Beyond Smoke: Day 0 | Privacy Policy

1. Scope

This Privacy Policy explains how the Data Controller collects, uses, discloses, retains, and protects personal data when you use the Beyond Smoke: Day 0 mobile application (the “App”). The Data Controller is responsible for the processing described below. No separate Data Protection Officer has been appointed; all requests may be sent to the email address above.

The App provides motivational and behavioral support for quitting cigarette smoking. The App is not a medical device and does not diagnose, prevent, monitor, treat, or cure any disease or condition. It does not provide personalized medical advice and does not replace consultation with a physician. Consult a doctor or another qualified healthcare professional for decisions concerning health, treatment, or medication, and contact local emergency services in an emergency.

2. Personal Data We Process

2.1 Account and Authentication

The App uses Firebase Authentication and may process your Firebase UID, authentication provider, email address, display name, and profile photo, to the extent provided by your chosen authentication service.

Sign in with Apple: Apple may provide a user identifier, your chosen name, and your email address or an Apple Private Relay address, depending on your selections. Apple may provide your name only upon first authorization.
Google Sign-In: Google may provide an account identifier, email address, display name, and profile photo, according to your account permissions and settings.

We do not receive your Apple or Google account password.

2.2 Quit-Smoking, Progress, and Well-Being Data

We process information you choose to enter, such as:

quit date and time;
number of cigarettes per day, pack price and size, and currency;
personal motivation and savings goal;
slip-up and restart events;
check-ins about mood, craving intensity, sleep, and optional notes;
craving logs, including time, duration, trigger, intensity, outcome, and optional notes;
progress, preferences, achievements, and notification settings.

This information may reveal aspects of your health or lifestyle. Where it qualifies as special-category data under the GDPR, the additional legal basis is explicit consent under Article 9(2)(a). You may withdraw this consent, but features requiring such data will no longer be available.

2.3 Community and Leaderboard

If you use the optional community or leaderboard features, we may process your handle, topics, comments and text reactions, abuse reports, blocked users, and, if you opt into the leaderboard, your handle, estimated smoke-free days, and rank. The community does not support multimedia uploads.

2.4 Technical Data, Analytics, and Crashlytics

We may process device type, operating system, App version, technical installation identifiers, language, usage events, diagnostics, and crash logs.

We use:

Firebase Analytics to understand feature usage and product performance;
Firebase Crashlytics for stability, crash diagnosis, and bug fixes;
Cloud Firestore for secure storage and synchronization of account information, progress, and related content.

We do not intentionally include free-text motivation, journal notes, or other sensitive user-entered text in Analytics parameters. Diagnostic logs may inadvertently include technical information associated with an account or device; we limit this information to what is necessary for troubleshooting.

2.5 Data We Do Not Intentionally Request

We do not request Romanian personal identification numbers (CNP), payment details, medical records, or clinical diagnoses. The App is free, and advertising is disabled in the current production configuration. Advertising integration is not enabled for displaying ads or collecting advertising data. This Policy will be updated before any production activation.

3. Mobile Technologies, SDKs, and Permissions

The App uses SDKs and similar mobile technologies for authentication, synchronization, analytics, diagnostics, local preferences, and App operation. The mobile App does not rely on browser cookies for these activities.

With operating-system permission, the App schedules local notifications directly on your device for milestones, achievements, and optional reminders. We do not use Firebase Cloud Messaging (FCM) for these notifications. You can disable notifications in the App and/or your device settings. The App may temporarily create files on your device when you request to share a progress card.

4. Purposes and Legal Bases

We process data only where we have a legal basis:

Performance of a contract (GDPR Article 6(1)(b)): creating and managing accounts, synchronization in Cloud Firestore, calculating progress, and providing requested features;
Consent (GDPR Article 6(1)(a)): optional features requiring consent, including notification permissions and optional leaderboard participation;
Explicit consent (GDPR Article 9(2)(a)): data qualifying as health data;
Legitimate interests (GDPR Article 6(1)(f)): service security, abuse prevention, moderation, limited usage analysis, error diagnosis, and App improvement, following an assessment of users' interests and rights;
Legal obligation (GDPR Article 6(1)(c)): compliance with legal obligations and responses to valid requests from authorities;
Establishment, exercise, or defense of legal claims: handling disputes and incidents within the limits of the law.

We do not sell personal data or use it for direct marketing.

5. Providers, Recipients, and International Transfers

We may disclose data only as necessary to:

Google Firebase / Google Cloud: Firebase Authentication, Cloud Firestore, Firebase Analytics, and Firebase Crashlytics;
Apple: Sign in with Apple and distribution through the Apple App Store;
Google: Google Sign-In and distribution through Google Play;
Authorities, courts, or professional advisers: where required or permitted by law.

These providers may process data in the European Economic Area, the United States, or other jurisdictions. For transfers from the EEA, we use GDPR-recognized mechanisms, including adequacy decisions and/or Standard Contractual Clauses, as applicable, together with appropriate supplementary safeguards.

6. Data Retention

We retain data only for as long as necessary:

Account and progress data: for the lifetime of the account;
Residual backups: ordinarily for up to 90 days after deletion, after which they are overwritten during the normal cycle;
Community content: while published; after account deletion, it may be deleted or anonymized unless limited retention is necessary for conversation integrity, safety, or legal obligations;
Abuse reports and security records: as long as necessary for investigation, abuse prevention, and legal claims, generally no longer than 24 months unless the law requires longer;
Analytics and Crashlytics data: according to configured retention periods and provider deletion cycles, limited to what is necessary for the purposes described;
Legal and privacy correspondence: during resolution and thereafter in accordance with applicable statutory periods.

7. Account Deletion

You can delete your account directly from the Profile section and/or request deletion by emailing beyondsmokeday0@gmail.com. For email requests, include enough information to identify your account; we may request reasonable identity verification to prevent unauthorized deletion.

After validating the request, we will deactivate the account and delete or anonymize associated personal data, including progress data in Cloud Firestore, normally within 30 days. Residual backups are removed through the normal cycle, generally within 90 days. We may retain a minimal amount of data where required by law or necessary for security, fraud prevention, or the defense of legal rights.

Account deletion is irreversible and removes access to synchronized progress, history, achievements, preferences, and other associated data. Uninstalling the App from your device does not automatically delete your account. You may also revoke the App's access in your Apple or Google account settings, but revocation does not replace an account deletion request.

Subject to applicable law, you have the rights to information, access, rectification, erasure, restriction of processing, data portability, and objection to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (ANSPDCP), including through www.dataprotection.ro, or with the competent authority in your country.

Send requests to beyondsmokeday0@gmail.com. We respond without undue delay and generally within one month, subject to extensions permitted by the GDPR. We may request identity verification.

9. Security

We apply reasonable technical and organizational measures, including authentication through established providers, database access controls, and encryption of data in transit. No method of storage or transmission is completely secure. Suspected incidents may be reported to the contact address.

10. Children

The App is not intended for individuals under the age of 16 or a higher applicable minimum age in their jurisdiction. We do not knowingly collect data from such individuals. If we learn that we have collected such data, we will delete it within a reasonable period.

11. Automated Decision-Making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects. Achievements and leaderboards are gamification features calculated from user-provided data.

12. Changes to This Policy

We may update this Policy to reflect changes to the App, providers, or applicable law. We will publish the updated version and its new effective date; for material changes, we will provide reasonable notice and seek consent where required by law.

13. Contact

ȘERBAN N. ADRIAN-VALENTIN PERSOANĂ FIZICĂ AUTORIZATĂ
CUI: 52812949
Address: B-dul Bucureștii Noi nr. 136, Ground Floor, Apt. 5, Sector 1, Bucharest, Romania
Email: beyondsmokeday0@gmail.com

← Back to Beyond Smoke: Day 0