Privacy Policy
Your privacy matters. This policy explains clearly what data we collect, why we collect it, and how we protect it. We never sell your personal data. Where we share data with advertising partners to measure our ads, we ask for your consent first — and you can withdraw it at any time.
1. Who We Are
EonasApps is operated by:
Noe Bissig
Bahnhofstrasse 25
6460 Altdorf
Switzerland
Contact: hello@snusst.com
2. What Data We Collect
The Snusst app collects the following personal data when you create an account or use the app:
Account Data
- Email address — used to create and manage your account, and to send you important account-related notifications.
- Display name — used to personalize your experience within the app.
Health & Usage Data
- Snus / nicotine pouch usage data — the amounts, times, and patterns you log to track your consumption.
- Quit goals and progress — target dates, milestones, and progress statistics you set.
- Diary entries — personal notes and journal entries you write within the app.
Purchase Data
- In-app purchase history — records of any premium features or one-time purchases you make, processed through the Apple App Store or Google Play.
Website & Purchase Funnel Data
- Quiz answers — the questions you answer on www.snusst.com before purchasing (e.g. how much you use, what is driving you to quit) are used to set up your account and personalize your quit plan.
- Email address and payment details — collected at checkout by our payment provider Stripe to process your purchase and create your account. We never see or store your full card number.
- Advertising identifiers — if you consent, a click identifier from the ad you came from (e.g. TikTok's
ttclid) and a cookie-based identifier are used to attribute your purchase to that ad. See section 6.
Technical & Analytics Data
- Device information — operating system version and app version, used for bug fixing and compatibility.
- Crash reports — anonymous technical logs to help us fix errors.
- In-app analytics events — anonymized events (e.g. screens visited, features used) to understand how the app is used and improve it. No personal health data is included in these events.
- Website funnel analytics — anonymized events on the quiz and checkout pages of www.snusst.com (e.g. which quiz screen you reached, whether checkout loaded, whether the purchase succeeded) to see where visitors drop off and fix what's broken. These do not use cookies or browser storage and are not linked to your name or email. See section 5.
3. Why We Collect This Data
We process your data based on the following legal grounds (GDPR Art. 6):
- Contract performance — account data and purchase data are required to provide the service you signed up for.
- Legitimate interest — usage and technical data help us improve app stability and user experience.
- Consent — diary entries and health data are stored only because you actively choose to enter them. Advertising and conversion measurement on our website happens only where you have given consent (GDPR Art. 6(1)(a), and § 25 TDDDG for storage on your device).
4. How We Store Your Data
Your data is stored securely using industry-standard cloud infrastructure. All data in transit is encrypted using TLS. Your diary entries and health data are stored under your account and are only accessible to you.
We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.
5. Sharing Your Data & Third-Party Sub-Processors
We do not sell your personal data. To operate the app, we work with the following sub-processors who may process your data on our behalf:
Supabase (database & authentication)
Your account data, health & usage data, and diary entries are stored in Supabase, a cloud database and authentication service operated by Supabase Inc. (USA). Data is encrypted in transit (TLS) and at rest. Supabase acts as a data processor under a Data Processing Agreement.
Supabase Privacy Policy
RevenueCat (subscription management)
In-app purchases and subscription status are managed through RevenueCat, Inc. (USA). RevenueCat receives your anonymous app user ID and purchase receipt data from the App Store / Google Play to verify and manage your subscription. RevenueCat does not receive your name, email, or health data.
RevenueCat Privacy Policy
PostHog (in-app & website analytics)
We use PostHog to collect anonymized analytics events within the app (e.g. which screens are visited, which features are used) and on the quiz/checkout pages of www.snusst.com (e.g. which quiz screen you reached, whether checkout loaded, whether the purchase succeeded). These events help us understand how the app and website are used and fix what's broken. PostHog does not receive your name, email, health data, diary entries, or quiz answers. On the website, this runs without cookies or browser storage: each visit is tagged with a random identifier that exists only for that visit and is not linked to any account or advertising identifier, so it is not part of the advertising-cookie choice in section 6 and applies regardless of that choice. PostHog is hosted on EU servers.
PostHog Privacy Policy
Stripe (website payments)
Purchases made on www.snusst.com are processed by Stripe, Inc. (USA). Stripe receives your email address, payment details and purchase amount in order to take the payment and to meet its own legal and anti-fraud obligations. We receive back only your email address, the amount, and a transaction reference — never your full card number. Stripe acts as an independent controller for parts of this processing.
Stripe Privacy Policy
TikTok (advertising measurement — consent only)
If — and only if — you consent, our website loads the TikTok Pixel, operated by TikTok Technology Limited (Ireland) and its affiliates. It sets first-party cookies on your device and sends TikTok a record of the pages you view, when you start a checkout, and when you complete a purchase, along with a click identifier and a hashed (irreversible) form of your email address. We use this solely to measure which of our ads lead to a purchase and to improve how those ads are targeted. It does not receive your health data, diary entries or quiz answers. Without your consent the pixel is not loaded, no cookies are set, and no data is sent — neither from your browser nor from our servers.
TikTok Privacy Policy
Vercel (website hosting)
Our website is hosted by Vercel Inc. (USA). Vercel processes standard server request data (IP address, user agent, requested URL) to deliver the site and protect it from abuse. We use an approximate country derived from your IP address to show the right currency and to decide whether a consent banner is required; we do not store your IP address ourselves.
Vercel Privacy Policy
Apple App Store & Google Play (in-app payments)
Payments made inside the iOS or Android app are processed directly by Apple or Google under their respective privacy policies. We do not handle or store your payment card details.
Apple Privacy Policy ·
Google Privacy Policy
All third-party processors are contractually bound to protect your data and may only use it to provide services on our behalf.
6. Advertising Cookies & Your Choice
Our website uses only two kinds of storage on your device:
- Strictly necessary — short-lived storage that remembers your language, your quiz answers between steps, and which offer you are buying. Without it the site cannot work, so it needs no consent.
- Advertising and measurement — the TikTok Pixel described in section 5. This requires your consent and is off by default.
If you are in the EU/EEA or the UK, we ask for your consent with a banner before anything advertising-related is loaded. Declining costs you nothing — the site and your purchase work exactly the same way.
If you are in Switzerland or Liechtenstein, Swiss data protection law (revFADP/nDSG) does not require prior opt-in for this kind of measurement, so the pixel is active by default and this section is your notice of it. You can still turn it off at any time using the button below.
Withdrawing consent stops any further data being sent and deletes the related cookies from your device. It cannot undo measurement that already took place before you withdrew.
7. Your Rights (GDPR)
If you are located in the European Economic Area or Switzerland, you have the following rights:
- Access — request a copy of all data we hold about you.
- Correction — request correction of inaccurate data.
- Deletion — request deletion of your data ("right to be forgotten").
- Portability — request your data in a machine-readable format.
- Objection — object to processing based on legitimate interest.
- Withdraw consent — withdraw consent at any time where processing is based on consent.
To exercise any of these rights, contact us at hello@snusst.com. We will respond within 30 days.
8. Children's Privacy
Snusst is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.
9. Data Retention
We retain personal data only as long as necessary to provide the service:
- Account and health data: retained until account deletion.
- Purchase records: retained for up to 7 years for legal/tax compliance.
- Crash logs: deleted after 90 days.
10. International Transfers
Your data may be processed on servers located outside Switzerland or the EEA. When this occurs, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in accordance with Swiss data protection law (nDSG) and GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.
12. Contact & Complaints
For any privacy-related questions, contact us at:
hello@snusst.com
If you are unsatisfied with our response, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.