Lungful is a vaping, smoking, and nicotine cessation support app operated by Digitalix Inc ("we," "us," or "our"), an S corporation based in Nevada, USA. Digitalix Inc is the data controller for any personal data described in this policy.
Contact: contact@lungful.app
Mailing address: 10249 Huxley Cross Ln, Las Vegas, NV 89144, USA
We built Lungful with privacy as a feature, not an afterthought. Almost everything you create in this app (your streak, craving logs, virtual companion, progress) lives on your device and never leaves it. The one exception is the optional Companion Chat (a limited number of conversations are included free; unlimited chat requires premium): when you choose to chat with your companion, your message and a short summary of your progress are sent to an AI service to generate a reply (see Section 1). We do not sell your data. We do not run ads. We do not have third-party trackers watching you.
Here is the full picture.
All of the following is stored locally on your phone and is never transmitted to our servers. Note that your phone's own backup service (iCloud or Google backup), which you control in your device settings, may include the app's data in your device backups; that is between you and your backup provider, and we have no access to it:
Companion Chat is an optional feature, free accounts include a limited number of conversations, and unlimited chat requires a premium subscription. It is the only part of Lungful that sends the content you create (your messages and progress summary) off your device, and only when you actively use it. Separately, if you use a subscription, our billing service receives a pseudonymous ID and your subscription status, never your health data or anything you write, see Section 10. Before your first chat we show a one-time disclosure and ask for your explicit consent.
When you send a message in a chat, the following is transmitted over an encrypted (HTTPS) connection to our chat service so it can generate your companion's reply:
Our chat service is a stateless relay: it passes your request to Google (via its Gemini API) as our AI model provider, returns the reply, and stores none of your conversation. The relay keeps only short-lived, pseudonymous abuse-prevention counters and a subscription-status flag (see Section 7), never message content. Your conversation transcripts and the understanding summary are stored only on your device, and you can delete them at any time. We never store your chat content on our servers. Please avoid sharing precise identifiers (full name, address, payment details) in chat; the feature does not need them.
All payments are processed by Apple (App Store) or Google (Google Play). We never receive, see, or store your payment card number, bank details, or any financial information. Apple or Google may share with us a subscription status indicator (active/inactive/expired) so the app can determine whether you have a premium subscription. We do not receive your payment amount or billing history directly.
If you email us for help, we receive your name and email address. We use this only to respond to your request and do not add it to any marketing list. We delete support communications when resolved unless legally required to retain them.
The data on your device is used solely by the app to run the features you use: tracking your streak, showing your progress, powering the craving support tools, and personalizing your experience. We do not process this data centrally.
Support correspondence is used only to help you and is then deleted.
We do not sell, rent, or share your personal data with third parties for commercial purposes. Ever.
The one limited exception is the optional Companion Chat feature (see Section 1). When you use it, your message and progress summary are processed by Google (via its Gemini API) acting as our service provider (sub-processor), for the sole purpose of generating your companion's reply. This data is not used for advertising, is never sold, and is not shared for any commercial purpose; our relay retains none of it.
We may disclose information if required to do so by law, court order, or valid legal process. We will notify you if this occurs unless prohibited by law.
If community or social features are introduced, any content or profile information you choose to share publicly within those features will be visible to other users within the app. You control what you share.
Lungful's on-device data never leaves your phone, so no transfer occurs for it. When you use the optional Companion Chat, your chat message and progress summary are processed on servers in the United States by our relay (Cloudflare) and by Google (Gemini API) as our AI provider.
If you use Companion Chat from the EU, EEA, UK, or Switzerland, this means your chat data is transferred to the United States. This transfer happens only when you actively send a message, and it relies on:
Neither our relay nor Google stores your conversation: the relay is stateless, and transcripts exist only on your device. You can withdraw consent at any time by simply not using the chat, and delete your local transcripts in Settings → Delete chat history.
Subscriptions are managed and billed entirely by Apple or Google. We do not control the billing process. To manage, change, or cancel your subscription (or to request a refund), use your device's subscription settings (App Store account or Google Play account) or contact Apple/Google support directly.
Lungful is strictly for users aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you are under 18, do not use this app. If we become aware that a user under 18 has used this app or provided us with personal data, we will take steps to delete that data promptly.
If you believe a minor has used this app, please contact us at contact@lungful.app.
Our legal bases. Where the GDPR applies, we process personal data on these bases:
Because chat content relates to your health (nicotine cessation), we treat it as special-category data and process it only with your explicit consent (Art. 9(2)(a)).
Your rights. You have the right to:
How to exercise them. Almost all of your data lives only on your device, under your direct control. In the app, go to Settings → Privacy & data to Export my data (a portable JSON file of everything the app stores), Delete chat history, or Delete ALL my data (full erasure). For any data we hold ourselves (e.g., support correspondence), or for help with any request, contact contact@lungful.app and we will respond within 30 days.
If you are located in the EU/EEA and believe we have violated your rights, you have the right to lodge a complaint with your local data protection authority.
Under the California Consumer Privacy Act as amended by the California Privacy Rights Act, you have the right to:
We do not sell personal information, and we do not "share" it for cross-context behavioral advertising. The only sensitive personal information involved (health-related chat content) is used solely to provide the reply you asked for, which is the service itself, we do not use it to infer characteristics or for any secondary purpose. To exercise any right, contact contact@lungful.app. We will verify requests using your email address and respond within 45 days. You may use an authorized agent to submit requests on your behalf.
Your data lives on your device, so you are always in control. In Settings → Privacy & data you can export everything as a portable file, delete your chat history, or permanently erase all data. Deleting the app also removes every locally stored record. If you want help or confirmation, email contact@lungful.app.
This section serves as our Consumer Health Data Privacy Policy under Washington's My Health My Data Act and Nevada's SB 370, and applies to residents of those states.
What we collect. Because Lungful is a nicotine-cessation app, most of what you enter is "consumer health data": your usage and quit information, craving and relapse logs, dependency self-assessment, and, if you use Companion Chat, the health-related content of your messages.
How it is collected and used. You enter it yourself. It is stored only on your device and used only to provide the features you use. Chat content is additionally processed, with your consent, by our stateless relay and Google (as processor) solely to generate your companion's reply. See Sections 1, 3, and 4.
Sources and sharing. We collect consumer health data only from you. We do not share it with affiliates or third parties except the processing described above, and we do not and will not sell consumer health data. No third party may access it except as described in this policy.
Your rights. You have the right to (a) confirm whether we collect or share consumer health data, (b) access it, (c) withdraw consent, and (d) have it deleted. Because it lives on your device, deletion is in your hands at all times (Settings → Privacy & data: export, delete chat history, or delete all data; deleting the app also removes everything). For anything we hold, or to exercise any right, email contact@lungful.app.
Appeals (Washington residents). If we decline a request, you may appeal by replying to our decision with "Appeal" in the subject line; we will respond within 45 days. If your appeal is denied, you may contact the Washington Attorney General at atg.wa.gov/file-complaint.
Your data is stored locally on your device and protected by your device's built-in security, including hardware encryption when your device is locked. We strongly encourage you to use a device PIN or passcode.
If we introduce server-side features in the future, all data transmitted to our servers will be encrypted in transit (TLS 1.2 or higher) and at rest.
No method of storage or transmission is 100% secure. If we become aware of a data breach that affects your rights, we will notify you as required by applicable law.
The app uses RevenueCat to manage subscription state (not payment processing). RevenueCat may receive a pseudonymous app user ID and subscription status. You can review RevenueCat's privacy policy at https://www.revenuecat.com/privacy.
We do not integrate any other third-party data services in the base version of the app.
Because your data lives on your device, you control retention entirely. You can export or permanently erase everything at any time in Settings → Privacy & data, and deleting the app removes all local data. Support correspondence is deleted once resolved. We do not retain any other personal data.
The lungful.app website itself sets no cookies and runs no analytics or trackers of any kind. To display, its pages load fonts from Fontshare and two animation libraries from jsDelivr. These are content delivery networks that, like any server your browser fetches a file from, receive your IP address and standard request headers when the file is requested. We receive nothing from those requests and cannot link them to you. The pages work without them: if the libraries fail to load or are blocked, the site simply renders without the extra animation.
We may update this Privacy Policy when our practices change or laws require it. We will notify you of significant changes via an in-app notice. The "Last Updated" date at the top of this document reflects the most recent revision. Your continued use of the app after changes are posted constitutes your acceptance of the updated policy.
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
Digitalix Inc
10249 Huxley Cross Ln, Las Vegas, NV 89144, USA
contact@lungful.app
This Privacy Policy applies to the Lungful iOS and Android applications and any related services. It does not apply to third-party websites or services linked from the app.