Cravings Ace is a tool for interrupting cravings. That only works if you are honest with it, and you will only be honest with it if you trust it. So the short version: your craving history is yours, we do not sell it, and we collect the least we can get away with.
This policy covers the Cravings Ace website at cravingsace.app and the Cravings Ace iOS app. The app has not launched yet, so the app sections below describe how it is built and what will apply the day it ships.
1. What the website collects
Waitlist signups
If you enter your email address to join the waitlist, we store that address so we can tell you when the app launches. Alongside it we store how you found us, so we know which campaigns are worth running:
- Your email address.
- Campaign parameters from the link you arrived on — source, utm_source, utm_medium, utm_campaign, utm_content, and utm_term.
- The page path you landed on and the time your visit was first recorded.
Waitlist contacts are stored with Resend, our email provider. We only email you about the Cravings Ace launch. Every message has an unsubscribe link, and unsubscribing removes you from the list.
To stop the form being abused, we briefly check the IP address a signup came from so one source cannot flood the list. That check happens in memory as the request is handled and is not stored with your contact record.
Website analytics
We use Google Analytics to count visits, see which pages people read, and tell which campaigns bring people who actually sign up. This records things like page views, approximate location derived from IP address, device type, and referring site. It does not record your email address: when you join the waitlist we record only that a signup happened and which campaign it came from.
Google Analytics sets cookies. In the EEA, the UK, and Switzerland we do not set them until you accept the banner. Everywhere else you can decline using that same banner, and we honour it.
Local storage in your browser
We store two small values in your own browser: the campaign you first arrived from, so a return visit does not overwrite it, and your cookie choice. Clearing your browser data removes both.
2. What the app collects
Cravings Ace is built so that the sensitive part of your data never reaches us.
- Your craving history stays in your private iCloud. Your check-ins, reflections, triggers, and logs sync through your own Apple account. We cannot read them.
- Analytics are anonymous and restricted to a fixed list. The app may only send a predefined set of events — that onboarding finished, that a check-in started, that a paywall appeared. It is technically prevented from sending free text. It never sends names, reflections, notes, transcripts, contacts, health data, or location.
- No advertising identifiers. The app disables collection of the IDFA and IDFV, and we do not track you across other companies' apps or websites.
- Crash diagnostics. If the app crashes, we receive a technical crash report so we can fix it. These describe the failure, not your content.
3. Subscriptions and payment
Subscriptions are sold and processed through the Apple App Store. We never see or store your card number, billing address, or Apple ID password. Apple tells us only whether a subscription is active.
4. Who we share data with
We do not sell your personal information, and we do not share it for advertising. We use a small number of service providers to run the product, each handling only what their job requires:
- Resend — stores waitlist contacts and sends our email.
- Google Analytics — website and in-app usage measurement.
- Google Firebase — crash reporting and app configuration.
- Vercel — hosts this website.
- Apple — App Store distribution, payment, and iCloud sync.
We may also disclose information where the law requires it, or to protect against fraud or abuse.
5. How long we keep it
Waitlist contacts are kept until you unsubscribe or ask us to delete them, and we will clear the list once the launch announcements it exists for have been sent. Analytics records are retained on Google's standard schedule. Data in your iCloud stays until you delete it.
6. Your rights
You can ask us to:
- Tell you what personal data we hold about you.
- Correct anything inaccurate.
- Delete your data, including removing you from the waitlist.
- Provide a copy of it.
- Stop using it for a particular purpose.
Email support@cravingsace.app and we will action it. Depending on where you live you may also have the right to complain to your data protection regulator.
7. Children
Cravings Ace is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child has given us data, email us and we will delete it.
8. International transfers
Our service providers operate in the United States and elsewhere, so your information may be processed outside your country. Where required, those transfers rely on standard contractual clauses or an equivalent safeguard.
9. Changes
If we change this policy we will update the date at the top of this page, and for anything significant we will say so by email or in the app before it takes effect.
10. Contact
Cravings Ace is operated by MDApps, LLC. For any privacy question, email support@cravingsace.app.