Privacy Policy

1. Who We Are

EonasApps is operated by:
Noe Bissig
Bahnhofstrasse 25
6460 Altdorf
Switzerland
Contact: hello@snusst.com

2. What Data We Collect

The Snusst app collects the following personal data when you create an account or use the app:

Account Data

• Email address — used to create and manage your account, and to send you important account-related notifications.
• Display name — used to personalize your experience within the app.

Health & Usage Data

• Snus / nicotine pouch usage data — the amounts, times, and patterns you log to track your consumption.
• Quit goals and progress — target dates, milestones, and progress statistics you set.
• Diary entries — personal notes and journal entries you write within the app.

Purchase Data

• In-app purchase history — records of any premium features or one-time purchases you make, processed through the Apple App Store or Google Play.

Technical & Analytics Data

• Device information — operating system version and app version, used for bug fixing and compatibility.
• Crash reports — anonymous technical logs to help us fix errors.
• In-app analytics events — anonymized events (e.g. screens visited, features used) to understand how the app is used and improve it. No personal health data is included in these events.

3. Why We Collect This Data

We process your data based on the following legal grounds (GDPR Art. 6):

• Contract performance — account data and purchase data are required to provide the service you signed up for.
• Legitimate interest — usage and technical data help us improve app stability and user experience.
• Consent — diary entries and health data are stored only because you actively choose to enter them.

4. How We Store Your Data

Your data is stored securely using industry-standard cloud infrastructure. All data in transit is encrypted using TLS. Your diary entries and health data are stored under your account and are only accessible to you.

We retain your data for as long as your account is active. If you delete your account, all associated data is permanently deleted within 30 days.

5. Sharing Your Data & Third-Party Sub-Processors

We do not sell your personal data. To operate the app, we work with the following sub-processors who may process your data on our behalf:

Supabase (database & authentication)

Your account data, health & usage data, and diary entries are stored in Supabase, a cloud database and authentication service operated by Supabase Inc. (USA). Data is encrypted in transit (TLS) and at rest. Supabase acts as a data processor under a Data Processing Agreement.
Supabase Privacy Policy

RevenueCat (subscription management)

In-app purchases and subscription status are managed through RevenueCat, Inc. (USA). RevenueCat receives your anonymous app user ID and purchase receipt data from the App Store / Google Play to verify and manage your subscription. RevenueCat does not receive your name, email, or health data.
RevenueCat Privacy Policy

PostHog (in-app analytics)

We use PostHog to collect anonymized analytics events within the app (e.g. which screens are visited, which features are used). These events help us understand how the app is used and improve it over time. PostHog does not receive your name, email, health data, or diary entries. Events are associated with an anonymous identifier only.
PostHog Privacy Policy

Apple App Store & Google Play (payments)

All payment transactions are processed directly by Apple or Google under their respective privacy policies. We do not handle or store your payment card details.
Apple Privacy Policy  ·  Google Privacy Policy

All third-party processors are contractually bound to protect your data and may only use it to provide services on our behalf.

6. Your Rights (GDPR)

If you are located in the European Economic Area or Switzerland, you have the following rights:

• Access — request a copy of all data we hold about you.
• Correction — request correction of inaccurate data.
• Deletion — request deletion of your data ("right to be forgotten").
• Portability — request your data in a machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at hello@snusst.com. We will respond within 30 days.

7. Children's Privacy

Snusst is not intended for children under 13 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

8. Data Retention

We retain personal data only as long as necessary to provide the service:

• Account and health data: retained until account deletion.
• Purchase records: retained for up to 7 years for legal/tax compliance.
• Crash logs: deleted after 90 days.

9. International Transfers

Your data may be processed on servers located outside Switzerland or the EEA. When this occurs, we ensure appropriate safeguards are in place (e.g. Standard Contractual Clauses) in accordance with Swiss data protection law (nDSG) and GDPR.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via the app or by email. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact & Complaints

For any privacy-related questions, contact us at:
hello@snusst.com

If you are unsatisfied with our response, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch.