What it reads from Apple Health
Resting heart rate, heart rate, heart rate variability, sleep, weight, blood pressure and steps, only the ones you allow. It never writes to Apple Health.
What you give it
Your pouches, cravings and their triggers, your if-then plans, the daily check-in, your can price, the setup answers (how much you use, one question about your heart, four questions on mood) and your quit date.
Where it goes
Nowhere. There is no iCloud sync, no account, no analytics SDK and no crash reporter that sends data off the phone. If you turn on Share With App Developers in iOS Settings, Apple passes us its crash reports and usage data for the app; that is your choice in iOS, not ours. The phone and the watch talk to each other directly.
Research mode
Off unless you turn it on, with a switch for each kind of data. When on, it sends the data you chose, encrypted on your phone, to a research partner's study under a study ID that does not name you. It is off in the App Store build until an ethics board has approved a study.
Export and delete
Export everything, free, whether or not you buy. Delete all data from Settings; it is gone from the phone and the watch.
Paying
The $15 goes through Apple. We never see your card or your name.
This website
No cookies. Page views are counted by Cloudflare Web Analytics, which stores nothing in your browser and does not follow you to other sites. One form: the launch sign-up. It stores your email, whether you want to beta test and when you signed up, in a database in our Cloudflare account, and nothing else. We use it to email you once when the app is out and, if you asked, to invite you to TestFlight. Then we delete the list. Write to us to be taken off it sooner.