Privacy Policy

Last updated: 17 October 2026

1. Introduction

Snusfri ("Snusfri", "we", "us", or "our") is a recovery support app that helps people quit snus and nicotine pouches, as well as cigarettes and alcohol, through motivation and progress tracking. Snusfri is a support and tracking tool only — it is not medical treatment, medical advice, or a healthcare service.

This Privacy Policy explains what personal data we collect when you use the Snusfri app on iPhone (iOS) or Android, why we collect it, how we store and protect it, and the rights you have over it. Snusfri is provided by Nordvision Rah (sole proprietorship, Norwegian org. no. 931 750 879), Leirsund, Norway, the controller responsible for the personal data described here.

This policy explains our processing; it is not a request for blanket consent. Where consent is needed, we ask separately in the app.

2. What data we collect and why

We collect only the data needed to run your account, track your progress, and operate the community. We do not require your real name. The data we collect is:

Account information

• Email address and password — used to create and secure your account and to sign you in. Passwords are handled by our authentication provider and are not stored by us in readable form.
• Sign in with Apple or Google — if you choose one of them, we receive the email address they share with us (with Apple this can be a private relay address) and, from Google, the name and profile picture link on your Google account, which our authentication provider stores with your account. We do not show that name to other users.
• Username (handle) — a pseudonymous, user-chosen display name. This is not your real name and is shown to other users on your community content.

Onboarding answers

• Which substance you want to quit (snus / nicotine pouches, cigarettes, or alcohol), your typical daily usage amount, your approximate weekly spend, how long you have used the substance, and your reasons for quitting.
• We use these answers to personalize your experience, calculate your stats and savings, and tailor motivational content.

Progress data

• Streaks and statistics based on your quit progress.
• Craving logs, including an optional self-reported trigger you may add.
• Savings goals, including a goal name, target amount, and an optional photo you choose to upload.
• We use this data to show you your progress, motivate you, and provide the core features of the app.

Community content

• Content you choose to create — posts, comments, reactions, and optional images — is user-generated and visible to other signed-in Snusfri users. It is displayed together with your pseudonymous username and your current streak. Community images use public, unlisted URLs: anyone with the image address can view the image without signing in. Goal photos are held in a private bucket.
• Please do not include real-name or sensitive personal information in community content, since it is visible to other users.

Profile picture (optional)

• You can add a profile picture in Profile. It is optional: without one, others see the first letter of your username. You can change or remove it at any time.
• Who sees it: only people who already see your username in the app: your friends (once a friend request is accepted), the members of your rope team (it is shown small beside you on the mountain) and of old squads you belong to, and, while you have community posts or comments that are shown, other signed-in Snusfri users who see them. It is not shown to someone you have blocked or who has blocked you, and never on the website (including invite pages). A change such as a block, a removal or a new picture reaches other people’s apps within about 10 minutes while they are online. On a rope team, “the mist” hides your numbers, not your picture.
• Where and how: the app crops the photo to a square, compresses it and removes the file’s hidden metadata (such as location, phone model and the date it was taken) before upload. It is stored in a private bucket in Supabase Storage in the EU (Stockholm), never at a public address; the app shows it through links that expire after an hour.
• Reports: other users can report a profile picture. The person who reports it stops seeing it at once; a picture reported by several people is hidden until we have reviewed it, and we may remove it and stop new uploads from that account (see the Community Guidelines).
• Removal: when you remove or replace your picture, the app deletes the old file from storage (if that fails, for example offline, it tries again the next time you open Profile), and other people’s apps stop showing it within about 10 minutes while they are online. It is also deleted, through Storage, when you delete your account.

Friends, old squads and rope teams (Taulag)

• Friends you have accepted see your username, what you are quitting and how many days you have been free.
• Old squads (“Lag”, from earlier versions) show their members your username, your days, your check-ins and an estimate of your savings.
• Rope teams (“Taulag”, 2–4 people) show the other members your username, your stage on the mountain and your height (one metre per hour since your start, rounded down to the hour), and, only if you turn on “Share when I start over”, that you started over.
• Invite codes: the person who starts a rope team gets a code that is valid for 14 days (a new code can be made at any time, and the old one stops working). Anyone you give the code to can join without further approval until the team is full. Before joining, a signed-in user with the code sees the inviter’s username and stage. The web page at snusfri.app/t/… shows only the code, never a name.
• Mist and relapses: after a relapse you stand “in the mist” for 24 hours: your rope team, and friends or squad members who are on that rope team with you, see no numbers for you. When the mist lifts, your new height shows, so your rope team can tell that you started over. You can also go into the mist yourself at any time. Friends and old squad members who are not on a rope team with you see your days as before.
• Your choice: you can leave a rope team at any time, and report or block a member (a block applies across the app). Your time zone (used only to avoid night-time notifications) and your settings are never shown to others.

Private feature feedback

If you send a feature suggestion through the app, we store the message, its time and your account ID so we can review and respond. This feedback is not posted to the community. Please avoid health details or other sensitive information in the message. It is removed with your account.

Push notification token

• If, and only if, you turn on notifications, we store a device push token (via Expo) so we can send you reminders, motivational notifications and messages from your squad or rope team. The token belongs to the account signed in on the device: the app requests its removal when you switch notifications off or sign out, including after OS permission has been revoked, and a successful registration on another account transfers the token to that account. Local reminders stop when you turn them off; server removal needs a successful connection, and a notification already sent may still arrive. The Profile screen shows a retry action when removal is not confirmed. Signing out continues after a short wait even if server removal fails; we cannot guarantee removal while offline. If you do not enable notifications, no push token is collected.

Usage statistics (only if you say yes)

The first time you open the app (and once after the update that added it), we ask whether you want to help us make Snusfri better. Only if you say yes does the app count how it is used: for example which screens are opened, how far people get in the first-time setup, whether the craving tool ends with “I made it”, “relapse” or closing, and which Premium screen led to a trial or purchase. We use this only to see what actually helps people quit and where the app needs work.

• What is sent: the name of the event (for example “craving tool opened”), a few fixed values (for example which button was tapped, a rough duration such as “1–2 minutes”, or which stage of the journey from 1 to 10), the time, the app version and build, the main iOS version number (on iPhone only), the app language and whether Premium is active.
• What is never sent: your name, username, email address, account ID or push token; anything you type (goal names, posts, comments, notes); which substance you are quitting, amounts, spending or money saved; your exact streak; photos, contacts, location, device model, or advertising/device identifiers (IDFA/IDFV on iPhone, the advertising ID on Android). Our database is built to reject free text.
• A random installation ID: the app creates a random ID for this installation. It is not your account ID, it is not linked to your account, and the statistics are sent without your login. The ID is replaced after 13 months, when you switch statistics back on, and when you delete your account. Because the ID shows that events come from the same installation, the data is pseudonymous rather than fully anonymous under the GDPR.
• Where and for how long: in our own database at Supabase in the EU (Stockholm). These product-usage events are not sent to a third-party analytics service. With the same consent, Sentry separately receives sampled performance diagnostics as described in Section 4. The events are deleted automatically after 13 months. Like every request to our servers, sending them passes through our database provider’s request logs, which may contain the IP address. Supabase stores these request logs in EU data centres and keeps them for seven days on our plan (Supabase Pro). The IP address is never stored with the usage events.
• Your choice: you can switch this off at any time under Profile → Settings → Usage statistics. When you do, nothing more is sent, events still waiting on the phone are discarded, and deletion of this installation’s stored statistics is queued. Server deletion completes when the app can successfully contact the server; it retries while running. Deleting your account in the app queues the same deletion.

3. Legal basis for processing (GDPR)

If you are in the European Economic Area (EEA), including Norway and Sweden, we rely on the following legal bases under the EU/EEA General Data Protection Regulation (GDPR):

Data / purpose	Legal basis
Account creation, sign-in, and providing the app's core features (account, onboarding answers, progress data, community content)	Performance of a contract (our Terms with you)
Optional uploaded photos (including a profile picture) and push notifications	Consent (you choose to upload or to enable notifications; you can withdraw at any time)
Usage statistics (Section 2)	Consent (asked once in the app; you can withdraw at any time in Profile)
Crash/error reports and private feature feedback	Legitimate interests (GDPR Article 6(1)(f)) in diagnosing faults, keeping the app reliable and responding to suggestions. You can object by contacting us.
Optional performance diagnostics (20% sampling after a yes to usage statistics)	Consent (GDPR Article 6(1)(a)); controlled by the same Usage statistics choice, including withdrawal. Device access is subject to ekomloven § 3-15 where applicable.
Keeping the service secure, preventing abuse, and content moderation (reports, blocking, auto-hiding)	Legitimate interests in operating a safe community

Where we rely on consent, you can withdraw it at any time (for example, by turning off notifications, deleting an uploaded photo, or switching off usage statistics). Withdrawing consent does not affect processing carried out before withdrawal.

4. Where your data is stored and the processors we use

Your core account and app data are stored in Supabase, hosted in the European Union (Stockholm region, eu-north-1). We use processors for hosting and app operation. Apple and Google also act as independent controllers for their sign-in, stores and payments:

Processor	Purpose	Location
Supabase	Database (PostgreSQL), authentication, file storage, and the usage statistics (only if you said yes)	EU (Stockholm)
Expo	Delivery of push notifications (only if you enable notifications)	United States; international infrastructure
Apple	App distribution via the App Store and billing of Snusfri Premium subscriptions bought on iPhone (in-app purchase)	EEA and worldwide, including the United States
Google	App distribution via Google Play and billing of Snusfri Premium subscriptions bought on Android (Google Play Billing)	EEA and worldwide, including the United States
RevenueCat	Checking whether your account has an active Snusfri Premium subscription	United States; international infrastructure
Sentry	Crash/error reports, plus performance diagnostics only with usage-statistics consent (20% sampling of transactions), including error details, app version, device/OS information and timings. The app removes URL query strings and UUIDs from JavaScript diagnostics, drops account fields and console breadcrumbs, and disables default personal-information sending. This is data minimisation, not a guarantee of anonymity. Sentry keeps these diagnostics for up to 90 days.	EU (Germany)
Netlify	Hosting of snusfri.app and its forms: support messages and account deletion requests (your name or username, email address, message and selected language)	United States; international infrastructure

Snusfri Premium is sold as an in-app subscription, billed by Apple when bought on iPhone and by Google Play when bought on Android. We use RevenueCat to check whether your account has an active subscription; it receives your account’s app user ID and the store’s purchase records. Neither we nor RevenueCat receive your card or bank details. A subscription follows your account, so it also unlocks Premium when you sign in on the other platform; it is managed and cancelled in the store where it was bought.

5. Data retention

We keep your personal data for as long as your account is active and you continue to use Snusfri. When you delete your account, your account and associated records in our active database are deleted, with the separate processing and retention exceptions in Section 8. Usage statistics are deleted automatically after 13 months. Sentry keeps crash/error reports and performance diagnostics for up to 90 days. Our Supabase Pro database has daily backups, which Supabase stores for seven days; point-in-time recovery is disabled. Data deleted from the live database can therefore remain in a backup copy for up to seven days, until that copy expires. Storage photo objects are not included in database backups. Backups are not used for ordinary app access. Support emails, and the support messages and deletion requests sent through the forms on snusfri.app, are deleted at the latest 12 months after the case is closed, both from our mailbox and from Netlify. Netlify’s own system logs, which can include the IP address of a visit, are kept for 90 days, and archived copies for up to one year (Netlify’s data processing agreement). Supabase request logs are kept for seven days. We may retain limited information for a short period where required to comply with legal obligations, resolve disputes, or enforce our Terms, after which it is deleted.

RevenueCat purchase history is not automatically erased by in-app account deletion. You can ask us to erase it; any legally required exception will be explained. Apple and Google retain their own store records. Erasure does not cancel a subscription.

6. We do not sell your data or use third-party tracking

• We do not sell your personal data.
• We do not share your data with advertisers, and we do not show third-party ads.
• We do not use advertising or cross-app tracking SDKs. Optional product-usage statistics go to our own backend. Sentry receives crash/error reports independently of the usage-statistics switch. Performance diagnostics are sampled only while that switch is on; switching it off stops new sampling and drops transactions still waiting to be sent.
• We do not collect your precise location.

Older app versions: the consent-gated performance diagnostics and the push-token removal described in this policy apply from Snusfri 1.0.8. Versions 1.0.7 and earlier sample performance diagnostics at 20% regardless of the usage-statistics choice, and do not remove the push token from our servers when you sign out or switch notifications off. Updating the app applies the behaviour described here.

7. Data security

We protect your data using Row Level Security (RLS) in our database. This means each user can access only their own private data (such as account details, onboarding answers, and progress), except what you choose to share with your friends, squads and rope team (see Section 2). Community posts are shown to signed-in Snusfri users. Uploaded community images are stored at public, unlisted URLs containing a long account identifier; anyone who has an image URL can view it without signing in. These links are not an access-control mechanism. Profile pictures are different: they are stored privately and shown only to the people described in Section 2, through links that expire after an hour. Access to private account data is controlled by authentication, and data is transmitted over encrypted connections. No method of storage or transmission is completely secure, but we take reasonable measures to safeguard your information.

8. Your rights and how to access or delete your data

If you are in the EEA, you have the following rights under the GDPR:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your personal data.
• Restriction and objection — ask us to limit or stop certain processing.
• Withdraw consent — where processing is based on consent (for example, notifications, uploaded photos, or usage statistics).
• Lodge a complaint — with your local data protection authority (for example, Datatilsynet in Norway or Integritetsskyddsmyndigheten (IMY) in Sweden).

Deleting your account in-app: You can permanently delete your account at any time directly in the app. Go to Profile → Delete account. After the server confirms success, your account and its associated database rows are deleted, including onboarding answers, progress, savings goals, community content and private feature feedback. Uploaded community, goal and profile photos are removed through Storage before the account is deleted. If image cleanup fails, the operation reports a failure and must be retried. Public image caches or copies saved by others may outlast removal. Deletion of usage statistics from this phone is queued separately and completes after successful server contact. This action cannot be undone. Deleting your account does not cancel a Premium subscription: cancel it in the App Store or Google Play first.

Deleting your account without the app: use the form on snusfri.app/delete-account or email us from your account’s email address. We verify ownership before deleting and respond without undue delay, within one month of receiving the request; we will explain any lawful extension within that month. The page also lists what is deleted and what is kept.

RevenueCat purchase history is not automatically erased by in-app account deletion. You can ask us to erase it; any legally required exception will be explained. Apple and Google retain their own store records. Erasure does not cancel a subscription.

You can also edit much of your information directly in the app. For any other request relating to your rights, contact us at the address in Section 12.

9. Children

Snusfri is intended for adults (18+) because it references nicotine and alcohol. It is not directed at children under 13, and we do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us so we can remove it.

10. International users

Snusfri is operated from Norway, which is in the EEA. Core account and app data are hosted in the EU (Stockholm); the providers above may process other data outside the EEA, including in the United States. Transfers must use an applicable adequacy decision (including the EU-US Data Privacy Framework only for certified recipients) or the European Commission’s Standard Contractual Clauses with any necessary supplementary safeguards. The safeguards our providers publish for these transfers are: Supabase (data hosted in the EU; Supabase Pte. Ltd. in Singapore, the contracting processor, and Supabase, Inc. in the United States, which provides support and operations, can access it under the Standard Contractual Clauses that Supabase uses for transfers to Singapore and the United States); Sentry (data hosted in the EU, Germany; Sentry is certified under the EU-US Data Privacy Framework and also offers the Standard Contractual Clauses); Netlify (certified under the EU-US Data Privacy Framework, with the Standard Contractual Clauses as a fallback in its data processing agreement); Expo (self-certified under the EU-US Data Privacy Framework); RevenueCat (the Standard Contractual Clauses in its data processing addendum); Google, for Sign in with Google and Google Play (Google LLC is certified under the EU-US Data Privacy Framework and also uses the Standard Contractual Clauses); and Apple, for Sign in with Apple and the App Store (Apple Distribution International in Ireland is the controller for users in the EEA, and Apple’s transfers from the EEA are governed by the Standard Contractual Clauses). Contact us for information or a copy of the relevant safeguards.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example when features or data handling change. When we make material changes, we will update the "Last updated" date at the top and, where appropriate, notify you in the app. Please review this policy periodically.

12. Contact

Email: support@snusfri.app

If you have questions about this Privacy Policy or your data, please contact Nordvision Rah:

• Contact form: snusfri.app/support
• Website: snusfri.app
• Privacy page: snusfri.app/privacy
• Terms: snusfri.app/terms