Privacy Policy
PRIVACY POLICY
Privacy Policy
Last updated: May 7, 2026
This Privacy Policy describes how Cardboard LLC ("we," "us," or "our") collects, uses, and shares information about you when you use the Puff Lung mobile application (the "App"). Please read this policy carefully. By using the App, you agree to the practices described here.
1. Information We Collect
Information you provide
When you use the App, you may voluntarily provide information including:
The number of times you vape or smoke per day
An estimated daily baseline and target decrease rate
The duration you have been vaping
Your device type (e.g., disposable, pod, mod)
Estimated weekly spending on vaping
Triggers, motivations, and prior quit attempts
Detox session preferences
This information is stored locally on your device in iOS UserDefaults. We do not maintain a server-side copy of this information.
Information collected automatically
The App does not collect personal identifiers, browsing activity, location, contacts, photos, or any analytics data unless explicitly stated below.
Subscription information
If you purchase a subscription, payment is processed by Apple via the App Store. We do not see, collect, or store your payment details. Apple shares anonymized purchase metadata (e.g., subscription start, expiration, product identifier) with our subscription provider, RevenueCat, so we can verify your entitlement to premium features. See .
2. How We Use Information
We use information collected through the App to:
Display your usage data, progress, and lung health visualization
Adjust daily goals and decrease pacing
Surface a subscription paywall and confirm entitlement to premium features
Improve the App and develop new features
Because data is stored locally, we generally cannot access your information unless you export or share it.
3. Sharing of Information
We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We share limited information only with:
Apple Inc. for App Store delivery, subscription processing, and StoreKit functionality
RevenueCat, Inc. for subscription verification and management
Service providers acting on our behalf (e.g., crash reporting, support tools), bound by confidentiality
We may also disclose information if required by law, subpoena, or to protect rights, property, or safety.
4. Data Storage and Security
The App stores your data locally on your device using iOS UserDefaults and App Group containers (used to share information between the main app and the home screen widget). When your subscription state is required, it is read from Apple's StoreKit and verified by RevenueCat.
We use commercially reasonable technical and organizational measures to protect your information. No method of electronic storage is 100% secure, however, and we cannot guarantee absolute security.
5. Your Rights and Choices
Delete your data
You can delete all locally stored data at any time by tapping Settings → Reset All Data in the App. This clears your history, plan, and onboarding state. Uninstalling the App also removes locally stored data.
Subscription management
Subscriptions are managed through Apple. You can view, change, or cancel a subscription via Settings → [your Apple ID] → Subscriptions on your device.
California residents (CCPA)
You have the right to know what personal information we collect, request deletion, and not be discriminated against for exercising these rights. Because we do not maintain a server copy of your information, deletion is effected by your action in the App.
European Economic Area / United Kingdom (GDPR / UK GDPR)
You have rights to access, correct, delete, restrict, or port your personal data, and to object to processing. The lawful basis for our limited processing is performance of a contract (subscription verification) and legitimate interests. You can also lodge a complaint with your local supervisory authority.
6. Children's Privacy
The App is intended for adults aged 18 or older (or the legal age of majority in your jurisdiction). The App is not directed at children under 13 and we do not knowingly collect information from children under 13. If you believe a child under 13 has provided us with personal information, contact us and we will delete it.
7. Health Disclaimer
The App is provided for self-tracking and motivational purposes only. It is not a medical device, does not provide medical advice, diagnosis, or treatment, and should not be relied upon for any health-related decision. Consult a qualified healthcare provider before making any change to your nicotine, tobacco, or vaping use.
8. Third-Party Links and Services
The App may reference third-party websites or services. We are not responsible for the privacy practices of those parties. Review their policies independently.
9. International Users
The App may be used from countries outside the United States. By using the App, you consent to the transfer, processing, and storage of information in the United States and other jurisdictions where we and our service providers operate.
10. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date at the top reflects the most recent revision. Material changes will be communicated through an in-app notice or App Store update notes. Continued use of the App after changes take effect constitutes acceptance of the revised policy.
11. Contact Us
If you have questions about this Privacy Policy or our practices, contact:
Cardboard LLC
Email: dillon@cardboardllc.net
Mailing address: 148 Arundel Beach Road, Severna Park, MD