Privacy Policy

ICMR Funded Project

Last updated: October 21, 2026

SmokeMukti ("we", "our", or "us") is a digital health innovation designed to support tobacco cessation. This Privacy Policy describes how we collect, use, and protect your personal information when you use our mobile application.

1. Information We Collect

We collect the following categories of information:

• Account Information: Username, name, and password (stored securely using bcrypt hashing).
• Smoking Details: Quit date, type of tobacco product, daily consumption, packet cost, and reason for quitting — used to personalise your cessation plan.
• Progress Data: Daily tracking entries, streak counts, and badge achievements.
• Device Information: Push notification tokens (Expo push tokens) so we can send you motivational reminders.
• AI chat messages: If you use the SmokeMukti AI companion, the messages you type are sent to our AI provider (see section 8) to generate a reply. We do not store the conversation.
• Subscription status: If you subscribe to SmokeMukti Pro, Apple or Google process the payment, and RevenueCat tells us whether your subscription is active. We never see your card details.

2. How We Use Your Information

• Provide personalised tobacco cessation support and track your progress.
• Send motivational notifications and daily reminders to help you stay on track.
• Generate health benefit timelines based on your quit date.
• Improve the app through aggregated, anonymised usage patterns.

3. Data Sharing

We do not sell, trade, or rent your personal information to third parties. Data may be shared only in these circumstances:

• Research purposes: Anonymised, aggregated data may be used for academic research connected to the ICMR Short Term Studentship project at KLE VK Institute of Dental Sciences, Belagavi, where SmokeMukti began.
• Legal compliance: If required by law or to protect the safety of our users.

4. Data Storage and Security

Your data is stored in a secured MongoDB database. Passwords are hashed using industry-standard bcrypt encryption. We use HTTPS for all data transmission and employ JWT-based authentication to protect API access.

5. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, all personal data (account information, smoking details, progress records, and motivational messages) is permanently removed from our systems.

6. Your Rights

You have the right to:

• Access your personal data through the app.
• Update your profile and smoking details at any time.
• Delete your account and all associated data via our Account Deletion page.
• Opt out of push notifications through your device settings.

7. Children's Privacy

SmokeMukti is not intended for children under the age of 13. We do not knowingly collect personal information from children.

8. Third-Party Services

The app uses the following third-party services:

• Expo Push Notifications: For delivering motivational reminders.
• Groq: Generates the AI chat replies from the messages you type (conversations are not stored on our servers).
• RevenueCat: Manages SmokeMukti Pro subscriptions bought through the App Store or Google Play.
• MongoDB Atlas: Hosts the database where your account and progress are stored.
• Vercel: Hosts the SmokeMukti server that the app talks to.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the app after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact: