Privacy Policy

This policy explains how undo (the "app") handles your information. undo is published by THE SOLANA LABS (PRIVATE) LIMITED ("we", "us"), a company registered in Pakistan under CUIN 0347376.

We wrote undo to be useful without knowing who you are. Quitting nicotine is personal, and the app is built so that the sensitive parts of it — when you last vaped, what triggers your cravings, how you are doing today — never leave your phone unless you deliberately choose to share them.

1. Information we collect

We collect nothing. We operate no servers, no databases and no user accounts for undo. We cannot see your quit date, your craving log, your notes, your savings, your check-ins or your usage of the app, because none of it is transmitted to us.

We never ask for your name, email address, phone number, date of birth or location, and the app contains no analytics, telemetry, crash-reporting, advertising or attribution software of any kind. undo does not use the Advertising Identifier (IDFA) and does not track you across apps or websites.

2. Information stored on your device

undo keeps everything it needs locally, in the app's private storage on your iPhone. This includes:

• The date and time of your last vape or cigarette, which drives your progress timeline
• Your craving log — intensity, time, and any triggers or notes you record
• Your savings settings, such as how much you used to spend and your goals
• Any taper plan you set up
• Breathing session history, articles you have read or bookmarked, and milestones reached
• App preferences: reminder times, quiet hours, haptics, app icon, and similar settings

This data is protected by iOS. It is included in your iPhone backups (iCloud Backup or encrypted local backups) if you have backups enabled — those backups are controlled by Apple and by you, not by us. Deleting the app removes this data from your device.

3. Corner Live — the one feature that shares data

Corner Live is optional and off until you turn it on. It lets you connect with one person — a partner, friend or family member — so they can see how you are doing and cheer you on.

When you use Corner Live, a small amount of information is stored in your own private iCloud database and shared directly with the one person you invite, using Apple's CloudKit sharing. Specifically:

What	Why
Display name	A name you choose for yourself so your partner knows who is writing. It does not have to be your real name.
Quit start date	So your partner can see which day you are on.
Daily check-ins	How your day went, plus any short note you choose to write.
Reactions	Encouragement your partner sends you, and that you send back.
SOS signals	If you send one, so your partner knows you need support right now.

Important points about this data:

• It lives in your personal iCloud account, held by Apple and governed by Apple's Privacy Policy — not on any server of ours.
• We cannot read it. We have no access to your iCloud data.
• It is shared with exactly one person: the partner who accepts your invitation. It is never public.
• Your craving log, notes to yourself, savings and other private data are not part of Corner Live.
• You can end the connection at any time in the app, which stops sharing. You can also remove the shared data from iCloud in your device's iCloud settings.

If you never turn Corner Live on, nothing at all leaves your device.

4. Apple Health

If you allow it, undo writes your completed breathing sessions to Apple Health as mindful minutes. That is the only interaction with Health, and it is one-way.

undo never reads any of your health data — not your mindful minutes, not your heart rate, not anything else. iOS asks for read permission as part of connecting to Health, but the app makes no read requests. You can revoke this permission at any time in Settings → Health → Data Access & Devices, and you can turn the feature off inside undo. Health data is never transmitted off your device by us.

5. Photos

When you tap "Save image" on a progress card, undo adds that image to your photo library. It has add-only access: it cannot see, read or browse your existing photos.

6. Notifications

If you allow notifications, undo sends you reminders and encouragement — daily check-ins, milestone celebrations and support at times you are likely to find hard. These are scheduled on your device; we do not send them and we cannot see whether you open them.

If you use Corner Live, push notifications are also delivered through Apple's Push Notification service so you know when your partner checks in, reacts or sends an SOS. Apple handles delivery; the content comes from your shared iCloud data, not from us. You can turn notifications off at any time in iOS Settings.

7. Purchases (undo Plus)

undo offers optional paid subscriptions and a lifetime purchase. All payments are processed by Apple through the App Store — we never see or handle your card details, billing address or Apple Account credentials.

To check whether your purchase is active across your devices, we use RevenueCat, Inc., a subscription-management provider. RevenueCat receives a randomly generated, anonymous app user identifier along with purchase and receipt information from Apple (such as which product you bought, when it renews, and the country of your App Store account). This is used only to unlock the features you paid for and to restore purchases. It is not linked to your name or email, and it never includes any of your quit, craving or health data. See RevenueCat's Privacy Policy.

8. Who your data is shared with

Party	What they receive
THE SOLANA LABS	Nothing. We have no servers and receive no data from the app.
Apple	Purchase and subscription records; iCloud data if you use Corner Live or iPhone backups; push-notification delivery.
RevenueCat	An anonymous identifier plus purchase and receipt data, to validate and restore purchases.
Your Corner partner	Only the Corner Live items listed in section 3, and only if you invite them.

We do not sell, rent or trade personal information. We do not share data with advertisers or data brokers. There is nothing for us to sell.

9. Data retention and deletion

Because your data is stored on your own device and in your own iCloud account, you control how long it is kept.

• Delete everything: delete the undo app from your iPhone. All app data stored on the device is removed with it.
• Remove Corner Live data: end the connection in the app, then, if you wish, remove undo's data from Settings → [your name] → iCloud → Manage Account Storage.
• Remove Health entries: mindful-minute entries written by undo can be deleted directly in the Apple Health app.
• Purchase records are retained by Apple and RevenueCat as required for billing, tax and fraud-prevention purposes, under their own policies.

Since we hold no personal data about you, we have nothing to delete on our side. If you have a question about this, write to us and we will confirm that in writing.

10. Your rights

Depending on where you live, you may have rights under laws such as the GDPR (Europe and the UK) or the CCPA/CPRA (California) to access, correct, delete, export or restrict the processing of your personal data, and to object to it.

Practically, undo already gives you the strongest version of these rights: the data never reaches us, it lives on your device, and you can inspect or destroy it at any time without asking anyone. If you want to exercise a right formally, contact us at [email protected] and we will respond within 30 days. For data held by Apple or RevenueCat, please also see their policies linked above.

11. Children

undo is intended for adults who want to stop using nicotine. It is not directed at children, and we do not knowingly collect any information from anyone — including children — because we do not collect information at all. If you believe a child is using the app in a way that concerns you, please contact us.

12. Security

Your data is protected by iOS app sandboxing and device encryption; if you use a passcode, Face ID or Touch ID, your device encrypts app data at rest. Corner Live data is protected by Apple's CloudKit security and your Apple Account. Because we store nothing, there is no database of ours that can be breached.

13. International users

undo is developed in Pakistan and available worldwide. As we receive no personal data, there is no international transfer of your data to us. Data you place in iCloud, and purchase data held by Apple and RevenueCat, may be processed in other countries under those companies' own safeguards.

14. Changes to this policy

If we change how undo handles data, we will update this page and revise the "Last updated" date above. Material changes will also be noted in the app's release notes. Continuing to use undo after an update means you accept the revised policy.

15. Contact us

Questions about privacy, or about anything in this policy:

THE SOLANA LABS (PRIVATE) LIMITED
Email: [email protected]
Minhaj Chowk, Saghar, Talagang, Pakistan
CUIN 0347376