Privacy Policy
Last updated 26 September 2026
The short version
- What you put into Last Tin stays on your phone. That means your answers, pouch log, cravings, check-ins, journal and goals. We don’t collect it, and we can’t see it.
- No ads, no trackers, no analytics in the app, and no account to sign up for.
- Payments are handled by Google Play. A service called RevenueCat tells the app whether you’ve paid. Neither of them gets your answers, logs or journal.
- You can delete everything at any time in the app: You → Delete my data.
- Who we are
- What stays on your phone
- Reminders and notifications
- Subscriptions and purchases
- What Google Play tells us
- If you email us
- This website
- What we don’t do
- Data outside the UK
- How long data is kept
- Your rights
- Adults only
- Keeping it safe
- Changes to this policy
1. Who we are
Last Tin is an app made by an independent developer based in the United Kingdom (“we”, “us”). We are the data controller for the small amount of personal data described in this policy. You can reach us at hello@lasttin.app.
2. What stays on your phone
To work, the app saves these things on your phone:
- your answers to the setup questions, such as your first name (if you give it), how many pouches you use, what you spend, and your reasons and triggers;
- your pouch log, cravings, mood check-ins, sleep and focus ratings, and journal entries;
- your savings goals and your settings.
This information is kept only on your device. It isn’t sent to us or to anyone else. Some of it, like how much nicotine you use and how you’re feeling, is personal, and that’s exactly why the app keeps it on your phone.
If backup is turned on for your Google account, Android may include the app’s data in your phone’s backup. That backup is made and stored by Google in your Google account, and we can’t access it.
If you use a Share button in the app, your phone’s share menu opens and you choose where the text or image goes. Nothing is shared unless you choose to.
3. Reminders and notifications
Reminders, such as your daily check-in, pouches left today and milestones, are set up by the app on your phone. They don’t go through a server of ours. You can turn them off in the app or in your phone’s settings.
4. Subscriptions and purchases
Purchases are made through Google Play. Google handles your payment, and we never see your card or bank details. Google’s own privacy policy covers your Google account and payments.
We use RevenueCat, Inc. to manage subscriptions. It checks with Google Play whether you have an active subscription or trial, so the app can unlock. To do this, RevenueCat processes:
- a random ID created for your copy of the app (not your name or email address);
- your purchase details, such as the product, price, currency, dates and the store’s transaction records;
- basic technical details, such as your type of device, operating system, app version, country or region, and IP address.
We use this to give you what you’ve paid for (this is necessary for our contract with you), and to prevent fraud and understand sales overall (our legitimate interests). RevenueCat never receives your answers, logs, check-ins or journal. You can read RevenueCat’s privacy policy.
5. What Google Play tells us
As the app’s developer, we get reports from Google Play, such as the number of installs, sales figures, ratings and reviews. If you’ve chosen to share usage and diagnostics with Google, we may also see crash reports. These reports don’t include what you enter in the app.
The app may occasionally ask whether you’d like to rate it. If you do, Google handles the rating or review, and a written review is shown publicly under your Google profile name, according to Google’s rules.
6. If you email us
If you write to hello@lasttin.app, we receive your email address, your message and anything you attach. Emails to that address are forwarded by Cloudflare to our inbox, which is provided by Google. We use your email only to reply and help you (our legitimate interests). We delete emails within two years, unless we need to keep one longer, for example to deal with a refund question or a legal claim.
7. This website
This website is hosted by Cloudflare. Like any website host, Cloudflare processes technical information, such as your IP address and browser type, to deliver the pages and protect them from attacks. We don’t use cookies, analytics or tracking on this website.
8. What we don’t do
- We don’t sell or rent your personal data.
- We don’t show ads or share data with advertisers.
- We don’t ask for your email address or make you create an account.
- We don’t use your data to make automated decisions about you.
9. Data outside the UK
RevenueCat, Google and Cloudflare may process data outside the UK, including in the United States. When they do, they rely on safeguards recognised under UK data protection law, such as the UK Extension to the EU–US Data Privacy Framework or approved contract clauses.
10. How long data is kept
- On your phone: until you delete it (You → Delete my data) or uninstall the app.
- Purchase records at RevenueCat: for as long as needed to provide your subscription and meet legal, tax and accounting rules. You can ask us to delete them.
- Emails: up to two years, as explained above.
11. Your rights
Under UK data protection law, you have the right to see the personal data we hold about you, correct it, delete it, limit or object to how we use it, and get a copy of it in a portable format.
Because your app data never leaves your phone, you control it directly in the app. For purchase records or emails, write to hello@lasttin.app. To help us find your purchase record, include your Google Play order number (it starts with “GPA.” and is in your Google Play receipt email). We’ll reply within one month.
If you’re unhappy with how we’ve handled your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk or on 0303 123 1113. We’d be grateful for the chance to put things right first.
12. Adults only
Last Tin is for adults aged 18 and over. The app asks your age at the start and doesn’t let you continue if you’re under 18. We don’t knowingly process data about anyone under 18.
13. Keeping it safe
Your app data is protected by your phone’s own security, such as your screen lock and your phone’s encryption, so keep your phone locked and up to date. Purchase information is sent to Google Play and RevenueCat over encrypted connections.
14. Changes to this policy
If we change how the app handles data, for example by adding an analytics service to understand how the app is used, we’ll update this policy before the change and tell you in the app if the change is significant. The date at the top shows when this policy was last updated.
Contact
Questions about your privacy? Email hello@lasttin.app.