CANLESS
Get the app

Privacy Policy

Effective October 20, 2026. This policy covers the Canless iPhone app and the canless.app website.

The short version

  • You can use Canless without an account. Then your logs, plan, and answers stay on your iPhone. We can't see them.
  • If you create an account, we store your data on servers in the EU so it can sync and be restored. The sign-in screen asks you to agree to this policy, which explains what your account stores.
  • We never sell your data, never use it for ads, and never track you across other apps or websites.
  • We collect usage statistics to improve the app. They don't include your name, email, or account. You can turn this off in Settings.
  • You can delete your account and all your data in the app at any time.

1. Who we are

Canless is made by Dominik Wojtucki, Dačická 137, 109 00 Praha, Czech Republic, company ID (IČO) 30160413 ("we", "us"). We are the controller of your personal data. Contact: [email protected].

2. What we collect, why, and on what legal basis

a) Data that stays on your iPhone (no account)

Your pouch logs (time, time zone, brand, nicotine strength in mg, count, optional trigger), craving sessions (start, length, breathing exercise, outcome), your plan, your questionnaire answers (for example, pouches per day, price per can, your goal and your reason), and your settings. This data is stored only on your device and in the Canless widget on your device. We don't receive it. If you use iCloud Backup or back up your iPhone to a computer, iOS may include Canless data in that backup. Apple and your device settings control that, not us.

b) Account and sync (only if you create an account)

  • What: your email address, a user ID, and the data listed in a) above. If you sign in with Apple, we receive only your email address (which can be a private Apple relay address) and an Apple user ID. If you sign in with Google, Google shares your email address, a Google user ID, your name, and a link to your profile picture. Our sign-in provider stores them with your account. We don't use your name or picture. We don't receive your contacts or anything else from your Apple or Google account.
  • Also: when you sign in, our backend records the IP address and device type of your session. This keeps accounts secure and is based on our legitimate interest in preventing misuse (Art. 6(1)(f)).
  • Why: to back up your data, sync it between your devices, and restore it if you reinstall the app.
  • Legal basis: performing our agreement with you (GDPR Art. 6(1)(b)). Information about your nicotine use may count as health data. We process it only with your consent (GDPR Art. 9(2)(a)). You give it when you create an account: the sign-in screen asks you to agree to this policy, and this section explains that your account stores this data. If you don't consent, you can keep using Canless without an account.

c) Sign-in codes by email

If you sign in with email, we send you a one-time code. The code expires after 15 minutes. Legal basis: performing our agreement with you (Art. 6(1)(b)).

d) Usage statistics

  • What: which features you use and which steps you reach. Examples: a pouch was logged and whether it was after your quit date, a craving session ended and how, the level shown on your results screen, a questionnaire step was reached, the paywall was shown, or a purchase finished. Each event also includes technical details: device model, iOS and app version, language, region, time zone, screen size, appearance and accessibility settings (for example, text size), and how many days and sessions you've used the app. Each event also carries a pseudonymous device ID: a one-way hash of an ID that iOS gives our app. It doesn't tell us who you are, but it lets us count devices, so the law treats it as personal data.
  • Not included: your name, email, account ID, IP address, or your logs, brands, amounts, or reason.
  • Why: to see which parts of the app help people and what to fix.
  • Legal basis: our legitimate interest in improving Canless (Art. 6(1)(f)). You can object at any time: turn off Settings → Share usage statistics.

e) Purchases

You buy Canless Pro through Apple's App Store. Apple handles payment, and we never see your payment details. When you buy, the app passes an identifier to Apple with the purchase, so the purchase can be matched to your app or account: your account's user ID if you're signed in, otherwise a random ID for this install. To show you a special offer, our server signs it using the product, the offer, and the transaction ID of your current Apple subscription. It doesn't store them. Legal basis: performing our agreement with you (Art. 6(1)(b)). Apple's privacy policy applies to your purchase.

f) Support

If you email us, we use your email address and message to reply. Legal basis: our legitimate interest in answering you (Art. 6(1)(f)).

g) Notifications and the widget

Reminders are scheduled on your iPhone. We don't send them from a server. By default they use neutral text that doesn't mention nicotine. The widget reads data only from your device.

h) Our website

The website doesn't use analytics, advertising, or tracking cookies. Our hosting provider, Cloudflare, processes your IP address to deliver the pages and protect them from attacks. To block bots, it may set a short-lived security cookie (__cf_bm, deleted after 30 minutes without activity). Legal basis: our legitimate interest in running a secure website (Art. 6(1)(f)).

You don't have to give us any personal data. Without an account, Canless works on your iPhone, but your data isn't backed up. We don't make automated decisions about you that have legal or similarly significant effects.

3. Who processes data for us

We use these service providers. Supabase, Resend, TelemetryDeck, and Cloudflare act on our instructions under data processing agreements and must protect your data at least as well as this policy does.

  • Supabase: database and sign-in. Servers in Frankfurt, Germany (Amazon Web Services).
  • Resend: sends sign-in code emails. USA.
  • TelemetryDeck: usage statistics. Servers in the EU.
  • Cloudflare: website hosting and forwarding of emails sent to [email protected].
  • Google (Gmail): our support inbox. Google handles these emails under its own terms and privacy policy.

Apple (Sign in with Apple, App Store purchases) and Google (Sign in with Google) handle your data as independent controllers under their own privacy policies.

We don't share your data with anyone else, except if the law requires it.

4. Transfers outside the EU

Some providers (Resend, Cloudflare, Google, and Supabase for support access) are based in the USA. Transfers are protected by the EU-U.S. Data Privacy Framework where the provider is certified, or by the European Commission's Standard Contractual Clauses.

5. What we never do

  • Sell or rent your data.
  • Use your data for advertising, or share it with advertisers or data brokers.
  • Track you across other companies' apps or websites.
  • Use your data to train AI models.

6. How long we keep data

  • Account data: until you delete your account. Deletion removes it from our database right away. We don't keep backup copies of the database.
  • Unconfirmed email sign-ups: deleted automatically after 7 days.
  • Session and security logs (IP address, device type): while your session is active, and up to 7 days in our provider's technical logs.
  • Sign-in emails at Resend: up to 30 days.
  • Support emails: 2 years after our last message, then deleted.
  • Usage statistics: stored by TelemetryDeck according to its own retention rules. They aren't linked to your name, email, or account.
  • Data on your iPhone: until you delete it (Settings → Delete my data, or delete the app).

7. Your rights

You have the right to:

  • Access your data and get a copy of it in a portable format. Email us and we'll send your account data within one month. Without an account, your data is only on your iPhone, so we don't have a copy.
  • Correct it. Most of it you can edit in the app.
  • Delete it. In the app: Settings → Delete account (or Delete my data without an account). This also revokes Sign in with Apple.
  • Withdraw consent at any time, as easily as you gave it, by deleting your account. This doesn't affect processing before you withdrew it.
  • Object to processing based on legitimate interest, for example by turning off usage statistics.
  • Restrict processing in certain cases.
  • Complain to a data protection authority. In Czechia that is the Office for Personal Data Protection (Úřad pro ochranu osobních údajů, uoou.gov.cz). You can also complain in the EU country where you live.

To use any of these rights, email [email protected] from the email address on your account. We may ask you to confirm it's you.

8. If you live in the United States

  • We don't sell or share personal information for targeted advertising, and we don't let third parties track you through Canless.
  • Do Not Track: we don't track you across sites or apps, so Do Not Track signals don't change anything.
  • We honor access, correction, and deletion requests from all users, wherever they live. We don't discriminate against you for using them.
  • Residents of Washington, Nevada, and other states with consumer health data laws: see our Consumer Health Data Privacy Policy.

9. Security

Data is encrypted in transit. On our servers, each account can only access its own data. Sign-in tokens are kept in the iOS Keychain. No system is perfectly secure. If a breach affects your data, we'll tell you and the authorities as the law requires.

10. Age

Canless is only for people 18 and older. We don't knowingly collect data from anyone under 18. If you believe a minor has given us data, email us and we'll delete it.

11. Changes

If we change this policy, we'll update the date at the top. For important changes, we'll let you know in the app before they take effect.

12. Contact

Dominik Wojtucki, Dačická 137, 109 00 Praha, Czech Republic. Email: [email protected].