Privacy Policy

This Privacy Policy explains what information the Last Can mobile app ("Last Can", "we", "us") handles, and how. Optional analytics requires a separate choice in the app.

1. Information stored on your device

Almost everything you create in Last Can is stored locally on your phone, in the app's own storage, and is not transmitted to us. This includes:

• Your quit profile: the product you use, how much and how often, what it costs you, your quit or step-down date, and your goal.
• Your daily activity: promises kept, uses logged, slips, streaks, and milestones.
• Your Why Vault: the reasons, notes, and any photos or video you choose to add as motivation.
• Your settings: reminder times, quiet hours, and app preferences.

On native devices, the persisted app-state snapshot (including reports, named coping plans, reminders, and text reasons) uses AES-256-GCM encryption with a key held in OS secure storage. This does not encrypt the entire device or every app file. Web QA storage is browser-local plaintext. Weekly pattern reviews are computed locally from explicit records and are never sent to analytics. There is no app-operated cloud backup or sync.

2. Photos and media

Photos, video, and audio you choose or record for the Why Vault stay on the device. Vault media files and intentionally exported JSON/share files are not encrypted by the app-state codec. OS protections may apply. Permission is requested for the media action you choose. Exporting or sharing sends a copy to the destination you select; that copy is outside the app’s deletion control. Text reasons and media remain accessible without Pro.

3. Notifications

Reminders are scheduled locally on your device. The content of a reminder is generated on your phone; we do not operate a push server that receives your information to send them.

4. Purchases and subscriptions

Last Can offers an optional paid membership. If you subscribe, the purchase itself is processed by the App Store (Apple) or Google Play, not by us. We never receive or store your payment card details.

We use RevenueCat to manage subscriptions and restore purchases across your devices. To do this, RevenueCat processes purchase and receipt information and an anonymous app-user identifier generated for your install. This identifier is not your name, email, or phone number. See the Apple, Google, and RevenueCat privacy policies for how those providers handle this data.

5. Analytics and diagnostics

Optional product analytics is off at each app launch and requires a fresh opt-in in You → Your data. If enabled, PostHog receives coarse onboarding, vault-add, reminder-scheduling, and purchase interactions. The only event properties are purchase availability and a bounded purchase-failure category. Requests also include the project token, event name, a random identifier lasting until restart or revocation, and flags disabling geolocation and person profiles. No device identifiers, screen dimensions, SDK session metadata, session replay, or automatic screen tracking are added. PostHog receives the network IP address when a request arrives.

We never send use, abstinence, lapse, confidence, support-person details, trigger history, plan content, notes, reasons, media, or free text to product analytics. We do not target offers using health behavior. Turning analytics off cancels queued sends and aborts active requests. Requests already sent cannot be recalled, and the toggle does not delete earlier events.

Production native builds use Sentry for crash and error diagnostics separately from optional product analytics. Default personally identifying information is disabled. Diagnostic reports can include technical error and device/runtime information. We do not deliberately attach your app-state snapshot, reports, reasons, or media to diagnostics.

6. What we do not do

• We do not sell or rent your personal information.
• We do not show third-party advertising.
• We do not track you across other apps or websites, and we do not show an App Tracking Transparency prompt because we have nothing to track.
• We do not require you to create an account or give us your name, email, or phone number to use the app.

7. Keeping data, and deleting it

Use You → Your data → Delete my data to remove app state and backups, its encryption key and migration marker, app-owned vault media, picker/recording caches, cached exports, and scheduled reminders. The app waits for removal to finish; if a step fails, it displays Retry deletion and keeps deletion pending across restart. Do not treat an error as successful deletion.

Copies you saved or shared outside the app, original photos in your library, and OS/device backups are outside this deletion transaction. Uninstalling is not a substitute for the in-app deletion flow: secure-storage items or device backups may persist under OS rules. Deleting app data does not cancel a store subscription or erase purchase records held by Apple, Google, or RevenueCat. Manage subscriptions in your store settings. Export and deletion are free.

8. Children

Last Can is intended for adults working to quit tobacco and nicotine. It is not directed to anyone under 18, or under the legal age to purchase tobacco or nicotine where they live, and we do not knowingly collect information from them.

9. Your choices and rights

Because your personal content stays on your device and we do not hold an identifiable profile of you on our servers, you control your information directly through the app and your device settings (photos, notifications). Depending on where you live, you may have rights under laws such as the GDPR or CCPA. If you have a question or request, contact us and we will help.

Website signup

If you submit your email on getlastcan.com for testing or launch updates, it is sent to our signup endpoint and mailing provider, Loops. This is separate from the account-free mobile app. Contact support to request removal from the mailing list.

10. Changes to this policy

If we change this policy, we will update the date above and post the new version here. Significant changes may also be noted in the app.

11. Contact

Questions about privacy? Email support@getlastcan.com.