Privacy Policy
Last updated: August 25, 2026
Lung Score ("the app") and this website (lungscore.app) are operated by Nelvison Benedetto, an independent developer, who is the data controller for the purposes of this policy. This policy explains what information the app and website collect, why, and where it lives.
WHO WE ARE
Developer and data controller: Nelvison Benedetto (nelvison.benedetto@gmail.com). For all support and privacy questions, please write to lungscore.app@gmail.com instead — it's checked more often.
INFORMATION COLLECTED DURING ONBOARDING (IN THE APP)
When you set up the app, you answer questions about your smoking history, symptoms, lifestyle, age, height, weight, and quit goals. This information stays on your device (local storage) and is used only to calculate your personalized Lung Score, Risk Score, and recovery projections. It is never sent to our servers unless you create a Community account (see below).
COMMUNITY ACCOUNT DATA (OPTIONAL)
If you choose to create a Community account — from inside the app — you provide an email address and password (handled by our backend provider, Supabase, for authentication) and may optionally add a display name, a short bio, your country, a profile photo, and your quit date. Posts, comments, upvotes/downvotes, and your streak-at-time-of-post are stored on Supabase's servers and are visible to other users — posts and comments are public and can be read by anyone, even without an account. Your quit date and country may also appear on the in-app Walk of Fame leaderboard if you have a Community account.
THIS WEBSITE
The marketing pages of this website (lungscore.app) do not set tracking or advertising cookies. The Community login and account pages (lungscore.app/community) use a single essential cookie to keep you signed in to the same Supabase backend the app uses — nothing else is collected here.
REPORTING AND BLOCKING
If you report a post or comment, we store what you reported, who you reported, and when — this report history is visible only to you (in the app, Settings → Reported Posts). Posts or comments that receive multiple reports are automatically hidden pending review. If you block another user, that's stored as a link between your account and theirs; it only affects what you see (their posts and comments disappear from your view), is never shown to the blocked user, and can be undone at any time from Settings → Blocked Users.
USAGE AND PRODUCT ANALYTICS
We use PostHog to understand how people use the app — this includes automatic screen-view tracking and specific in-app events (e.g. completing onboarding, viewing the paywall, starting a trial, purchasing a subscription). This data helps us improve the app and is not sold to third parties.
ATTRIBUTION AND ADVERTISING IDENTIFIERS
We use Singular to measure which channel led to your app install. On iOS, this may involve your device's advertising identifier (IDFA), which is only accessed after you respond to the App Tracking Transparency permission prompt — you can decline this at any time, and the app functions fully either way.
SUBSCRIPTION AND PURCHASE DATA
In-app subscriptions are processed through the Apple App Store or Google Play Store; purchase and entitlement status is managed through Adapty, our subscription infrastructure provider. We do not see or store your payment card details — those are handled entirely by Apple/Google.
PUSH NOTIFICATIONS
If you enable notifications and have a Community account, your device's push token is stored on your profile so we can deliver notifications about votes, comments, and mentions on your posts. You can turn this off at any time in Settings.
WHERE YOUR DATA LIVES
Onboarding, habit, cravings, and progress data lives locally on your device unless you opt into a Community account, in which case account and post data is stored on Supabase's servers with row-level security so only you can modify your own account, votes, and posts.
DELETING YOUR DATA
You can permanently delete your Community account and everything tied to it at any time — either from Settings → Delete all data inside the app, or from this website at lungscore.app/community after logging in. That page explains, in full, exactly what gets deleted, what's unaffected, and the timeline — we won't repeat it here, but the short version is: it's immediate and permanent. You can also sign out of the Community, or change your display name, bio, country, email, and password from your Profile at any time.
YOUR RIGHTS
Depending on where you live, you have rights under the GDPR (if you're in the EU/EEA/UK), the Italian Personal Data Protection Code, or comparable laws elsewhere (e.g. the CCPA) — including access, correction, portability, and objection. Contact lungscore.app@gmail.com to exercise any of these; we'll respond within 30 days.
DATA RETENTION
We keep Community account data for as long as your account exists. Locally stored onboarding/habit data stays on your device until you delete the app or use the in-app Delete all data option. See the account deletion page for what happens to backups and third-party analytics after deletion.
CHILDREN'S PRIVACY
This app and website are not directed at children and are not intended for anyone under the minimum age required to purchase a subscription or create an account in your country (in Italy, the digital age of consent is 14; elsewhere it is typically 13–16, with parental consent required below that age where applicable).
INTERNATIONAL DATA TRANSFERS
Our service providers (Supabase, Adapty, Singular, PostHog) may process data in countries other than your own; each operates under its own data-processing terms and security standards.
HEALTH DISCLAIMER
The Lung Score, Risk Score, and every projection in the app are estimates generated from information you provide and public research — they use placeholder, not-yet-clinically-validated coefficients (see the in-app disclaimer), and are not a medical diagnosis. Never use this app as a substitute for professional medical advice.
CHANGES TO THIS POLICY
We may update this policy as the app and website change. We'll update the date above when we do; continued use after an update means you accept the revised policy.
CONTACT US
Questions about this policy? Contact lungscore.app@gmail.com.