Effective date: October 3, 2026
Cravesurf Privacy Policy
Cravesurf is free to download, with an optional one-time Full Access in-app purchase. There is no subscription. The free version shows banner ads; Full Access removes them.
Data Collection
Cravesurf does not collect or receive personal data on servers operated by the developer. There is no account, and the app does not send your entries or settings to the developer or to any third party. In the free version, the Google Mobile Ads SDK collects data for advertising as described in Advertising and Tracking below.
The craving entries you record (date and time, intensity, trigger, and note) and your settings (quit date and time, cigarettes per day, and price per pack) are stored locally on your device. A summary used by the home screen widget (time since quitting, cigarettes not smoked, and money saved) is shared only between the Cravesurf app and its widget using Apple's App Group storage on your device.
Sharing Your Progress
If you tap Share progress, Cravesurf opens the iOS share sheet with a short text containing the number of smoke-free days, cigarettes not smoked, and money saved. The text is sent only to the app or person you choose in the share sheet, and only when you choose to share. Once shared, that copy is handled by the app or service you chose under its own terms; Cravesurf cannot change or delete it.
On-Device AI Coping Messages
With Full Access, on iOS 26 or later on a device that supports Apple Intelligence, with Apple Intelligence turned on and its on-device model ready to use, Cravesurf can write a short coping message from the trigger, intensity, and note of an entry, and answer a question you type to the coach. This is generated on your device using Apple's Foundation Models framework. The text is not sent to the developer. When the model is not available (older iOS, an unsupported device, Apple Intelligence turned off, or the model still downloading), Cravesurf shows a list of standard coping tips instead.
Notifications
If you turn on alerts before risky hours, Cravesurf schedules local notifications on your device based on your recorded entries. No remote push notification service is used. You can turn this off in the app or in iOS Settings.
Purchases
Full Access is a one-time in-app purchase processed by Apple through StoreKit. Payment information is handled by Apple and is never received by the developer.
Advertising and Tracking
The free version of Cravesurf shows a banner ad at the bottom of the screen using Google AdMob (Google Mobile Ads SDK), including on screens opened from the main tabs such as the breathing exercise and the distraction game. Cravesurf requests only ads rated for general audiences. If you buy or restore Full Access, the banner is removed and no more ads are requested once Cravesurf has confirmed your purchase with Apple. Cravesurf checks your purchase each time it starts, so a banner, the Google consent form, or the tracking request can still appear before that check finishes.
For free users, Cravesurf first runs the Google User Messaging Platform (UMP) consent check. Where required by law, UMP presents a consent form. If you consent, Google AdMob may serve personalized ads. If you do not consent, the ads you receive depend on the choices you made in the form and on Google's ad serving modes (for example, non-personalized or limited ads); see Google's ad serving modes. If the consent check cannot be completed (for example, because of a network error), Cravesurf uses the consent status UMP already holds from an earlier session to decide whether ads can be requested. In regions where the consent form is required, an Ad Privacy button appears above the banner so you can change your choice.
After the Google consent step, Cravesurf asks once for App Tracking Transparency permission. If you allow it, the Google Mobile Ads SDK may use your device's advertising identifier (IDFA) to show more relevant ads. If you decline, ads are still shown and the IDFA is not used. All app features work either way, and you can change this choice at any time in the iOS Settings app (Privacy & Security > Tracking).
To serve and measure ads, the Google Mobile Ads SDK may collect a device identifier, advertising data, product interaction, crash, and performance data, and an approximate location derived from your IP address; the User Messaging Platform SDK may also collect an approximate location, performance data, and product interaction to run the consent check. The device identifier and advertising data may be used to track you across apps and websites owned by other companies. Google processes this data under the Google Privacy Policy and How Google uses information from sites or apps that use its services. The SDK never receives your craving entries, notes, quit settings, or AI coach text. Cravesurf has no analytics of its own.
Photos & Media, Health Data
Cravesurf does not access your photo library, camera, or Apple Health data, and does not ask for permission to use Location Services. The Google Mobile Ads SDK and the Google User Messaging Platform SDK may still determine an approximate location from your IP address, as described under Advertising and Tracking.
Deleting Your Data
Deleting the app removes all entries and settings stored on your device. If you back up your device with iCloud or a computer, the backup may contain a copy; deleting the app does not remove an existing backup, which you can manage in your device or backup settings. Deleting the app also does not remove progress you have already shared with another app or person; manage that copy where you shared it. The developer holds no copy of your data.
Changes
If this policy changes, the updated version will be posted here.
Contact
Email: support@smallappworks.com