App: DropSmoke: Quit Smoking, for iPhone (iOS) and Android. This notice covers only the DropSmoke app; for the website, see the Singularity Labs privacy notice.
Last updated: October 27, 2026. Pursuant to Articles 13 and 9 of Regulation (EU) 2016/679 (GDPR).
This is a translation from Italian. In the event of any discrepancy, the Italian version shall prevail.
1. Controller
Singularity Technology Labs, via Materdomini 29, Brindisi (BR), Italy, VAT no. IT02667420745, email info@singularitylabs.it.
In brief
- One account for iPhone and Android. With the same account you get Community and Pro on both systems. Progress is not synchronized: it stays on your phone.
- Health data (logged cigarettes, cravings, Journal, "if... then" plan, progress) are special categories of personal data under Art. 9 GDPR: they stay only on your phone and we do not process them on our server, except for those you choose to share with a supporter, with your explicit consent. Only the data you choose to share with a supporter (Supporters feature) or that you publish yourself in the Community reach the server. For the Journal we ask for separate explicit consent. We never use them for advertising, personalized or not, and we do not give them to Google, Apple or anyone else.
- Advertising via Google AdMob, only in the free version, with Google's consent form (UMP) and, on iPhone, iOS tracking permission (ATT).
- You can delete your account and all data from within the app: Profile › Delete account.
2. Where your data is
Most data stays only on your phone. Our server receives only your account data (email or Sign in with Apple), Pro subscription data, push notification tokens, the data you choose to share with your supporter if you enable the Supporters feature, and what you publish if you use the Community.
Only on your device (we do not receive them): first name, surname, date of birth, city and, if you enter it, phone number; nickname and profile photo until you join the Community (from then on we send them to the server, see "Community" below); smoking habits (what you smoke, cigarettes per day, years of smoking, reason for quitting, logged cigarettes, cravings, savings); mood Journal; motion data used for challenges and some games. The "if... then" plan, recorded cravings and progress stay on your phone. Reminders are local notifications scheduled on your phone; push notifications are used for the Supporters feature and for Community alerts (see "Push notifications"). The app does not collect error logs. The server records only technical errors without emails or tokens, and Hostinger keeps access logs (IP, time, page) for security purposes for a limited period (Art. 6(1)(f)). Photo checking (to block images of nudity or cigarettes) takes place on the device, before anything is sent: photos that fail the check never leave the phone.
On our servers: account. There is a single account for iPhone and Android. On Android you sign in only with email and code/password: sign-in with Google is not available. On iPhone you can sign in with email or with Apple (see below). If you create an account with email, we store your email address, your password in encrypted form (hash, never readable), the creation date, the number of failed sign-in attempts and any temporary lock after too many attempts. Verification codes are stored only in encrypted form and are valid for 10 minutes: they are deleted as soon as they are used, and expired ones within about 1 hour of expiry by an hourly automated procedure. To prevent abuse we record the IP address of anyone requesting a code: it is deleted within about 1 hour by the same hourly procedure. The data is hosted by Hostinger on servers in Frankfurt (Germany, EU). Emails containing codes are sent from info@singularitylabs.it via Hostinger's email service.
On our servers: Supporters feature (optional). If you choose to be supported by a friend, or to support one, you need an email account and some data passes through our server at dropsmoke.singularitylabs.it (Hostinger, EU). The database is located outside the website's public folder and is not accessible from the web. We store: the name you choose to display, the link between you and your supporter (which takes effect only once the person quitting accepts it), the invitation code (valid for 7 days) and sign-in sessions (stored only in encrypted form). The person quitting decides what to share: smoke-free days, money saved and milestones are enabled by default; logged cigarettes and times remain disabled and are sent only if you enable sharing. We send to the server only the data you have chosen to share. Requests for help, relapse alerts (only if you share cigarettes), encouragement messages ("come on", at most one per day) and phrases sent by the supporter also pass through the server. If you enable notifications, we store the device's push token, used only to send you these alerts via Apple (APNs) on iPhone or Google Firebase Cloud Messaging on Android. You can revoke a link or change what you share at any time.
On our servers: Community (optional). To use the Community you need an email account and must accept the Community rules once (no insults, no selling, no links or contact details). The data passes through our server at dropsmoke.singularitylabs.it (Hostinger, Frankfurt, EU), in the same protected database as the Supporters feature. From the app we send to the server, via HTTPS: nickname, username (@handle), Pro status, acceptance of the rules and the device's time zone; on iPhone also the profile photo, if you set one (JPEG of at most 400 px), and the proof of purchase signed by Apple; on Android the store and the Google Play purchase token. We store: the nickname and username, the profile photo if you set one, the time zone (so as not to send you notifications at night), whether you have DropSmoke Pro (to show the badge, nothing else about the subscription) and the date you accepted the rules; the posts you publish (text only, post type: normal, "Tough moment" or milestone, and date); comments and replies; "likes"; the people you follow; the reports you make (reported post, reason and date); the users you block. Photos or other images cannot be included in posts and comments: the server rejects any image attached to a post. The profile photo, if you set one, is re-encoded on the server, removing metadata (for example GPS location and phone model). The server automatically filters texts containing insults, links, phone numbers, email addresses or offers to sell.
Avoid publishing data about your health (cigarettes smoked, relapses, mood, illnesses): everything you publish is visible to the whole Community.
Posts are public to all app users: nickname, username (@handle), profile photo (which remain stored for as long as the account exists), Pro badge, posts and comments are visible to anyone using the Community (they are not published on the web: you need to be signed in with an account to see them). Only the author of a post can see its number of "likes". Do not publish information about your health (for example cigarettes smoked, relapses, mood, illnesses) that you do not want others to see: it becomes visible to the whole Community as soon as you choose to publish it. The "Tough moment" post tells others that you are going through a strong craving: you publish it only if you choose to; if you have a supporter, the request for help also reaches them via the Supporters feature.
Reporting and blocking. From each post, using the ⋯ menu, you can "Report post" (with a reason) or "Block user"; you can also block from a person's public profile. A post you report disappears immediately for you. When a post receives reports from 3 different users it is automatically hidden from everyone and then deleted (see Retention). You can also write to us at info@singularitylabs.it: we review reports within 24 hours and remove content and users that break the rules. Blocking works both ways: you no longer see that person's posts and comments and they do not see yours; any "follows" between you are removed. You can unblock from their profile. The blocked or reported person receives no notice and does not know who reported them.
Sign in with Apple (optional). If you sign in with Apple, Apple sends us a stable, anonymous user identifier (which we use as the sole reference for your account), the email address you choose to share, which may be an Apple private relay address ("Hide My Email", @privaterelay.appleid.com), and your name, only at first sign-in and only if you decide to share it. We do not receive your Apple ID password. To be able to revoke access, we keep on the server, in encrypted form, a token issued by Apple. We do not automatically link the Apple account to an existing email account. Linking an email (optional). From the app you can link an email address with a password to your Apple account, confirmed by a code sent to that address: this lets you sign in with the same account from Android too, and the email is also used to recover access. While the link is pending we store the email, the password in encrypted form (hash) and the code in encrypted form, with an expiry; once the link is confirmed, the email, encrypted password and the link to your account remain.
Progress synchronization (not active). At present the app does not send cigarettes, cravings, plan or progress to the server. If we add synchronization in the future, it will be optional, will be enabled only with your explicit consent (Art. 9(2)(a)) and we will update this notice beforehand.
Push notifications. If you grant notification permission, we store the device's push token, linked to your account. On iPhone we send them via Apple Push Notification service (APNs); on Android via Google's Firebase Cloud Messaging (FCM). On Android, the notification passing through Google contains only the alert type (for example "there's something new"), without names, texts or personal data: the app downloads the content from our server. On iPhone, Supporters alerts contain the sender's name and the alert phrase (see "Providers"). "New post in the Community" alerts are sent at most once a day, never at night (10 p.m.–8 a.m.) according to your device's time zone, which we store for this purpose, and never for posts by people you have blocked. The token remains stored until Apple or Google report it as no longer valid, until you sign out or disable notifications on Android, and in any case is deleted when you delete your account; at most 5 devices per account; if a device moves to another account, the token moves to the new account.
3. Advertising
The free version shows rewarded video ads via Google AdMob (Google Ireland Ltd). On first launch we ask for your consent via Google's form (UMP) and then, on iPhone only, for iOS tracking permission (ATT). Only if you consent can Google use the device's advertising identifier to show you personalized ads; without consent, only limited-data ads may appear, in line with Google's rules. Google nonetheless collects some technical data about the device and the ad (for example IP address and interaction information) to serve ads, measure them and prevent fraud. You can change your choice at any time from Profile › Privacy. We add no data to ad requests: smoking data, health data and the Journal are never shared with Google or used for advertising.
What the Google AdMob SDK collects. When you watch a rewarded video, Google's SDK collects: the device's advertising identifier (IDFA), only if you grant iOS tracking permission (ATT); data on ad interaction and usage (for example ads viewed, taps, videos completed); diagnostic data on SDK crashes and performance. For this data Google acts as an independent controller, in accordance with its own privacy policy: policies.google.com/privacy (see also how Google uses data from partner apps). You can revoke tracking permission at any time from iOS Settings › Privacy & Security › Tracking.
4. Purchases
DropSmoke Pro subscriptions (monthly and annual) are purchased on iPhone via Apple's App Store and on Android via Google Play. Payment is handled by Apple or Google: we do not receive or store your card details. To activate Pro on your account (including on the other system), our server verifies the purchase directly with Apple or Google and stores, linked to your account: the order or transaction identifier, the product, the expiry date and, for Google Play, the purchase token. The server periodically re-checks the status of Play subscriptions with Google (renewals, refunds, cancellations) and removes Pro when it is no longer valid. This data is deleted when you delete your account; the list of refunded or canceled orders reported by Google contains only the order identifier, with no reference to your account, and is kept for 13 months to prevent Pro from being reactivated. To cancel, use Apple's or Google's subscription settings.
5. Purposes and legal bases
- Email account and sign-in security: performance of the contract (Art. 6(1)(b)).
- Age verification via the self-declared date of birth: performance of the contract (Art. 6(1)(b)).
- Phone number (optional, only on the device): completing your profile; consent (Art. 6(1)(a)), which you withdraw by deleting it from your profile.
- Motion data (phone sensors, only on the device): counting squats and steps in challenges and tilting the phone in some games; consent via the iOS "Motion & Fitness" or Android "Physical activity" permission (Art. 6(1)(a)).
- On-device photo checking (Apple Vision and the OpenNSFW model), before anything is sent (the profile photo reaches the server only if you join the Community): preventing nude or cigarette photos in profiles; legitimate interest in app safety (Art. 6(1)(f)).
- Community (public profile, posts, comments, "likes", follows, reports and blocks): performance of the service you requested by joining the Community and accepting its rules (Art. 6(1)(b)). The Community is not intended for collecting health data: we ask you not to enter any. If you nonetheless choose to publish such data (including in a "Tough moment" post), we process it only to show it to Community users, on the basis of the explicit consent you express by publishing it (Art. 9(2)(a)); you withdraw it by deleting the post. Content that breaks the rules is moderated.
- Community moderation (automatic text filtering, hiding after 3 reports, review of reports): legitimate interest in user safety and compliance with App Store and Google Play rules (Art. 6(1)(f)).
- Smoking tracking (logged cigarettes, cravings, "if... then" plan, progress) and statistics: health data processed only on your device, for the feature you use; they do not reach our server, except what you choose to share with a supporter or publish in the Community. Before any future transfer to the server we will ask for your explicit consent (Art. 9(2)(a)).
- Journal: separate explicit consent (Art. 9(2)(a)), which you give at first use (on Android with "I agree and start"); you withdraw it by deleting the Journal.
- Ads (personalized or limited-data): consent collected via the UMP form (Art. 6(1)(a) GDPR and Art. 122 of the Italian Privacy Code). Without consent, only limited-data ads may appear, in line with Google's rules.
- Reminders: consent via the iOS or Android notification permission.
- Supporters feature: performance of the requested service (Art. 6(1)(b)); for the health data you choose to share (cigarettes, times, relapses, requests for help), explicit consent (Art. 9(2)(a)), which you give by turning on the individual switches and withdraw by turning them off or removing the supporter. Withdrawal does not affect the lawfulness of what was shared before.
- Displayed name, link with the supporter, invitations and sign-in sessions: performance of the service you requested (Art. 6(1)(b)).
- Push tokens (APNs and FCM) for Supporters and Community alerts: performance of the service you requested (Art. 6(1)(b)), only if you grant the iOS or Android notification permission, which you can remove whenever you wish.
- Verification of Pro subscriptions with Apple and Google and abuse prevention (one purchase linked to a single account): performance of the contract (Art. 6(1)(b)) and legitimate interest (Art. 6(1)(f)).
- Linking an email to the Apple account and recovering access: performance of the service you requested (Art. 6(1)(b)).
- Abuse prevention (request limits per IP and per account): legitimate interest (Art. 6(1)(f)).
Consent can be withdrawn from your profile or from iOS or Android settings.
6. Journal
Encrypted with AES-256 and stored only on the phone; on iPhone the key is in the iOS Keychain, bound to this device and available only while the phone is unlocked; on Android the key is in the Android Keystore, non-exportable, and the file is encrypted with AES-GCM. It is never sent to our servers or to third parties. We ask for separate consent at first use.
7. Providers and transfers outside the EU
- Hostinger: server and email hosting, servers in Frankfurt (EU).
- Google (AdMob and UMP consent form): ads. Google may also process data in the United States; the transfer is covered by the EU-US Data Privacy Framework, to which Google LLC adheres, and by the European Commission's Standard Contractual Clauses (Art. 46 GDPR).
- Apple: in-app purchases, Sign in with Apple if you use it, and delivery on iPhone of push notifications for the Supporters feature and the Community (generic text only, without names) via Apple Push Notification service (APNs). Apple receives the device token and the alert text, i.e. the sender's name and a phrase such as "{name} needs you" or the message written by the supporter. Alerts do not contain cigarette numbers or times. Apple may process data in the United States; the transfer is covered by the Data Privacy Framework and the Standard Contractual Clauses.
- Other Community users: they see your nickname, profile photo, Pro badge and what you publish (posts and comments), but not the number of "likes" on your posts or whom you have blocked or reported.
- Your supporter: receives only the data you choose to share (smoke-free days, money saved, milestones, requests for help and, if you enable sharing, cigarettes, times and relapses), as well as the name you display. Likewise, if you support someone, they see your name and the messages you send them.
- Google: Google Play for subscriptions on Android (see "Purchases") and Firebase Cloud Messaging for push notifications on Android, which receives only the device token and the alert type. The Data Privacy Framework and the Standard Contractual Clauses apply here too.
Of Firebase we use only Cloud Messaging for push notifications on Android: no Firebase Analytics or Crashlytics. On Android the only third-party services are Firebase Cloud Messaging, Google AdMob and Google's UMP consent form; the 3D viewer (Filament) sends no data. We do not use artificial intelligence services. We do not sell your data.
8. Minors
The app is restricted to people aged 18 and over. Age is self-declared: at sign-up you enter your date of birth and, if you are under 18, you cannot continue.
9. Retention
Data on the device remains until you delete your account or uninstall the app. Email account data remains on the server for as long as the account exists. Verification codes are valid for 10 minutes and, if unused, are deleted within about 1 hour of expiry.
IP addresses and anti-abuse limits, in detail:
- IP of anyone requesting a sign-in code by email: deleted after 1 hour (whenever a new code is sent and in any case by the hourly procedure).
- Request-limit log for the Supporters feature: contains an identifier and the time of each request. The identifier is your email address for requests from the app (for example invitations, requests for help, messages) and the IP address for openings of the invitation page on the web. Each entry is deleted after about 1 hour by the hourly procedure.
Supporters feature:
- Displayed name: until you delete your account; you can change it whenever you wish.
- Link with the supporter and sharing choices: until either of you removes it or deletes their account. If the person quitting declines the request, the link is deleted immediately. When a link is removed, the related events are also deleted.
- Shared progress: stored only if you have at least one active supporter, and we keep only the latest update, which replaces the previous one. Cigarettes and times are stored only if at least one active supporter can see them, and are removed as soon as you turn off sharing. As soon as no active supporter remains (removal, decline or supporter's account deleted), progress is deleted immediately; the hourly procedure also performs a safety check. Otherwise it remains until you delete your account.
- Push token: until Apple or Google report it as no longer valid (for example if you uninstall the app), until you sign out or disable notifications on Android, and in any case until the account is deleted; at most 5 devices per account; if a device moves to another account, the token moves to the new account.
- Events (requests for help, relapses, messages): 30 days.
- Sign-in sessions: 180 days from last use.
- Unused invitations: 7 days; creating a new invitation deletes the previous one.
Pro subscriptions:
- Pro data (order identifier, product, expiry date, Play purchase token): for as long as the account exists; periodically re-checked with Google and deleted with the account.
- Refunded or canceled orders reported by Google (order identifier only, without account): 13 months.
Community:
- Community profile (nickname, photo, Pro badge, acceptance of the rules), posts, comments and "likes": until you delete them (each post can be deleted from the ⋯ menu; deleting a post also deletes its comments, "likes" and reports) or until you delete your account.
- Posts hidden after 3 reports: deleted, together with comments, "likes" and reports, at most 30 days after being hidden.
- Reports: remain linked to the reported post for as long as the post exists and are deleted with it (at most 30 days after it was hidden), or when you delete your account.
- Blocks and "follows": until you remove them or until you or the other person deletes their account.
- Limits log (at most 10 posts and 20 reports per hour): deleted after about 1 hour, as for Supporters.
Time-based deletions take place via an hourly automated procedure running on the server.
10. Account deletion
Profile › Delete account. Beforehand you can export all your data to a text file. For email accounts we ask for your password: the account, any verification codes, the email linked to the Apple account (even if awaiting confirmation), Pro subscription data (order identifiers, Google Play purchase tokens) and Android push tokens, all Supporters data (name, links, shared progress, events, invitations, sessions and push tokens) and all Community data (profile and profile photo, posts, comments and replies, "likes", reports, blocks and "follows") are deleted immediately from the server database, and if deletion fails the app shows an error and deletes nothing. For accounts created with Apple no password is needed: we also delete the link with your Apple ID and revoke the access token with Apple, so the app is no longer linked to your Apple ID. The app then deletes from the phone your profile, statistics, logged cigarettes, savings, Journal and its encryption key, and reminders. Automatic backups by the hosting provider (Hostinger) are kept for a limited period and then deleted automatically, so deleted data also disappears from backups within 30 days at most. Legal obligations remain unaffected.
11. Rights (Arts. 15-22)
Access, rectification, erasure, restriction, portability, objection and withdrawal of consent, by writing to info@singularitylabs.it. We reply within 30 days. You can lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), Piazza Venezia 11, 00187 Rome, www.garanteprivacy.it.
12. Disclaimer
DropSmoke is not a medical device, does not diagnose and does not replace a doctor's advice. To quit smoking with clinical support, contact your doctor or a smoking cessation program.