Records are processed on your device
Tobacut is an app for recording a quit plan and smoking status. The current version requires no account. Gorae Labs does not collect the quit or smoking records entered in the app on its servers or send them to family or friends. Recording, calculations and breathing guidance work without an internet connection.
Information stored on the device
The app stores a local profile identifier, quit start time, selected tobacco products, usual consumption and spending baselines with their currencies, daily check-ins, smoking times, quantities and situations, and notes you write. Reminder days and times, app language, motion and vibration preferences, widget display preferences and optional-service consent settings also remain on the device. The local identifier separates record ownership inside the app; it is not an account or advertising identifier. Breathing session progress is held in memory during use. Changing the language does not rewrite saved record data, translate your notes or convert saved amounts.
Storage and security
Quit plans and primary records are stored in a local database encrypted with SQLCipher. The database key is kept in the operating system’s secure storage. Small preferences and widget summaries use separate on-device storage and are not all encrypted in the same way. Device access controls and operating-system security also affect protection.
Home screen widgets and companion watches
To display widgets, the app places a minimal summary in on-device storage shared with its widget extension. This can include elapsed time, confirmed smoke-free days, today's status, estimated savings when enabled, and update times. It does not pass the full record database, notes or database key to widgets. Other people who can see your home screen may see the summary. Settings → Widgets and watches lets you control progress and savings visibility. The operating system controls when widgets refresh.
If you install the companion app on a connected Apple Watch or Wear OS watch, the same minimal summary is transferred through the operating system's device-connectivity service and cached separately on the watch. A random installation identifier and update-order information are also used to distinguish the connection. The original records, notes and database key are not transferred. Wear OS may relay this transfer through Google servers depending on connectivity; that relay uses end-to-end encryption. Someone who can see your watch or watch face may see the summary. Turning progress visibility off sends a hidden summary to the watch, but an offline watch may not update immediately. Android and Wear OS public distribution remain a separate release track.
Reminders and permissions
When you configure reminders, the app requests notification permission and schedules local notifications for your selected days and time. You can disable them in the app or system settings. The app does not access location, contacts, the camera, microphone or health-data services.
Collection through the app
The current app has no login, payments, standalone remote crash-reporting service or cloud-sync feature, and it does not automatically upload smoking records or notes. Advertising-SDK diagnostics are described separately below. Firebase Analytics is included, but collection is disabled in a new installation. Only if you expressly turn on app analytics in Settings → Connections and privacy may Google's Firebase Analytics process the feature surface opened, app version, technical device information, an app-instance identifier and basic usage events. Smoking records, notes, estimated savings or currency, record dates, the local profile identifier and account identifiers are not sent as analytics events. We do not use analytics for advertising, advertising identifiers or personalized advertising. Turning analytics off stops future app-event collection and requests a reset of local analytics data; it does not mean information already sent to the service provider is immediately or automatically deleted.
The Records and Help tabs may show non-personalized Google Mobile Ads banners at the bottom. Every ad request uses the non-personalized setting. On iOS, the app may explain and then request App Tracking Transparency (ATT) permission for device identifiers that may be used for ad delivery and measurement. The explanation has one Continue button that proceeds to the system permission choice. Declining tracking does not affect smoking records, breathing or widgets; ad requests remain non-personalized. For ad requests, delivery and measurement, the Google SDK may process approximate location inferred from IP address, device- or app-scoped identifiers, ad views and interactions, app performance data and crash diagnostics. This does not mean that original smoking records or notes are sent to the ad provider. Where required for users in the European Economic Area and the UK, Google's User Messaging Platform (UMP) shows a consent form before ad requests; available privacy choices can be reopened in Settings → Connections and privacy. A UMP choice does not override your iOS ATT choice. See the Google Privacy Policy for details about Google's data processing.
Download or diagnostic information processed by an app-store or operating-system provider under its own settings and policies is handled by that provider.
Backups and changing devices
Tobacut does not provide its own cloud backup or server recovery. On iOS it attempts to apply the system backup-exclusion setting to its primary local storage directories; on Android it uses settings that restrict backup and data transfer. The app cannot guarantee the creation or removal of every copy made through operating-system, manufacturer or user settings. Uninstalling the app, changing devices or losing the security key can make records unrecoverable.
Retention, editing and deletion
Records remain in app storage until you edit or delete them. You can edit or delete a day’s records, or confirm Settings → My data → Delete all records to reset the quit plan and records. Reset also invalidates widget summaries and clears record reminders. Because Gorae Labs holds no server copy of your records, we cannot locate, recover or remotely delete those records by email. App deletion is logical deletion, not a guarantee of forensic erasure of every device or backup copy.
Website and email support
ttrufle.com operates separately from the app’s local records. Cloudflare may process IP addresses, request paths, user agents and security events to deliver and protect the website. Website infrastructure and performance measurement operate separately from the app and its local records. If you email support, Gorae Labs receives the email address, message and attachments you choose to send and uses them to respond and investigate. Website and email providers also process information during delivery and storage. Please avoid sending unnecessary smoking records, health information, personal notes or credentials. We handle support information for as long as needed to address the request and delete information that is no longer needed, except where retention is required by law. You may request access, correction or deletion of support information using the contact below.
Scope and changes
Tobacut is not designed for children. It supports personal records and lifestyle management and does not provide medical diagnosis or treatment. If future features such as family sharing, accounts or payments change how data is handled, we will update this policy and store disclosures and provide the required notices and consent steps.
Operator and contact
Operator and privacy contact: Gorae Labs. Email: support@ttrufle.com. See Tobacut support for usage help.