Privacy and Personal Data Notice

Last updated: 25 October 2026 · 2026-10-25.1

Pre-release review draft. Contact details have been updated. Not ready for commercial release until the legal basis for health-related records, international-transfer assessment and mobile data-flow verification are completed.

On this page
  1. Publisher and contact
  2. Scope and the key distinction
  3. Records created on your device
  4. Local storage and security
  5. Advertising service
  6. Purchases and subscriptions
  7. Notifications, photos and external links
  8. PDFs, celebration images and backup files
  9. Celebration card sharing
  10. New version checks
  11. Purposes, legal bases and international processing
  12. Retention, deletion and your rights
  13. Children and notice changes
  14. Links to local stop smoking services
  15. AppMall website and support messages

Publisher and contact

Publisher and controller for the publisher processing described here: İlyas Duman. Contact/service address: Türkmenbaşı Bulvarı No:24, Çukurova/ADANA Support and privacy request email: support@appmall.io

Scope and the key distinction

This notice covers local records, advertising and purchase services, notifications and file sharing you choose in Give Up Smoking. Opening the app, completing a form or reading this notice does not by itself constitute explicit consent to all processing or transfers. Operating-system permissions, advertising choices and any required explicit consent are separate.

Records created on your device

Local records include country/language, quit date, daily cigarette amount, pack size/price, cigarette duration, smoking entries, earlier attempts, selected reasons/triggers, support preferences, support feedback and optional text/photo. They are used for timers, estimated savings, history, summaries of your records and reminders you choose. Avoid unnecessary identifying, contact, health or third-party information in free text. An app account is not required.

Local storage and security

The current app code has no function uploading these quit records to a publisher server or passing them as parameters to advertising or purchase services. This does not mean the app makes no network connections. On mobile, the primary record file is AES-GCM encrypted and its key is held in operating-system secure storage. In the web preview, records and the key are in the same browser environment; this is not equivalent to mobile secure storage. Encryption cannot eliminate risks from an unlocked/compromised device, shared files or browser access.

Advertising service

Mobile ads may be served through Google AdMob/Google Mobile Ads, with consent messaging through Google UMP. The ad service may process IP addresses, device/app identifiers, ad interactions and diagnostics for delivery, measurement and fraud prevention. The app requests non-personalized ads; this does not mean no data is processed. Consent messaging is shown where required; available choices can be managed under Settings > About > Ad privacy choices. App code does not send local quit records as ad targeting fields. The web preview displays an ad placeholder and does not run the AdMob SDK.

Purchases and subscriptions

When mobile purchasing is enabled, Apple App Store or Google Play handles payment. RevenueCat may process purchase history, product/transaction and entitlement data, and a generated app user identifier for validation, access and purchase analytics. App code does not set RevenueCat customer attributes containing names, emails, photos, quit reasons or smoking records. The app does not ask for card numbers or bank passwords. Store accounts and payment data are subject to provider terms. The web preview does not initialize the RevenueCat purchase SDK and the test preview takes no payment.

Notifications, photos and external links

Notifications are scheduled on-device; app code does not register a push token with a remote notification server. Notifications use general text by default. If you separately enable the preference under Settings > Notifications > Notification privacy, written and selected quit reasons may be included and visible to others on the lock screen. This is separate from notification permission. Disabling the preference rebuilds pending app notifications with general text; previously delivered notifications can be removed separately from the phone’s notification centre. This personal-text preference is not included in backups. You can disable them in app/device settings. A photo is obtained only when you select one and is processed on-device. Opening a source/provider link connects your browser to that site, which may process IP addresses and standard connection data under its policy. Mobile and web-preview records are separate; the web host may process ordinary access/security logs under its service terms.

PDFs, celebration images and backup files

PDF reports are generated on-device; the base summary and optional fields are shown in the preview. Free text/photos may identify you. PDFs are not password-encrypted. A manual backup is encrypted with your chosen password. The recommended default is a hard-to-guess password of at least 12 characters; the optional six-digit choice has limited strength and someone who obtains the file can attempt passwords offline. Encryption is not a guarantee against cracking. Older backups open with their original passwords. You initiate file saving/sharing. This can transfer the file to your selected app, recipient or cloud service under their retention/sharing terms. Temporary exports stay in a dedicated app cache directory and are cleaned by the on-device deletion action. The document-picker cache copy made when importing a backup is cleaned after reading; its external source is not deleted. The app does not guarantee immediate cleanup after every share or forensic erasure.

Celebration card sharing

A celebration card for an earned achievement is created on your device. It displays smoke-free time, estimated savings, estimated cigarettes avoided and estimated time saved together. Share my achievement prepares a PNG containing these four values and the app logo; the image is not password-encrypted. Sharing is optional. Check the card, sharing app and recipient before sending. Completing the action can transfer the image to your chosen app, recipient or cloud service, which may retain, copy or reshare it under its own terms. The publisher cannot delete these external copies from within the app. Creating the card does not upload quit records to a publisher server. Local viewing information helps avoid repeated celebrations; on mobile this preference is held in operating-system secure storage.

New version checks

On mobile, the app may check in the background for a newer published version when you reach the home screen. On iPhone, the default request goes to Apple’s public store service with the public app identifier and your selected country code. If the publisher configures a different HTTPS release-information address, that address is used; Android checks require such an address. The service may receive your IP address and standard network-request information. App code does not add quit dates, smoking records, savings, reasons, photos or payment details to this request. Choosing Later stores the selected version number as a local device preference. Update opens the official store page; this notice does not itself install a new version or require an update. A missing connection or failed check does not block normal use. TestFlight-only builds are not listed by the default App Store lookup.

Purposes, legal bases and international processing

Local records support the tracking/support functions you select. Purchase validation and access are assessed under performance of the relevant service contract; requests/disputes may involve applicable legal obligations or establishing, exercising or defending claims. Health-related records also require an applicable special-category processing condition. REVIEW DRAFT: The publisher’s role and applicable special-category processing condition must be legally determined and stated here before commercial release; explicit consent is not assumed. Advertising/purchase processing and cloud sharing you select may occur abroad. Publishing this notice or obtaining general ad consent does not satisfy all international-transfer obligations; applicable transfer mechanisms must be separately verified before release.

Retention, deletion and your rights

Primary local records remain until you delete them or the device/browser removes them; the publisher cannot remotely access them to set retention. Settings > About > Delete data on my device removes primary app records, app-owned temporary PDF/PNG/backup files and backup-picker cache copies, and attempts to clear app reminders. Cleanup failure is reported rather than confirmed as complete. It does not cancel subscriptions or delete copies in Files, cloud storage, store/provider records or recipients’ copies. Ad/purchase provider periods are described in their policies; not all periods have been verified in this review. Applicable law may provide information, access, rectification, erasure, recipient-notification, objection, consent-withdrawal and compensation rights. Use the contact channel above without sending unnecessary health records or identity documents. Local records unavailable to the publisher are edited/deleted on your device. Requests are handled under applicable procedures/deadlines; regulatory complaints and judicial remedies remain available.

Children and notice changes

This build is not specifically designed for children and does not verify age. Applicable child protections and store audience settings require separate pre-release assessment. Changes to processing purposes/providers require an updated notice and, where needed, separate information and permission/consent mechanisms. New legal notices are provided in Turkish and English; other app languages display English.

Links to local stop smoking services

The Stop smoking support page in Settings displays official phone and website links for your selected country. Call opens the device dialler; Open official website opens the relevant website. Your carrier’s and the service’s terms apply when calling or visiting external sites. These links do not make the app a healthcare provider or imply partnership or endorsement.

AppMall website and support messages

Separate from these mobile-app disclosures, the Website privacy notice applies to the appmall.io marketing website. Emails and attachments you send to support@appmall.io are processed to handle your support request. On-device app records are not automatically attached. Do not send passwords, payment details or unnecessary personal health information.