Privacy policy

for the Smendy app (iOS and Android) and the website · Last updated: October 13, 2026

1. Controller

Fabian FriedlIm Winkel 132584 LöhneGermany

The short version

Smendy works without an account. You don't need to sign up.
Everything you enter in Smendy is stored only on your device, in an encrypted database.
We never receive this data. There are no ads, no tracking, no analytics tools, and nothing is shared with third parties.
While you use it, the app does not connect to any server (fonts and graphics are bundled with the app).

2. What data does the app process on your device?

Habits (cigarettes, vape, cannabis), amounts, prices: Purpose: Calculating your savings and “not smoked” counters; Where it's stored: encrypted database
Start date or mode (“Right now”, a date, “Cut down first”): Purpose: Streak, body milestones; Where it's stored: encrypted database
Cravings, intensity, triggers, how you felt afterwards: Purpose: Statistics, daily quests, trophies; Where it's stored: encrypted database
Breathing sessions (technique, duration, breaths): Purpose: XP, progress; Where it's stored: encrypted database
Logged use (amount, time, trigger, optional note): Purpose: Calendar, smoke-free days, savings; Where it's stored: encrypted database
Savings goal, currency, appearance, reminder times: Purpose: Settings; Where it's stored: encrypted database
Random identifier (UUID): Purpose: Technical grouping of entries; contains no personal or device information; Where it's stored: app settings on your device
Display settings (e.g. “onboarding completed”, sound on/off, lessons read, chosen language): Purpose: Convenience; Where it's stored: app settings on your device
Unlocked styles from “Support Smendy”: Purpose: Showing color themes instantly and offline; checked against the store; Where it's stored: app settings on your device
Home screen widget: ready-made texts; smoke-free days and savings only if you turn on “Show progress in the widget”: Purpose: Showing the widget without it reading the database; visible to others on your home screen; Where it's stored: storage shared by the app and the widget on your device

Information about your use of tobacco, nicotine and cannabis is health data within the meaning of Art. 9 GDPR. It is processed only locally on your device, because you enter it yourself to use the app's features. It is never transferred to us or to third parties.

Encryption: On iPhone, iOS encrypts the database with its built-in data protection, tied to your device passcode. On Android, it is encrypted with SQLCipher; the key is generated randomly on first launch and stored in the Android Keystore.

3. Permissions

Notifications (optional): only if you agree. Smendy schedules reminders locally on your device; no push servers are used. You can turn reminders off at any time in your profile or in your system settings.

Vibration (haptics): to pace the breathing exercises. No data is collected.

Apple Health (optional, iPhone only): only if you agree in your profile or on the “Your body in numbers” card and allow it in the Health app. Smendy reads resting heart rate, VO₂ max, heart rate variability, breathing rate and blood oxygen as daily averages to compare them with the time before your start. The values are only processed in memory, never stored, not included in backups and never leave your device. Writing: if you want, Smendy adds breathing sessions as mindful minutes. Smendy never writes your use to Apple Health. You can withdraw access in the Health app under Sharing → Apps → Smendy.

Smendy does not use the camera, microphone, location or contacts.

4. Backup

In your profile you can export all your entries as a file (JSON). The file is handed to your device's share sheet, and you choose where it goes (e.g. the Files app or email). What happens to the file after that is up to you and the service you choose. The file is not encrypted and contains your health data, so please keep it somewhere safe.

You can also restore such a file (“Restore backup”). It is read only on your device and added to the encrypted database.

5. Deleting your data

In your profile, “Delete all data” removes all entries and settings from your device after asking you to confirm; scheduled reminders are cancelled as well. All data is also deleted when you uninstall the app.

6. App stores and purchases (“Support Smendy”)

You can support Smendy with optional one-time purchases, which unlock extra color themes. Purchasing, payment and receipts are handled entirely by Apple or Google and your account with them; their terms and privacy policies apply. We receive no payment details, no name and no email address. On your device, the app only stores which styles are unlocked – with no link to your health data.

When you download the app, Apple (App Store) or Google (Google Play) process data according to their own privacy policies; we have no influence on this. If you allow your operating system to share crash reports or usage statistics, we only receive them in anonymized, aggregated form through Apple's or Google's developer consoles.

7. Website

The website smendy.io is delivered via Google Cloud Run, a service of Google Cloud EMEA Limited (Dublin, Ireland), from the Belgium region (europe-west1). When you visit it, Google processes technically necessary data – your IP address, date and time, the requested page and your browser details (user agent) – in server logs in order to deliver the page and protect it from abuse. The legal basis is our legitimate interest in secure, reliable hosting (Art. 6(1)(f) GDPR). Google processes this data on our behalf under the Cloud Data Processing Addendum. If data is transferred to the USA in the process, this is covered by standard contractual clauses and Google’s certification under the EU-US Data Privacy Framework.

We do not set any cookies, use any analytics tools or load external fonts or scripts on the website. In the app, these texts are also available without an internet connection.

8. Contacting us by email

If you write to us, we use your email address and the content of your message only to answer your request (Art. 6(1)(b) or (f) GDPR) and delete them once they are no longer needed for that.

9. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR). We cannot provide information about your app data or delete it for you, because we never receive it – it is entirely in your hands (export, delete, uninstall).

You also have the right to lodge a complaint with a data protection supervisory authority. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.

10. Health notice

Smendy supports you in quitting, but it does not replace advice from a doctor or therapist. Only do the “Power Breath” exercise while sitting or lying down – never while driving, in water or standing up.