Legal

Consumer health data notice

Last updated 26 October 2026

The short version. Your logs, vibe checks and Apple Health data stay on your iPhone, and we never receive them. The only data we receive that could count as "consumer health data" under some US laws is the fact that you use MindVape and which of its features you use. We don't sell it, we don't use it for ads, and you can ask us to delete it.

This notice is for residents of Washington (My Health My Data Act), Nevada (SB 370), Connecticut and other US states with consumer health data laws. It adds to our privacy policy. "We" means The Crafted Code Ltd, a company registered in England and Wales.

What stays on your iPhone and never reaches us

Puffs, sessions, day answers, nicotine-in-the-liquid figures, liquids and strengths, vibe checks (stress, mood, wanting to vape), moments, notes, photos, Heads-ups, and sleep and steps read from Apple Health. We don't collect any of this. It's stored only on your iPhone, is left out of iCloud and iPhone backups, and leaves your phone only when you choose to export, back up, move or share it yourself.

What we collect that could be consumer health data

These laws define consumer health data broadly, so to be safe we treat the following as consumer health data, because together they could suggest that you vape:

App usage events: that you opened MindVape, which screens you opened, that a session started or was saved, that something was logged and how (for example a tile or the Lock Screen), and that you added a vape or liquid. They never include amounts, nicotine, moods, names or any text you type.
Crash reports from the app.
Purchase records: whether you bought Plus or left a tip, the product, price and renewal status.

Each is tied to a random ID created for your installation of the app, not to your name, email or Apple Account.

Where it comes from

From the MindVape app on your iPhone. Purchase records also come from Apple, through RevenueCat.

Why we collect it

Usage events and crash reports: to understand which features are used, fix bugs and improve the app.
Purchase records: to give you Plus, restore it and handle renewals, trials and refunds.

We never use it for advertising, to build a profile of you, or to make decisions about you.

When we collect it

Usage events and crash reports are sent only after the age check, and you can turn them off at any time in Settings › Privacy and data › Usage and crash reports. Purchase records are needed to provide Plus, which you ask for when you buy it.

Who we share it with

Only with service providers that process it for us under contract:

Google LLC (Firebase Analytics and Crashlytics): usage events and crash reports.
RevenueCat, Inc.: purchase records.

Apple handles payments as an independent company. We have no affiliates. We don't sell consumer health data, and we don't share it with anyone else except where the law requires it.

Your rights

You have the right to:

confirm whether we collect, share or sell your consumer health data, and get a copy of it;
get a list of every third party and affiliate we've shared it with, and how to contact them;
withdraw your consent;
have your consumer health data deleted, including by the providers above.

To use these rights, email hello@thecraftedcode.com. There's no account, so for purchase records please include the order ID from your Apple receipt. Usage events are tied only to a random ID we can't link to you; turning them off stops new ones, and existing ones are deleted after 2 months (crash reports after 90 days). We'll reply within 45 days, free of charge, and tell you if we need up to 45 more days.

If we turn down your request, you can appeal by replying to our answer with "Appeal" in the subject. We'll answer within 45 days and explain our decision. If you're still not happy, you can contact the Washington State Attorney General (atg.wa.gov) or your own state's attorney general.

Contact

hello@thecraftedcode.com · The Crafted Code Ltd, company number 14639993, registered in England and Wales