Privacy policy

Effective October 21, 2026 · Version 2026-10-21

This policy explains what data MikeTech, LLC handles when you use the CigCount app, the cigcount.com website and the launch notice: what for, with whom, for how long, and what rights you have.

The short version: your smoking log stays on your phone. CigCount has no accounts, shows no ads, uses no third-party analytics and doesn’t sell data.

Who is responsible

MikeTech, LLC, a limited liability company organized in Delaware, United States (“MikeTech”, “we” or “us”), is the controller of the data it handles and that is described here. What stays on your phone is under your control: MikeTech has no access to it.

Legal representative under Chilean law (Law 21.719): Miguel Carrizo, Managing Member of MikeTech, LLC, reachable at support@cigcount.com.

For now, CigCount isn’t offered in the European Union, the European Economic Area, the United Kingdom or Switzerland: the app isn’t published in those countries’ stores and the launch notice isn’t aimed at people who live there.

For any privacy question or request, write to support@cigcount.com.

Summary

• Your log (profile, plan, cigarettes, resisted urges and reminders): you enter it in the app and it stays on your phone until you delete it. It never reaches MikeTech.
• Error reports (diagnostic ID, technical errors, app starts, app version and phone model): the app sends them if “Send error reports” is on, to find and fix bugs. Legal basis: legitimate interest. They’re kept for 90 days with the ID; after that, only summaries without the ID remain.
• Purchase data (random identifier and purchase history): it goes through RevenueCat to activate and keep Premium. Legal basis: performance of a contract if you buy Premium, and legitimate interest to check your Premium status. It’s kept for as long as our contract with RevenueCat lasts (unless you ask us to delete your purchase history) and as the law requires.
• Notice email (email, language, dates and consent version): you leave it in the form on cigcount.com so we can tell you when CigCount launches, tell you about important changes and, if you ask, send you news. Legal basis: consent. It’s kept until the launch email or until you unsubscribe, and for 12 months after you confirm it at most; with news, until you unsubscribe; unconfirmed, 7 days.
• Connection data (IP address and browser signals): your browser sends it when you use the form, and it helps stop spam and abuse. Legal basis: legitimate interest. MikeTech doesn’t store it.
• Emails you send us at support@cigcount.com: to reply to you. Legal basis: legitimate interest. They’re kept for up to 24 months after the last reply.
• Store comments (score, title, text, our reply, country or language, app version, dates and the comment’s identifier in the store, without your name): the App Store and Google Play publish them, and we use them to read them, reply and improve the app. Legal basis: legitimate interest. After 400 days we delete the title, the text and the reply, and what remains is the score, the country or language, the app version, the dates and the comment’s identifier in the store.
• Store reports (sales, subscriptions, installs and stability): the App Store and Google Play send them to us so we can follow the app’s sales and stability. Legal basis: legitimate interest. We keep only aggregate statistics; for sales, totals per day, country, currency and product, and never the order number or any location beyond the country.

The CigCount app

What stays on your phone

Everything you log lives only on your phone: the name you choose, your currency, the price and size of a pack, your motivations, your trigger times, your plan, the time of each cigarette and of each urge you resisted, and your reminders. This information is about your smoking habit, so it is health data. MikeTech has no access to it: it isn’t sent to any server.

The app keeps it in its private storage on your phone, protected by the operating system. If you have iCloud or Google backup turned on, this information is part of your backup, which Apple or Google manage in your account. If you restore your backup on another phone, your data comes back with you. The app also keeps on the phone the error reports it hasn’t sent yet (it discards them after 7 days, the next time you open the app) and, if some saved data can’t be read, a copy to try to recover it. All of that is deleted with “Delete my data”.

Export data (Premium, in Settings → Data and privacy) creates a JSON or CSV file with your history and opens the system share sheet so you can send it wherever you want. The app doesn’t send it anywhere. That temporary copy is deleted from your phone the next time you export, when you use “Delete my data” and, on iOS, as soon as you close the share sheet; on Android, at the latest the next time the app starts from scratch.

Notifications: reminders are scheduled on the phone itself. CigCount doesn’t use push notifications or ask for a push token.

Delete my data (Settings → Data and privacy) deletes your profile, your plan and your history from the phone, and overwrites the file where they were stored. It doesn’t cancel your subscription and it doesn’t delete system backups that already exist: those are replaced by your next backup. It doesn’t delete your history at RevenueCat either (the Your data and deletion guide explains how to ask for that). If you had turned off error reports, that choice stays in place after the deletion. Uninstalling the app also deletes its data from the phone.

Error reports

When the app fails, it sends a technical report to a MikeTech server so we can find and fix the bug. A report includes:

• The type of error, the technical message and the list of code functions where it happened. Before sending it, the app automatically removes email addresses, links, identifiers, long numbers, quoted text and your profile name (if it has 3 characters or more).
• The screens and actions just before the error (for example, “opened Progress”), with no values or times.
• Whether the error closed the app.

The app also reports each time it opens and when you return to it after more than 30 minutes, so we can measure the stability of each version. That opening report carries the time you opened the app, not the time of any cigarette you log. Every report carries the event’s date and time according to the phone’s clock, an event ID, the app’s version and build number, the platform, the operating system version, the phone model, the environment (test or production), a random diagnostic ID created by the app and a session ID.

Reports are designed not to include your name, your email, your location, your time zone, your language, the phone’s name, advertising identifiers or anything from your smoking log (counts, goals, dates, prices or plan). Message text is cleaned automatically, but no filter is perfect, so we treat reports as pseudonymous personal data: they don’t identify you on their own, but the diagnostic ID lets us group the reports from the same phone.

When a report is sent, your phone connects to the internet and the connection reveals its IP address. Our server uses it only in memory, to limit abusive traffic, and doesn’t store it.

To detect whether the app was restored on another phone, CigCount keeps on the phone itself a code derived from the device identifier. That code is never sent to MikeTech; it only travels inside your backup. If it doesn’t match the phone when the app opens, the app creates a new diagnostic ID.

You can turn them off at any time in Settings → Data and privacy → “Send error reports”. The first time you open the app, a notice on the welcome screen explains error reports and lets you turn them off; until you move past that notice, the app sends nothing and doesn’t create the diagnostic ID. The switch is on by default. When you turn it off, the app empties any pending reports, deletes the diagnostic ID and sends nothing else. If you turn it back on, a new ID is created.

Where and for how long: reports reach a MikeTech server hosted by Hostinger in a data center in Boston, United States, through Cloudflare’s network. Reports with your diagnostic ID are deleted after 90 days. After that, only summaries of each error remain (type and the already cleaned technical message), without the ID, while the error is open and, once resolved, for up to 180 days after it last occurred, plus monthly counts with no identifiers. The server’s backups are encrypted and replaced within 30 days at most.

Legal basis: our legitimate interest in the app working well and being secure. You can object at any time with the switch or by writing to us.

Access and deletion: if you want a copy of your reports or want us to delete them, send your diagnostic ID (Settings → Data and privacy → “Diagnostic ID”) to support@cigcount.com. If you already used “Delete my data”, turned off the switch or restored the app on another phone, the previous ID no longer exists on your phone and we can’t find those reports; in that case they’re deleted automatically after 90 days. When we delete reports because of a request, we delete every report that carries your ID. Three things remain in the database, none of them with your ID in the clear: the record of the deletion (a code derived from the ID, how many reports were deleted and the date), which we keep for as long as the service exists so we can show that we did it; summaries of errors, without an ID, that other phones share; and the monthly counts. Deleted reports can remain in backups until they’re replaced, within the period above.

Purchases and Premium

Payments are processed by Apple (App Store) or Google (Google Play), as independent controllers and under their own terms. MikeTech never receives your card details.

To manage subscriptions we use RevenueCat, which acts on MikeTech’s behalf. Each time it opens, the app asks RevenueCat about your Premium status using a random identifier created by the service itself. We don’t send it your name, your email or your log. RevenueCat receives the purchase information that the stores provide (products, dates and subscription status) and the technical device and connection data its service needs, as described in its privacy policy. RevenueCat keeps that data for as long as our contract with it lasts and as the law requires; if you ask us to delete your purchase history, we delete it (the Your data and deletion guide explains how).

Store reports: the App Store and Google Play send us reports on sales, subscriptions, installs and app stability. Google Play’s sales and earnings reports have one row per order, with the order number, the device model and the buyer’s approximate location (city, region and postal code). We process them in memory and keep only totals per day, country, currency and product: we don’t keep the order number, the device or any location beyond the country. From the other reports we keep only aggregate statistics.

Legal basis: performance of your subscription contract, if you buy Premium; our legitimate interest in knowing whether you have Premium each time you open the app; and our legitimate interest in knowing the app’s sales and stability, for the store reports.

The cigcount.com website and the launch notice

The website

The website uses no cookies and no analytics, and it makes no third-party requests when it loads. It keeps in your browser, with localStorage, only the theme and the language you chose, to remember them. Those values stay in your browser and aren’t sent anywhere.

The notice form uses Cloudflare Turnstile to tell people from bots. Turnstile loads only when you start using the form: at that point Cloudflare analyzes technical signals from your browser and your IP address. To validate the check, our server sends Cloudflare the result and your IP. MikeTech doesn’t store your IP. To limit abuse we use, for a short window, an irreversible code derived from your IP with a secret key, which is never stored in our database. While it verifies, Turnstile may use its own storage in your browser, under Cloudflare’s policy.

Legal basis: our legitimate interest in protecting the website from spam and abuse.

The launch notice

Leaving your email is voluntary: without it, we simply can’t notify you. If you leave it so we can tell you when CigCount launches:

• What we store: your email, the language, the dates (sign-up, confirmation and sends), the version and language of the text you accepted, and whether you asked for news. We don’t store your IP or browser data.
• Double opt-in: we send you an email to confirm your address. If you don’t confirm within 7 days, we delete it.
• Without news: we use your email only to write to you when CigCount is available and, before that, to tell you about an important change to this policy or the terms. We delete it when we send you the launch email. If that email doesn’t go out within 12 months of your confirmation, we delete it anyway.
• If CigCount is on only one store so far: the launch email reaches you shortly after you confirm (usually within the hour), with the link to that store, and says the other one is coming. If you didn’t check news, we delete your email after that email; if you did, we’ll tell you in the news when it reaches the other store.
• With news: if you check the box, which is optional, we send you at most one news email a month, until you unsubscribe.
• Unsubscribing: every email has an unsubscribe link: open it, tap “Unsubscribe and delete my email” and we delete your address right away. Your email app may also offer a one-click unsubscribe button that does the same. If you prefer, write to support@cigcount.com.
• If Resend rejects an address as invalid when we send, we delete it. If you had already confirmed it for the launch notice and the rejection comes on the email that turns on news, we delete only that news request and keep using the address for the notice.
• Emails are sent through Resend, with no tracking pixels and no tracked links.

The notice database automatically keeps a history to recover from failures: a deleted email can remain in that history for up to 7 days, until it’s replaced. Resend keeps a copy of each email sent (address, subject and content) and its technical log for 30 days, and its backups last up to 7 days longer, according to Resend’s documentation: removing your email from the list doesn’t delete those copies right away. If an email bounces or is marked as spam, Resend also keeps that address on its suppression list so it doesn’t write to it again; we remove it from that list if you ask us to.

Legal basis: your consent. You can withdraw it at any time with the unsubscribe link, without affecting what we did before with your permission.

Emails to support

Emails you write to support@cigcount.com go through Cloudflare’s forwarding service and arrive in MikeTech’s mailbox at Hostinger. We use them to reply to you and keep them for up to 24 months after the last reply, unless the law requires us to keep them longer.

Legal basis: our legitimate interest in answering your questions.

Comments in the stores

When you post a comment with a score about CigCount on the App Store or Google Play, the store makes it available to MikeTech. We keep the score, the title, the text, our reply, the country or language, the app version, the dates and the identifier the store gives the comment, to read them, reply and improve the app. We don’t keep your username. 400 days after the comment’s date or its latest edit (whichever is more recent) we delete the title, the text and the reply. What remains is the score, the country or language, the app version, the dates (of the comment, of its latest edit, of the reply and of the last time we downloaded it) and the identifier the store gives the comment.

Legal basis: our legitimate interest in responding to feedback about the app.

Who else handles data for us

These providers handle data on MikeTech’s behalf, only for the purposes in this policy and under data processing agreements (with the Cloudflare exception explained below):

• Cloudflare, Inc. (United States; global network): hosting of the website and its server, notice database, Turnstile, abuse limits, DNS, forwarding of support@cigcount.com and the network in front of error reports.
• Resend (Plus Five Five, Inc., United States): sending the notice emails.
• RevenueCat, Inc. (United States): subscription management.
• Hostinger International Ltd. (Cyprus): error report server, located in Boston (United States), and support mailbox.

Apple and Google handle payment data, store comments and your backups as independent controllers, under their own policies. Cloudflare is also an independent controller of the technical signals Turnstile collects (among others, your IP address, your connection’s TLS fingerprint, your browser’s User-Agent and the site where it’s used): it uses them to improve its bot detection, under its Turnstile Privacy Addendum.

We don’t sell your data or share it for advertising, and we don’t use it to build profiles.

International transfers

MikeTech processes the data in this policy in the United States (the error report server at Hostinger, in Boston, and the services of Cloudflare, Resend and RevenueCat) and in Chile, from where the service is run and where we keep encrypted backups. If you live in Chile, your data is transferred to the United States; if you live in another country, to the United States and to Chile. The United States hasn’t been recognized as a country with an adequate level of protection under Chilean law. With our providers we rely on the safeguards in their data processing agreements: the standard contractual clauses approved by the European Commission or, when the provider is certified, the EU-U.S. Data Privacy Framework. If you want a copy of those safeguards, write to us.

Security

The app’s and the website’s connections use HTTPS. The panel where we review reports isn’t reachable from the internet, only from a private network. Only the submission route of the report server is public; it checks the format of every report and applies rate limits. Backups are encrypted, and our technical logs leave out emails, tokens and IP addresses. We also collect the minimum we need.

No system is perfect. If a security incident affected your data, we would notify you and the authorities when the law requires it.

Your rights

Depending on where you live, the law gives you rights over your personal data, including under Law 19,628 and, from December 1, 2026, Law 21,719 in Chile, and the CCPA in California. You can:

• Access your data and get a copy.
• Correct it if it’s inaccurate.
• Ask us to delete it.
• Object to processing based on legitimate interest, such as error reports.
• Ask us to restrict its use.
• Receive it in a portable format.
• Withdraw your consent, as with the launch notice, at any time.
• Complain to the data protection authority in your country. In Chile, from December 1, 2026, that is the Agencia de Protección de Datos Personales.

How to exercise them: write to support@cigcount.com. If it’s about your error reports, include your diagnostic ID; if it’s about your purchases, the order number from your Apple or Google receipt; if it’s about the notice, write from the email you signed up with. We may ask for information to verify that the request is yours. We reply within 30 days at most, free of charge. From December 1, 2026, if you live in Chile and ask us to temporarily block your data while we resolve a request to correct, delete or object, we reply within 2 business days and don’t use your data in the meantime (we only keep it).

Your log data is only on your phone: you can see it in the app (on the free plan, the last 30 days), export it with “Export data” (Premium) and delete it with “Delete my data”. The Your data and deletion guide walks through each case.

If you live in California: we collect identifiers (the diagnostic ID; your email, if you leave it in the notice or write to us; and, incidentally and without storing it, your IP address, which the report server uses only in memory to limit abuse and which, on the notice form, we send to Cloudflare for Turnstile), technical app usage information (errors and app starts), commercial information (purchase history, through RevenueCat, and the stores’ sales reports) and the content you write to us or post (the emails you send us, with your address and their content, and your comments in the stores, with their score), for the purposes in this policy. That data comes from you, from your browser, from the app on your phone and from the stores. We don’t sell or share personal information, as the CCPA defines those terms. You can ask to know what data we have, to correct it or to delete it, and we won’t treat you differently for exercising your rights. The website doesn’t track you across sites, so Do Not Track (DNT) or Global Privacy Control signals don’t change anything.

We don’t make automated decisions that have legal effects on you.

Children

CigCount and the launch notice are for people aged 18 or over. We don’t knowingly collect data from minors. If you believe a minor gave us their email, write to us and we’ll delete it.

Changes to this policy

If we change this policy, we’ll publish the new version here with its date. If the change is significant, we’ll let you know in the app or by email to people on the launch notice before it takes effect. If you write to us, we’ll send you previous versions.

Contact

MikeTech, LLC · 131 Continental Dr, Suite 305, Newark, DE 19713, United States (address of its registered agent in Delaware) · support@cigcount.com