Lungo
← Back to trylungo.com

Privacy policy

Last updated: 18 August 2026. This policy applies to the Lungo app for iOS and Android, the website at trylungo.com and its waitlist.

Controller and contact

Luke Bickenbach
Dresdner Straße 19/14
1200 Vienna
Austria

Email: [email protected]

How the app works

Lungo can be used locally by default. Unless you enable cloud sync, your app content remains on your device. This may include your chosen name, tobacco use and cost information, quit date, cravings with time, intensity, outcome, triggers and context, check-ins, progress, streaks, milestones, Buddy, XP and item status, Coach sessions and saved strategies, plus preferences, language, currency, reminders and consent timestamps.

This information is stored using protected storage mechanisms provided by the operating system, including Expo SecureStore. On Android, local app data is normally removed when the app is uninstalled. On iOS, Keychain entries may survive an uninstall. To reliably remove all local information, use Lungo’s reset or deletion function before uninstalling the app.

Information about smoking behaviour, cravings and progress may constitute health data under Article 9 GDPR. Lungo processes it for the quit-smoking features you request only with your explicit consent under Articles 6(1)(a) and 9(2)(a) GDPR. You can withdraw consent by deleting your data or account in the app. Using the affected features again will require new consent.

Pseudonymous consent record

When you complete onboarding or change optional usage analytics, Firebase Authentication creates a random pseudonymous installation ID. Cloud Firestore stores an immutable consent record under that ID with a server timestamp.

The record contains only the installation ID, language, versions of the Terms, Privacy Policy, health-data consent and analytics consent, and which checkboxes were selected. It contains no smoking quantity, vaping use, cravings, relapses, free text, or other health data.

This processing is used solely to meet our proof and accountability obligations under Article 6(1)(c) in conjunction with Articles 7(1) and 5(2) GDPR. The record does not enable cloud backup; unless you separately select cloud backup, profile and progress data remains on your device.

Optional cloud sync and sign-in

Cloud sync is optional and disabled by default. Until you enable it, your profile, smoking, vaping, craving, and progress content is not transferred to Firebase. When enabled, it is linked to the pseudonymous Firebase ID already created for the consent record. You may then optionally connect it using Sign in with Apple or Google Sign-In.

Firebase processes the app content described above together with technical timestamps and revision information for synchronisation. If you link an account, a provider identifier and—depending on your choice with that provider—your email address or display name may also be processed. Passwords and sign-in credentials are managed by Apple, Google or Firebase and are not stored by Lungo.

The legal basis for the account and sync you request is Article 6(1)(b) GDPR and, where health data is synced, your explicit consent under Article 9(2)(a) GDPR. The provider is Google Ireland Limited; depending on the processing, Google LLC in the USA may also be involved.

Lungo Plus, purchases and RevenueCat

We use RevenueCat to display Lungo Plus offers and to process purchases, restoration and entitlement checks. It may process a pseudonymous app user identifier, technical device information, last-use time, offered products, purchase and subscription status, entitlements, Apple receipts or Google purchase tokens and paywall impressions. The contents of your health profile, cravings and Coach sessions are not sent to RevenueCat.

When cloud sync is used, the identifier has the form firebase:<uid>; for local use, a randomly generated RevenueCat identifier is used. Payments are processed by Apple or Google. Lungo does not receive your full card or payment details. The legal basis is Article 6(1)(b) GDPR. The provider is RevenueCat, Inc. in the USA.

Optional pseudonymous usage analytics

Firebase Analytics is switched off by default. Only after you voluntarily enable it in onboarding or Settings does Google process technical app and device information, a random app-instance identifier, and the pseudonymous Firebase installation ID to help us understand which screen areas are used and whether onboarding is completed. The installation ID is set as the Analytics user ID so events can be matched to the consent record stored beforehand. The legal basis is your consent under Article 6(1)(a) GDPR.

Lungo does not send smoking, vaping, craving, mood, relapse or other health data; free text; name; or email address to Firebase Analytics. Advertising ID, personalised advertising and remarketing are disabled. You can withdraw consent at any time in Settings → Pseudonymous usage analytics; this stops new collection and removes the pseudonymous user ID from Firebase Analytics. It does not retrospectively remove already aggregated reporting.

Reminders, external links and sharing

Reminders are scheduled as local notifications on your device. Lungo does not currently operate a push-notification server or store a push token in a Lungo backend. Notification settings and schedules remain on the device until you change or reset them, or remove the app.

When you open an external link, the provider of that page and your browser may process technical connection data. If you share content through your device’s sharing menu, it is passed to the app or person you select; their further processing is outside Lungo.

Website and technical data

This website is hosted through Cloudflare Pages. When you visit it, technical data required to deliver and protect the website may be processed, including IP address, request time, requested page, browser and device information. This processing is based on our legitimate interest in providing a secure and reliable website under Article 6(1)(f) GDPR.

We do not use advertising cookies, behavioural advertising or third-party analytics on this website. The fonts are self-hosted, so loading the website does not connect your browser to Google Fonts.

Waitlist

If you join the waitlist, we process your email address and your consent to send you a waitlist confirmation after sign-up and Lungo’s release announcement. The purpose is to confirm your place on the list and notify you once Lungo is available. Joining the waitlist does not make the app available before its public release. The legal basis is your consent under Article 6(1)(a) GDPR.

We also store the time of your successful sign-up, your consent record, your unique position on the waitlist and whether that position is among the first 100 sign-ups. We use this information to prevent duplicate positions and to determine eligibility for the planned early-supporter item. A repeated sign-up with the same email address does not create another position.

We use Brevo (Sendinblue SAS) as a processor to manage the contact list and deliver the email. Brevo states that its database hosting is located in the European Union.

We keep your email address, consent record, waitlist position and eligibility status until the release announcement and any associated early-supporter item have been processed, then delete them from the waitlist within 30 days. You can withdraw your consent at any time through the unsubscribe link in an email or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

Cloudflare D1 is used to store and assign the waitlist data described above. The database is configured with European Union data jurisdiction.

Recipients and international transfers

  • Cloudflare, Inc., as hosting, database and security provider for the website.
  • Brevo (Sendinblue SAS), as processor for the waitlist emails.
  • Google Ireland Limited and, where applicable, Google LLC for Firebase Authentication and Cloud Firestore to store the pseudonymous consent record and provide optional cloud sync.
  • Google Ireland Limited and, where applicable, Google LLC for Firebase Analytics, only if you enable pseudonymous usage analytics.
  • RevenueCat, Inc. for Lungo Plus, purchases and entitlements.
  • Apple Distribution International Ltd. or Google as the relevant app-store operator and payment provider.

Cloudflare, Google, RevenueCat or Apple may process data outside the European Economic Area, particularly in the USA. Where required, we rely on an adequacy decision, valid certification under the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses under Article 46 GDPR. Foreign laws may still create residual risks despite these safeguards.

Retention and deletion

  • Local app data remains until you reset or delete it in Lungo; please note the iOS Keychain behaviour described above.
  • We keep pseudonymous consent records for the duration of the processing based on them and generally for no more than three years afterwards where still required to meet statutory proof obligations or to establish, exercise, or defend legal claims.
  • Synced app data and the Firebase account remain until you reset your data or delete the account.
  • Firebase Analytics event data is deleted after the retention period configured in Firebase Analytics.
  • Resetting or deleting also initiates deletion of the securely matched RevenueCat customer record. Apple or Google may retain transaction records where legally required.
  • Local reminders remain until they are disabled, reset or the app is removed.
  • We retain support requests only as long as needed to respond and meet legal record-keeping duties.

You can remove app data directly in Lungo under Settings → Account → Manage account → Delete account. If you no longer have access to the app, follow the instructions on Delete account and data or email [email protected]. Deleting your Lungo account does not automatically cancel an active Apple or Google subscription; you must cancel it separately in the relevant store.

Your rights

You may request access, rectification, erasure, restriction of processing, data portability, or object to processing where the applicable legal requirements are met. You may withdraw consent at any time. Contact us at [email protected]. You also have the right to lodge a complaint with the Austrian Data Protection Authority: Barichgasse 40–42, 1030 Vienna, dsb.gv.at.

Security, children and changes

We use appropriate technical and organisational measures to protect personal data. However, no digital system can guarantee absolute security. Lungo is intended for adults who want to stop using tobacco and is not directed at children. We do not knowingly collect data from anyone under 16.

We do not sell personal or health data and do not use it for personalised advertising. We update this policy when Lungo or the services it uses change materially. The date at the top identifies the current version.

Product previews

Lungo is under active development. Screenshots, descriptions, features, content, availability and visual design shown on this website reflect the current development version and may change before or after release. They do not guarantee that any particular feature or design will appear in the release version of the app. This notice does not limit your data-protection rights or change the processing described above.