Pouchless

Privacy Policy

Last updated: 10 July 2026

Pouchless is built to be private by default. The app works fully offline, and your data stays on your device unless you explicitly turn on optional features.

Who we are

Pouchless is provided by ELI Solutions (a Finnish sole trader / toiminimi), the data controller for the purposes of the EU General Data Protection Regulation (GDPR).

The short version

• Your profile and progress are stored on your device by default.
• We do not sell your data. Ever.
• Optional account sync is off unless you turn it on.
• Optional, anonymous analytics is opt-in and never contains personal or health details.

What data we process

Data stored on your device (local-first). When you use Pouchless, the information you enter — such as your baseline usage (pouches per day, strength, cost), your quit and streak timestamps, and your unlocked milestones — is stored locally on your device. We do not receive this data unless you enable optional account sync.

Optional account sync (off by default). If you choose to create an account and enable sync, your profile and baseline settings are stored to your own account so they can sync across your devices. This data is used only to provide the sync feature. It is not sold and is not used to track you.

Optional analytics (opt-in). If you opt in, we collect coarse, non-identifying product-usage events (for example, that onboarding was completed) to understand how the app is used and improve it. Analytics is processed by PostHog on our behalf, is anonymous (no account identifiers, no autocapture, no session recording), and never includes your identity, your baseline numbers, money amounts, dates, or any health detail. Analytics is disabled unless you opt in, and you can withdraw consent at any time in Settings.

Subscriptions and purchases. Pouchless offers an optional paid subscription. Payments are processed by Google Play, and subscription status is managed through RevenueCat so we can unlock and restore your access. We do not receive or store your payment-card details; those are handled by Google Play. This purchase data is used only to provide the subscription and is not sold or used to track you.

What we do not collect

• No selling or sharing of personal data with data brokers.
• No advertising SDKs and no ad tracking.
• No collection of your health details for profiling.

Legal bases (GDPR)

• Performance of a contract — providing the app and, if you enable it, account sync.
• Consent — optional analytics, which you can decline or withdraw at any time in Settings.

Data retention

Local data remains on your device until you delete it (via the app's reset option or by uninstalling). If you use account sync, your synced data is kept until you delete your account or request deletion.

Your rights

Under the GDPR you have the right to access, correct, delete, restrict, or port your personal data, and to withdraw consent. Because the app is local-first, you can exercise most of these directly in the app. For synced data or any request, contact info@elisolutions.fi. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

Children

Pouchless concerns nicotine cessation and is intended for adults. It is not directed at children.

Third-party services

We use trusted processors that act on our instructions and are bound by data-processing terms:

• Google Play — processes subscription payments.
• RevenueCat — manages subscription status so we can unlock and restore access.
• PostHog — receives anonymous, opt-in product analytics (only if you opt in).
• Supabase — hosts optional account sync (only if you enable it; off by default).

This section will be kept up to date as services are added or removed.

Changes to this policy

We may update this policy from time to time. Material changes will be reflected here with a new "Last updated" date.

Pouchless is not medical advice. If you have health concerns or severe withdrawal symptoms, speak with a healthcare professional.