Privacy Policy

This policy explains how undo (the "app") handles your information. undo is published by THE SOLANA LABS (PRIVATE) LIMITED ("we", "us"), a company registered in Pakistan under CUIN 0347376.

We wrote undo to be useful without knowing who you are. undo helps people step away from nicotine, alcohol, cannabis, gambling, porn, scrolling, gaming, sugar, caffeine, impulse shopping and habits they name themselves. What you are working on is among the most private things about you, and the app is built so that the sensitive parts of it — which habit you chose, when you last slipped, what your urges look like, how you are doing today — never leave your phone unless you deliberately choose to share them.

1. Information we collect

We collect nothing. We operate no servers, no databases and no user accounts for undo. We cannot see your quit date, your craving log, your notes, your savings, your check-ins or your usage of the app, because none of it is transmitted to us.

We never ask for your name, email address, phone number, date of birth or location, and the app contains no analytics, telemetry, crash-reporting or attribution software of any kind. undo never asks for App Tracking Transparency permission, never accesses the Advertising Identifier (IDFA), and does not track you across apps or websites — that is still true with advertising switched on, and section 8 explains how.

2. Information stored on your device

undo keeps everything it needs locally, in the app's private storage on your iPhone. This includes:

• The date and time of your last vape or cigarette, which drives your progress timeline
• Your craving log — intensity, time, and any triggers or notes you record
• Your savings settings, such as how much you used to spend and your goals
• Any taper plan you set up
• Breathing session history, articles you have read or bookmarked, and milestones reached
• App preferences: reminder times, quiet hours, haptics, app icon, and similar settings

This data is protected by iOS. It is included in your iPhone backups (iCloud Backup or encrypted local backups) if you have backups enabled — those backups are controlled by Apple and by you, not by us. Deleting the app removes this data from your device.

3. Corner Live — the one feature that shares data

Corner Live is optional and off until you turn it on. It lets you connect with one person — a partner, friend or family member — so they can see how you are doing and cheer you on.

When you use Corner Live, a small amount of information is stored in your own private iCloud database and shared directly with the one person you invite, using Apple's CloudKit sharing. Specifically:

What	Why
Display name	A name you choose for yourself so your partner knows who is writing. It does not have to be your real name.
Quit start date	So your partner can see which day you are on.
Daily check-ins	How your day went, plus any short note you choose to write.
Reactions	Encouragement your partner sends you, and that you send back.
SOS signals	If you send one, so your partner knows you need support right now.

Important points about this data:

• It lives in your personal iCloud account, held by Apple and governed by Apple's Privacy Policy — not on any server of ours.
• We cannot read it. We have no access to your iCloud data.
• It is shared with exactly one person: the partner who accepts your invitation. It is never public.
• Your craving log, notes to yourself, savings and other private data are not part of Corner Live.
• You can end the connection at any time in the app, which stops sharing. You can also remove the shared data from iCloud in your device's iCloud settings.

If you never turn Corner Live on, nothing at all leaves your device.

4. Apple Health

If you allow it, undo writes your completed breathing sessions to Apple Health as mindful minutes. That is the only interaction with Health, and it is one-way.

undo never reads any of your health data — not your mindful minutes, not your heart rate, not anything else. iOS asks for read permission as part of connecting to Health, but the app makes no read requests. You can revoke this permission at any time in Settings → Health → Data Access & Devices, and you can turn the feature off inside undo. Health data is never transmitted off your device by us.

5. Photos

When you tap "Save image" on a progress card, undo adds that image to your photo library. It has add-only access: it cannot see, read or browse your existing photos.

6. Notifications

If you allow notifications, undo sends you reminders and encouragement — daily check-ins, milestone celebrations and support at times you are likely to find hard. These are scheduled on your device; we do not send them and we cannot see whether you open them.

If you use Corner Live, push notifications are also delivered through Apple's Push Notification service so you know when your partner checks in, reacts or sends an SOS. Apple handles delivery; the content comes from your shared iCloud data, not from us. You can turn notifications off at any time in iOS Settings.

7. Purchases (undo Plus)

undo offers optional paid subscriptions and a lifetime purchase. All payments are processed by Apple through the App Store — we never see or handle your card details, billing address or Apple Account credentials.

To check whether your purchase is active across your devices, we use RevenueCat, Inc., a subscription-management provider. RevenueCat receives a randomly generated, anonymous app user identifier along with purchase and receipt information from Apple (such as which product you bought, when it renews, and the country of your App Store account). This is used only to unlock the features you paid for and to restore purchases. It is not linked to your name or email, and it never includes any of your quit, craving or health data. See RevenueCat's Privacy Policy.

8. Advertising (free plan, undo 3.0 onwards)

Earlier versions of undo carried no advertising, and this policy said so. From undo 3.0, the free plan shows ads from Google AdMob. undo Plus shows none, on any screen. This section is the whole of what that means, because in an app about quitting things it is the part that deserves the most care.

8.1 Where ads appear — and the places they never do

The rules are in the app's code rather than left to a sales screen, and they are deliberately strict:

• Banners appear on the calm screens only — Progress, and Stats & history.
• Never on Today, never on the urge path, never during a check-in, never on a slip, never in onboarding, and never on the paywall.
• No app-open ads, ever. undo is often opened in the middle of an urge, and an ad is the last thing that should meet you there.
• Nothing at all in your first 24 hours after installing.
• Nothing for several minutes after an urge, a check-in or a slip. The app marks those moments and stays quiet around them.
• A full-screen ad only at a natural break — closing the sticker book, or leaving Stats & history — at most one every ten minutes, and no more than three a day.
• Never on a widget.

8.2 The kind of ads undo will not carry

This is a recovery app, so the ad content is restricted rather than left at Google's defaults. undo requests the most restrictive content rating Google offers (“General”), and alcohol, gambling and dating are additionally blocked as sensitive categories.

If you ever see an ad in undo that is advertising the thing you are trying to quit, please tell us at [email protected] and we will block it. We would rather hear about it than not.

8.3 What Google receives

An ad request is still a network request, so it necessarily carries some information. What Google receives is:

One thing we want to be straight with you about. Because the request comes from undo, Google can tell that the device is running an app about quitting something — in the same way any app's ad requests identify the app. It does not tell them which habit you chose, how long you have been going, or anything you have logged. If you would rather Google had no signal at all, undo Plus removes every ad and every ad request with it.

Google acts as an independent controller for ad data. See the Google Privacy Policy and How Google uses information from sites or apps that use our services.

8.4 Consent in the UK and EU

In the EEA, the UK and Switzerland, undo shows a Google-certified consent form before it requests a single ad. It is shown on a calm screen — never during onboarding, and never in the middle of an urge.

You can change that choice at any time: Settings → Privacy → Ad privacy choices, alongside the app lock and discreet mode. The row appears wherever the consent form applies.

8.5 What undo keeps on your device for this

So the limits above can be enforced, the app stores locally the date you installed it, when the last full-screen ad was shown and how many have been shown today, and the time of your last urge, check-in or slip. This never leaves your device and is deleted with the app.

8.6 How to have no ads at all

• undo Plus removes every ad, and with it every ad request. This is the complete answer.
• Decline personalised ads in the consent form, where it applies — you will still see ads, chosen from context rather than from a profile.
• Limit ad tracking system-wide — iOS Settings → Privacy & Security → Tracking. undo never asks for it in the first place, so this changes nothing for undo, but it applies to other apps.

9. Who your data is shared with

Party	What they receive
THE SOLANA LABS	Nothing. We have no servers and receive no data from the app.
Apple	Purchase and subscription records; iCloud data if you use Corner Live or iPhone backups; push-notification delivery.
RevenueCat	An anonymous identifier plus purchase and receipt data, to validate and restore purchases.
Google (AdMob)	Free plan only. Your IP address, device and app information, and whether an ad was shown or tapped — no advertising identifier, and nothing you have logged. See section 8.
Your Corner partner	Only the Corner Live items listed in section 3, and only if you invite them.

We do not sell, rent or trade personal information, and we never share anything you log with anyone. We receive no payment of any kind for data about you, and we share nothing with data brokers.

On the free plan, serving an ad means Google receives the limited technical information in section 8.3. Because undo never accesses the advertising identifier, this does not involve the cross-app tracking the California Consumer Privacy Act calls “sharing” for cross-context behavioural advertising. undo Plus removes advertising entirely.

10. Data retention and deletion

Because your data is stored on your own device and in your own iCloud account, you control how long it is kept.

• Delete everything: delete the undo app from your iPhone. All app data stored on the device is removed with it.
• Remove Corner Live data: end the connection in the app, then, if you wish, remove undo's data from Settings → [your name] → iCloud → Manage Account Storage.
• Remove Health entries: mindful-minute entries written by undo can be deleted directly in the Apple Health app.
• Purchase records are retained by Apple and RevenueCat as required for billing, tax and fraud-prevention purposes, under their own policies.
• Advertising data is retained by Google under its own policies; we hold none of it. The local counters in section 8.5 sit on your device and go when the app goes.

Since we hold no personal data about you, we have nothing to delete on our side. If you have a question about this, write to us and we will confirm that in writing.

11. Your rights

Depending on where you live, you may have rights under laws such as the GDPR (Europe and the UK) or the CCPA/CPRA (California) to access, correct, delete, export or restrict the processing of your personal data, and to object to it.

Practically, undo already gives you the strongest version of these rights: the data never reaches us, it lives on your device, and you can inspect or destroy it at any time without asking anyone. If you want to exercise a right formally, contact us at [email protected] and we will respond within 30 days. To withdraw advertising consent you do not need to write to anyone — use Settings → Privacy → Ad privacy choices in the app, or take undo Plus, which removes ads altogether. For data held by Apple, RevenueCat or Google, please also see their policies linked above.

12. Children

undo is intended for adults who want to step away from a habit. It is not directed at children, and we do not knowingly collect any information from anyone — including children — because we do not collect information at all.

Advertising is not configured for child-directed treatment, because undo is not a children's app. It is nonetheless held to the most family-safe content rating Google offers, with alcohol, gambling and dating blocked on top of that (section 8.2) — and undo Plus removes ads entirely. If you believe a child is using the app in a way that concerns you, please contact us.

13. Security

Your data is protected by iOS app sandboxing and device encryption; if you use a passcode, Face ID or Touch ID, your device encrypts app data at rest. Corner Live data is protected by Apple's CloudKit security and your Apple Account. Because we store nothing, there is no database of ours that can be breached.

14. International users

undo is developed in Pakistan and available worldwide. As we receive no personal data, there is no international transfer of your data to us. Data you place in iCloud, purchase data held by Apple and RevenueCat, and advertising data held by Google LLC (established in the United States), may be processed in other countries under those companies' own safeguards, including Standard Contractual Clauses where applicable.

15. Changes to this policy

If we change how undo handles data, we will update this page and revise the "Last updated" date above. Material changes will also be noted in the app's release notes. Continuing to use undo after an update means you accept the revised policy.

16. Contact us

Questions about privacy, or about anything in this policy:

THE SOLANA LABS (PRIVATE) LIMITED
Email: [email protected]
Minhaj Chowk, Saghar, Talagang, Pakistan
CUIN 0347376