Privacy policy

Basalt is a smoking-cessation app. What you declare in it is as intimate as data gets: your consumption, your cravings, your slips. Here is exactly what happens to it.

Last updated: 26 August 2026

In short

• Basalt works without an account. Nothing to create, nothing to confirm by email.
• Everything you declare is written on your device, in the app’s private storage, and is sent to no server of ours — we have none.
• We sell nothing, profile nobody and show no advertising. No health data is shared with anyone.

Who is the data controller

Basalt is published by Thomas Boda, a sole trader (entrepreneur individuel) registered in France under company number (SIREN) 848 848 479, whose registered office is at 66 avenue des Champs-Élysées, 75008 Paris, France . Questions about this policy: privacy@getbasalt.app.

What Basalt records, and where

The data below is stored locally, in the app’s private storage on your iPhone. It is not synchronised, not backed up by us, and not readable by us:

• your onboarding answers: daily consumption, pack price, how long you smoked, risky moments;
• your quit date, and whether a stone has already been celebrated;
• your craving and slip log: when an SOS was opened, a trigger if you pick one, an outcome if you give one;
• your display preferences.

This data may be included in an encrypted backup of your iPhone (iCloud or computer), depending on the Apple settings you chose. That backup is Apple’s, not ours.

What leaves your phone

Purchases

If you subscribe to Basalt+, payment is handled by Apple, under App Store terms. We never see your payment details.

To know whether your subscription is active, the app uses RevenueCat, Inc. (United States), a processor under the GDPR. RevenueCat receives an anonymous identifier generated by the app, the purchase receipt passed on by Apple, technical information (device model, OS version, store country), the identifier for vendor (IDFV, specific to your iPhone and our apps, never an advertising identifier) and the request IP address, recorded server-side. No cessation data — not your consumption, not your cravings, not your slips — is sent to it. Legal basis: performance of the subscription contract. Transfers outside the European Union rely on the European Commission’s standard contractual clauses. RevenueCat’s policy: revenuecat.com/privacy.

Usage analytics

As of today, no analytics or tracking tool is active in the app. If that changes, this page will be updated before the version concerned is published, and the App Store listing will declare it.

What Basalt does not do

• No advertising, no advertising identifier, no cross-app tracking.
• No resale, no rental, no sharing with commercial third parties.
• No location tracking.
• No access to your contacts, your photos or your Health app.

Health data

What you declare about your tobacco use is health-related data. That is precisely why it does not leave your device: the only processing is the one running locally, to show you your own figures. Basalt sends this data to no recipient, ourselves included.

Basalt is not a medical device and replaces neither a doctor nor a smoking-cessation specialist. In France, Tabac info service answers on 39 89 (free of charge).

Retention and deletion

Local data is kept for as long as the app is installed. Deleting the app erases all of its local storage: that is the complete, immediate and permanent deletion of everything you declared. No copy remains with us, since none ever reached us.

Subscription data held by RevenueCat and Apple follows their own retention periods; it is needed as proof of purchase and for accounting obligations. To request its deletion, write to privacy@getbasalt.app.

Your rights

Regulation (EU) 2016/679 gives you rights of access, rectification, erasure, restriction, objection and portability. For local data, you exercise those rights directly on your device: you hold the only copy. For subscription data, write to us — we answer within one month.

You may also lodge a complaint with the French data protection authority, the CNIL: cnil.fr.

Minors

Basalt is intended for adults. We do not knowingly collect data about minors.

This website

getbasalt.app is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. The site sets no cookies, uses no analytics and loads no third-party script. The host’s technical logs (IP address, timestamp) are kept by it for service security.

Changes

Any change to this policy will be published here with a new update date. Substantial changes will be announced in the app.

Terms of use · Support