

Why we are allowed to hold it

Under the GDPR, we rely on the necessity of performing our contract with you to store and back up the data that makes the app function, and on your consent for the microphone and for notifications, both of which you can withdraw in your device settings at any time. Information about your nicotine use is capable of revealing something about your health, so we treat all of it as sensitive regardless of the category it formally falls into.

How long we keep it

For as long as you use the app, because its entire value is the trend across months. Deleting the app from your phone removes everything stored locally, including the voice note, immediately. To remove what we hold as well, use Delete Account in the app.

Deleting your account

There is a Delete Account button in the app, under Profile. It is not a request queued for someone to action later: it deletes your craving events and profile from our database, deletes your account itself, and wipes the local copy on your device. Nothing is retained, deactivated or hidden, and it cannot be undone.

You do not need an account to use the app and you do not need to contact us to leave it.

Your rights

You can ask us for a copy of your data, ask us to correct it, ask us to delete it, or object to our processing of it. Email privacy@notonemore.app and we will respond within 30 days. You also have the right to complain to your national data protection authority.

Where your data is processed

Our processors are Google (Firebase Authentication and Cloud Firestore), Apple (payments and Sign in with Apple) and RevenueCat (subscription status). Data may be processed outside the European Economic Area. Where it is, transfers are covered by the European Commission's Standard Contractual Clauses.

Children

Not One More is not for anyone under 18 and we do not knowingly collect information from under-18s. If you believe a minor has used the app, email us and we will delete the account.

Changes

If we change this policy we will update the date at the top. If a change materially affects what we do with your data, we will tell you in the app before it takes effect.

Contact

{{CONTROLLER}}, {{ADDRESS}}.
privacy@notonemore.app