App Privacy Policy

This privacy policy informs you about the nature, scope and purpose of the processing of personal data in the snusQuit mobile app in accordance with the General Data Protection Regulation (GDPR).

This is a courtesy translation. The legally binding version is the German Datenschutzerklärung für die App.

The short version: what you enter in the app stays on your device. We run no server for the app and never see your entries. Two things leave the device without you doing anything, and your app store's vendor is responsible for both: handling your purchase and your operating system's automatic device backup. A third only happens if you ask for it: sharing your progress as an image.

Android and iOS: this policy covers both versions of the app. Where the platforms differ, such as purchase handling or device backup, both cases are described side by side. The section for the operating system you use is the one that applies to you.

1. Controller

The controller responsible for data processing in connection with this app is:

Alexander Bosacki
c/o IP-Management #11224
Ludwig-Erhard-Str. 18
20459 Hamburg, Germany
Email: info@snusquit.com

2. Scope

This policy applies to the snusQuit mobile app only. Our website has its own privacy policy covering the waitlist and the server log files there. The two are independent of each other: if you only use the app, the website policy does not concern you.

3. What data the app processes

To do its job, the app processes the information you enter yourself. That includes:

• your consumption per day (number of pouches)
• the nicotine strength in mg
• your streak and your weekly goals
• what you told us during onboarding, such as your reasons for quitting
• the history of your previous days

This data is stored and processed exclusively on your own device. The app keeps it in protected app storage, which other apps cannot read.

It is never transmitted to us. There are no user accounts, no registration, no tracking, no advertising IDs and no analysis of how you use the app. We run no server for the app. Since this data never reaches us, no processing by us within the meaning of the GDPR takes place in that respect.

Handling the subscription changes nothing about this: neither Google nor Apple ever learns how many pouches you take or how your streak is doing.

4. Permissions

The app asks for one permission, and only when you ask it to: permission to send you notifications. It is requested after you have accepted the offer for the daily reminder, or turned the reminder on in your profile. If you decline, the app works exactly as before, just without a reminder. Section 5 has the details.

Beyond that there is no prompt for camera, location, microphone, contacts, photos or storage, because the app needs none of them.

On Android, four further technical permissions are declared in the released app's manifest: internet access, network state, Google Play billing (com.android.vending.BILLING) and a permission Android itself assigns for app-internal broadcasts (DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION). Android grants all four automatically and never shows them to you as a prompt, because none is a runtime permission. They exist so the app can talk to Google Play about your purchase and notice when there is no connection. They do not let the app talk to us: we run no server for the app.

On iOS there is no comparable manifest. Purchases go through StoreKit, which is part of the system and needs no separate permission. The app contains no app tracking: there is no advertising identifier and no cross-app recognition, so there is no App Tracking Transparency prompt.

5. The daily reminder

You can set up a daily reminder that nudges you in the evening to record your day. It is off by default. The app offers it once, after you have closed out your first day; after that the switch lives in your profile and you can turn it off again at any time.

If you accept, your operating system asks for permission to show notifications. You can withdraw that permission at any time in your system settings.

About the mechanics: this is a local notification. It is scheduled on your device and fired by your device.

• These are not push notifications. No server sends anything to your device, and there is no push identifier (no FCM token, no APNs token) that would identify it.
• Nothing is transmitted to us. We do not learn whether you turned the reminder on, whether it was shown, or whether you tapped it.
• The text of the reminder is composed on your device and reflects where you are in the app. It does not leave the device.
• Your choice for or against the reminder is stored locally along with the rest of your data (section 3).

6. Backup of your progress

Both operating systems automatically back up the data of installed apps to the user's account and restore it when a new device is set up or the app is reinstalled. This applies to snusQuit as well.

For you that means: changing your phone does not cost you your streak.

On Android this is Android Auto Backup. Google is responsible for it (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland), and the backup sits in your Google account.

On iOS this is iCloud Backup, provided you have it switched on. Apple is responsible for it (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), and the backup sits in your iCloud.

To put that in context, and this holds for both platforms:

• This is a feature of the operating system, not something we built in.
• The backup sits in your account, not with us. We have no access to it and can neither view nor delete it. It is managed and deleted through your Google or Apple account.
• You can switch the backup off at any time in your device's system settings. Your data then stays on the device only.
• The backup runs at intervals, typically only while the device is charging, on Wi-Fi and not in use. It is therefore not in real time, and the backed-up state can be up to 24 hours old.
• It applies when setting up a device or reinstalling. It is not a continuous sync between two devices you use in parallel.

This does transfer data to Google or Apple, including to the USA. See section 9. No processing of our own arises from it: we neither trigger the backup nor receive anything from it.

7. Purchases and payment

The app offers two paid options: a monthly subscription and a one-time lifetime unlock. The current price in your currency is shown in the app and in the store's purchase dialog before you buy; prices differ by country, so no amount is named here. Before that you can use it free of charge. It only locks once both conditions are met: 8 calendar days have passed and you have been active on at least 5 days. After that the app stays readable, only logging new entries requires a purchase.

What "lifetime" covers, and what happens if the app is discontinued, is set out in the terms of use — not here: this page is about data, not about the contract.

Purchases are handled exclusively through the store you got the app from: Google Play on Android, the App Store on iOS. We offer no payment processing of our own.

We receive no payment data. Your card number, bank details, billing address and Google or Apple account are unknown to us and are not passed on to us. Both vendors only provide us with aggregated, non-personal revenue reports from which no individual person can be identified.

What happens on the device: the app asks the store whether an active subscription or a lifetime unlock exists. A purchase receipt and the product identifier are processed between your device and the store in the process. The result is stored locally and likewise does not reach us.

Restoring: on a new device you can restore your subscription or your lifetime unlock through the same Google or Apple account. Your progress comes back separately, via the device backup described in section 6.

Managing and cancelling a subscription happens in your store account, not with us:

• Android: play.google.com/store/account/subscriptions
• iOS: Settings → [your name] → Subscriptions, or apps.apple.com/account/subscriptions

A lifetime unlock is a one-time purchase and does not need to be cancelled.

The legal basis is Art. 6 (1) (b) GDPR, namely performance of the contract for providing the paid features.

Responsible for payment processing is the respective store operator, each as an independent controller:

• Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. On their data processing see policies.google.com/privacy
• Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. On their data processing see apple.com/legal/privacy

8. The store in general

Independently of any purchase, Google and Apple process data on their own account when you download the app and when it updates, such as your account, details about your device and the time. This happens under the respective vendor's responsibility, not ours. We have no influence over it and do not receive this data.

9. Transfers to third countries (USA)

No data is transmitted to us, and consequently none is transferred by us to third countries. We run no server for the app.

Transfers to the USA are made by Google or Apple, in two cases: for purchase and subscription management (section 7) and for the device backup (section 6). The recipients are Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA.

Both act as independent controllers and rely on the EU Standard Contractual Clauses as well as their certification under the EU-US Data Privacy Framework for these transfers.

10. Sharing your progress

The app can turn your progress into an image and pass it to another app of your choice, for example a messenger or a social network. Nothing is shared unless you tap the share button yourself and then pick an app.

The image is created on your device and placed in the app's temporary folder. Handing it on is done by your operating system's own share dialog, so the app needs no permission for it and never learns which app you chose. The image does not reach us. We learn neither that you shared anything nor where it went.

What happens to the image afterwards is governed by the privacy policy of the app you sent it to. The image contains only what is visible on the card: your clean days, the money saved, the pouches avoided. It carries no name, no account and no device identifier.

Rating the app

The Profile screen has a Rate snusQuit button. Tapping it asks your store to show its own rating dialog, or opens the store listing if it cannot. Nothing happens unless you tap it yourself.

The dialog and any rating you write belong to Google Play or the App Store, not to us. We receive no notification, and both vendors deliberately do not tell the app whether you rated anything or what you wrote — a published rating is visible to us only in the same public store listing everyone else can see. No app data is transmitted in this process: your entries, your streak and your history stay on the device.

11. Deletion

Uninstalling the app removes the data stored on the device. In addition, the app has a function that lets you reset your progress.

Important, and stated plainly: a backup that has already been created (section 6) is not deleted along with the uninstall. It sits in your Google or Apple account and is managed there. You can delete it in that account's settings; we cannot.

A request for access or erasure addressed to us comes up empty for your app data, simply because we have stored nothing about you. For data relating to backup, purchases and your account, Google or Apple is the right place to ask.

12. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to withdraw consent given (Art. 7 (3) GDPR)

An informal message to info@snusquit.com is enough to exercise them. Please note the point made in section 11: for the data inside the app we cannot hand you anything, because it never reaches us.

Without prejudice to any other remedy, you also have the right to lodge a complaint with a data protection supervisory authority if you believe that the processing of your personal data violates the GDPR (Art. 77 GDPR). The competent authority includes the supervisory authority of your habitual place of residence, your place of work or the place of the alleged infringement. A list of the German supervisory authorities is available at bfdi.bund.de.

13. Age

The app is intended as help with quitting and assumes that you already use nicotine pouches. It is not marketed to minors, but neither does it shut them out: anyone who wants to quit should be able to.

In data protection terms, age changes nothing here, because there is nothing to protect that would ever reach us. The app works entirely on your device, we receive no usage data, and so regardless of age we hold nothing that could be handed over or deleted on request; uninstalling the app removes everything.

For paid purchases by minors, what the terms of use set out in § 2 applies — that is a question of contract, not of data protection.

14. Changes to this privacy policy

We reserve the right to amend this privacy policy so that it always complies with current legal requirements, or to reflect changes to the app. The new version then applies to your next visit.

Last updated: August 2026