ClariLung Privacy Policy

ClariLung ("we", "our", "the app") is a wellness application for quitting vaping, smoking, weed, or cigars, built by Duskfield Studios LLC. We take your privacy seriously. This policy explains what data we collect, why we collect it, and your rights over it. By using ClariLung you agree to the practices described here.

1. Information we collect

Account information: Email address, name (optional), and an encrypted password. We never store your password in readable form — it is hashed with bcrypt before being written to disk.

Quit profile: Substance type (vape / cigarette / weed / cigar), device type, nicotine level, estimated puffs per day, craving triggers, and quit method (cold turkey or taper). This powers your personalised quit plan, health timeline, and AI Coach.

Usage data: Quit date, streak history, daily puff logs (taper mode), craving events (intensity, trigger category, tool used, whether you resisted), journal entries (mood and text), and health milestones you've reached.

AI Coach conversations: Messages you send to the AI Coach and the responses generated. Stored to maintain conversation context across sessions.

Social features: Buddy connections and encouragement messages — visible only to connected quit buddies.

Subscription metadata: The platform that handled your payment (Stripe / Apple / Google), your subscription status, plan, and billing period start/end. We never see or store your payment-instrument details (card numbers, Apple ID password, etc.).

Device information: Push notification tokens (if you enable notifications). We do not collect device identifiers, precise location data, or browsing history.

2. How we use your data

• To provide and personalise your quit plan, taper schedule, and health milestones
• To power the AI Coach with context about your journey (triggers, patterns, progress)
• To sync your streak and progress to iOS widgets, Apple Watch, and Wear OS
• To connect you with quit buddies and deliver encouragement messages
• To send push notifications about milestones and check-ins you opt into
• To send transactional email (signup verification, password reset)
• To process subscription payments through Stripe, Apple, and Google
• To enforce rate limits and protect the service from abuse

3. AI Coach & third-party processors

The AI Coach sends your messages, along with your quit profile (substance type, device type, nicotine level, triggers, craving patterns), to Groq (GroqCloud) for processing. Your name and email address are never sent — the profile we send carries no information identifying you personally.

Under our agreement with Groq: Groq is not permitted to use inputs or outputs to train or fine-tune any model. We have also enabled Zero Data Retention on our Groq account, so your messages are not stored by Groq at all — not even the short-term operational logging its standard terms would otherwise permit. They are processed to generate a reply and then discarded. Processing takes place in the United States. See Groq's privacy policy and Groq's data-retention documentation.

We use the following additional third-party services:

• Stripe (web payments) — handles credit-card data for web subscriptions. We never see or store card numbers; we keep only your Stripe customer ID. See Stripe's privacy policy.
• Apple App Store (iOS payments) — handles iOS subscriptions through StoreKit. We receive transaction identifiers but never your Apple ID password.
• Google Play (Android payments) — handles Android subscriptions through Play Billing. We receive purchase tokens but never your Google account credentials.
• Resend (transactional email) — sends signup verification and password-reset emails. Receives only the recipient address and the message content. See Resend's privacy policy.
• Railway (hosting) — runs our backend, PostgreSQL database, and Redis cache. Customer data lives on Railway's managed Postgres.
• Cloudflare Workers (web hosting) — serves the web app static assets. Does not receive your account data.
• Sentry (error monitoring) — receives crash and error reports from the app, web, and backend so we can fix bugs. Reports carry the error and the code location that produced it. They are configured not to include your IP address, and not to include the contents of your Coach conversations, journal entries, or craving logs. See Sentry's privacy policy.

4. Data storage & security

• Passwords hashed with bcrypt (irreversible)
• JWT tokens stored in encrypted device storage (iOS Keychain / Android Keystore on mobile; browser localStorage on web)
• All API communication uses HTTPS / TLS encryption
• Rate limiting and account lockout against brute-force login attempts
• Parameterised database queries — no raw SQL with user input
• HTTP security headers (HSTS, X-Frame-Options, X-Content-Type-Options) prevent clickjacking, MIME sniffing, and XSS
• Audit logging on all sensitive operations
• SSL certificate pinning on the mobile app
• Non-root database role for the application — the backend cannot drop tables

If there is a breach. If your health-related data is ever acquired by someone without your authorisation, we will notify you by email at the address on your account, without unreasonable delay and no later than 60 days after we discover it. The notice will describe what happened, what data was involved, and what we are doing about it. Where the law requires it, we will also notify the U.S. Federal Trade Commission and, for larger incidents, the media — as the FTC's Health Breach Notification Rule provides. ClariLung is not a HIPAA-covered entity (see section 12), but that rule applies to health apps like ours and we follow it.

5. Data sharing

We do not sell your data. We share data only with the third-party processors listed in section 3 (each for the limited purpose described there), with your connected quit buddies (streak length, name, and encouragement messages only), and with law enforcement only if required by valid legal process.

6. Your rights (CCPA / similar)

You have the right to:

• Know what personal data we collect (this policy)
• Access / export your data — use Settings → Your data → Export my data in the app, or email us and we'll send you a JSON file of everything in your account
• Delete your data — use Settings → Danger zone → Delete account in the app, or email us. Deletion is immediate and permanent (see section 8 for details)
• Opt out of sale — we do not sell personal data, so this is automatic
• Non-discrimination — we will not change the service you receive for exercising any of these rights

To exercise any of these rights, email ceo@duskfieldstudios.com. We respond within 45 days.

7. Data retention

We retain your account data while your account is active. When you delete your account, you are signed out immediately and all your data is permanently and irreversibly removed in the same operation — there is no grace window. See Account Deletion for the full list of what is removed. We retain transactional records (subscription / payment history) we are legally required to keep for tax or audit purposes, per applicable accounting rules.

Audit logs (IP addresses, timestamps, event types — no message content) are retained for 90 days for security investigation purposes.

8. Children's privacy

ClariLung is for users 13 and older. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, contact us and we will delete it.

9. Wellness disclaimer

ClariLung is a wellness application and does not provide medical advice, diagnosis, or treatment. The AI Coach provides general wellness support and is not a substitute for professional medical or psychological care. If you experience severe withdrawal symptoms or mental health concerns, please consult a healthcare provider. In a mental health emergency, call 988 (Suicide & Crisis Lifeline) or 911.

10. Changes

We may update this policy. Material changes will be communicated via in-app notification or email at least 14 days before they take effect. The "Last updated" date at the top of this page is updated on every revision.

11. Contact

Privacy questions, data export or deletion requests, or other concerns: ceo@duskfieldstudios.com.

12. Consumer health data (and why HIPAA does not apply)

Data about quitting a substance is health data, and we treat it that way. It is worth being precise about which rules govern it. HIPAA does not apply to ClariLung — that law covers health-care providers, health plans, and clearinghouses, and the companies handling data on their behalf. We are none of those: ClariLung is sold directly to you, we do not diagnose or treat, and we do not bill insurance. Your data is therefore consumer health data rather than "protected health information" in the HIPAA sense. Saying otherwise would be marketing, not law.

What does apply, and what we hold ourselves to: the FTC's Health Breach Notification Rule (see section 4), the FTC Act's prohibition on deceptive statements — meaning this policy has to be accurate, not merely reassuring — and state consumer-health-data laws including the Washington My Health My Data Act.

Our legal basis for handling health data. The data you log here — what you use and how often, your cravings and slips, and any heart rate, HRV, VO₂ max, blood oxygen, breathing rate or sleep you connect from Apple Health or Health Connect — is special-category data under Article 9 of the UK/EU GDPR, and consumer health data under Washington's My Health My Data Act and Nevada SB 370.

We rely on your explicit consent for it (GDPR Article 9(2)(a)). That is why creating an account asks you to agree to health-data processing as a separate, unticked choice rather than folding it into acceptance of our Terms — consent to this kind of data has to be its own deliberate act, not a side effect of signing up.

You can withdraw it at any time in Settings, and withdrawing is as simple as giving it was. Because the app cannot run a quit plan without processing this data, withdrawing consent means closing your account; we will show you that path and delete your data when you do. Withdrawal does not undo processing that already, lawfully, happened.

Washington residents. Under the My Health My Data Act you may ask us to confirm whether we collect, share, or sell your consumer health data, ask which third parties have received it, withdraw consent to its collection and sharing, and request its deletion. We do not sell consumer health data, and we have never done so — so no authorisation for sale is sought or required. To exercise any of these rights, email ceo@duskfieldstudios.com; we respond within 45 days. Nevada residents have comparable rights under SB 370, exercisable the same way.