TangCai · iOS & Android

Apps Privacy Policy

How we handle information when you use our apps, and how to exercise your privacy rights.

Effective and last updated: 13 September 2026

1. Who we are and when this policy applies

TangCai Invest AB ("TangCai", "we", "us", or "our"), a company in Sweden, is the controller responsible for the personal data processing described here. Contact us at info@tangcai.se.

This policy applies to our iOS and Android apps that link to it and to support we provide for those apps. TangCai Invest AB is the legal entity responsible for the processing described here.

The sections below are organised by feature. Account, cloud-storage, sharing, and purchase sections apply when the app offers that feature and you use it. Automatic technical processing and analytics are described separately. A service with its own privacy policy is governed by that policy. Where we process information on behalf of a business customer, that organisation's privacy notice explains its processing and our role.

SnusTracker is listed on Google Play (com.snustracker) and the Apple App Store (6752117399).

2. Information we process and its purposes

Information you enter and store on your device

Our apps process the content and settings you enter to provide their features. Depending on the feature, this includes activity logs, dates and times, notes, goals, cost settings, drawings, images, audio, and preferences. Data kept only on your device is not automatically available to us. Device backups and exports you create can contain copies, including copies held by your chosen backup or storage provider.

In SnusTracker, your snus history, notes, targets, cost settings, and reminder preferences are stored locally on your device. You do not need an account to use it. This local storage is separate from the interaction analytics and purchase processing described below.

Accounts, cloud features, and sharing

If you create an account, we process the username, email address if requested, sign-in credentials or authentication identifiers, and profile information you provide to create and secure it. If you save content online, we process that content and its associated identifiers and timestamps to store it and make it available to you.

If you join a shared space, connect with another user, or publish content, we process the relevant membership, connection, and sharing information. The people you choose to share with receive that content and the associated profile information. Content you publish publicly is visible to other users and can be copied by them. These activities occur when you use the corresponding online or sharing feature.

Purchases and subscriptions

When an app offers paid features, Apple App Store or Google Play processes in-app payments. We process product identifiers, transaction or receipt references, purchase dates, subscription status, and customer or app-user identifiers to verify purchases, provide paid access, restore purchases, and handle billing questions. Where a web checkout is offered, its payment provider processes the payment details you submit.

We use RevenueCat for purchase and entitlement management in apps that integrate it, including SnusTracker. RevenueCat receives purchase information, an app-user identifier, and technical information such as platform, app version, device information, and IP address. An app-user identifier can be generated even without an account. Apple and Google do not provide us with your full payment-card number.

Technical information and analytics

Connections to our online services and their providers involve technical information such as IP address, request time, app and operating-system version, device type, and service responses. We use operational information to deliver online features, investigate failures, prevent abuse, and protect the service.

SnusTracker uses PostHog for product analytics. This sends app lifecycle events, screen views, and interactions such as logging actions, feature use, progress views, and purchase or paywall interactions, together with event times, an installation-related identifier, app and device information, and network information such as IP address. These records help us understand feature use and improve the app. They are not necessarily anonymous: repeated events can be associated with the same identifier.

SnusTracker does not send the contents of your stored notes, entered costs, targets, or saved snus-history records as analytics properties. However, a logging interaction and its event time can reveal that you used the logging feature at that time. Screen recording and session replay are disabled in SnusTracker.

In other apps, analytics processing applies where the app's privacy information identifies analytics as enabled; the data and purposes are those described above. An app without analytics does not start collecting analytics merely because it links to this policy.

Support

When you contact us, we process your contact details, message, and any attachments or diagnostic information you choose to provide so we can respond and investigate the issue. Please avoid sending sensitive information that is unnecessary for your request.

3. Permissions and your choices

We use device permissions for the features they enable, such as notifications for reminders, or access to selected photos, files, a camera, or a microphone when you choose to import or create content. SnusTracker's reminders are scheduled on your device. You can manage notification and other permissions through your device settings.

You can choose whether to use optional account, purchase, upload, and sharing features. Refusing information or a permission needed for a feature may prevent that feature from working. Withdrawing a device permission does not automatically erase information already processed.

4. Legal grounds

Where the EU or UK GDPR applies, we rely on the following grounds:

Providing the service you request: processing necessary to operate your account and requested online features, deliver purchases, and provide related support.
Legitimate interests: protecting our services, investigating faults and abuse, responding to general enquiries, and understanding and improving feature use where permitted by law and after considering your rights.
Legal obligations: processing necessary for applicable accounting, tax, and other legal requirements.
Consent: where required for optional analytics, device access, or other processing. You can withdraw consent using the available consent control or by contacting us. Reading this policy or using an app does not itself provide consent.

Where processing involves special-category personal data, such as health information, a separate condition under applicable data protection law is required in addition to a legal ground above. We do not treat this policy as explicit consent to that processing.

6. International processing

Providers can process information outside your country, including in the European Economic Area and the United States. Where EEA or UK personal data is transferred to a country without an applicable adequacy decision, the transfer requires appropriate safeguards, such as approved standard contractual clauses and any necessary supplementary measures. We use the applicable transfer arrangements in our providers' data-processing terms. Contact info@tangcai.se for details of the safeguards applicable to your data and how to obtain a copy.

7. How long we keep information

Retention depends on the type of information and why it is needed:

Device-only content: remains on your device until you delete or reset it, or remove the app's stored data. Copies in device backups or exports remain under your and your chosen provider's control.
Accounts and online content: retained while needed to provide your account and requested storage or sharing, until you delete the content or request account deletion, subject to legal exceptions below.
Purchase records: retained while needed to verify and restore your entitlement and for applicable accounting, fraud-prevention, refund, and dispute obligations. A lifetime purchase may require a continuing entitlement record.
Analytics and operational records: retained for the period needed to evaluate feature use over time, investigate faults or security incidents, and establish whether changes improve the service. The relevant criteria are the analysis period, whether an investigation remains open, and whether identifiable records are still necessary. We delete or anonymise records when no longer needed for those purposes.
Support messages: retained while handling your request and any related follow-up or dispute, then deleted when no longer needed.

We may retain specific records longer where required by law or necessary for legal claims, restricting their use to that purpose. Deleted information can remain in protected backups until those backups are overwritten under the provider's backup cycle; it is not used for ordinary operations. Contact us for retention information relating to a particular request or record.

8. Request deletion of your data or account

To request deletion of personal data we hold, or an account in an app that provides accounts, email info@tangcai.se with the subject “App privacy – deletion request”. Include the app name and the account username, email, or other identifier associated with your request. You can request deletion without reinstalling the app.

We may ask for proportionate information to verify your identity and locate the records. Do not send passwords or full payment-card details. Where analytics or purchase records use a generated identifier, we may need that identifier to find them; we may be unable to identify records from your email address alone.

In SnusTracker, use Settings → Reset all data to reset local app data. This does not delete analytics or purchase records held separately by service providers; contact us about those records. We cannot remotely erase device-only data or exports and backups under your control.

For apps with accounts, you can also use the available in-app account-deletion control. We delete the associated personal data unless a specific legal retention exception applies, and explain applicable exceptions when responding. Uninstalling an app or deleting an account does not cancel a store subscription. Manage subscriptions separately through Apple or Google Play.

9. Your privacy rights

Depending on applicable law, you can request access to your personal data, correction, deletion, restriction of processing, and a portable copy. You can object to processing based on legitimate interests and withdraw consent where processing relies on consent. Withdrawal does not affect the lawfulness of earlier processing. These rights have legal conditions and exceptions.

Contact info@tangcai.se to exercise a right, object to analytics processing, or ask about an available privacy control. We respond within the applicable legal timeframe; under the GDPR this is normally one month, with extensions permitted in certain circumstances and explained to you.

You can complain to a data protection authority, including the Swedish Authority for Privacy Protection (IMY) or the authority where you live or work. We do not make solely automated decisions with legal or similarly significant effects on you through the processing described in this policy.

10. Security

We use technical and organisational safeguards appropriate to the information and risks, including access restrictions and encrypted network connections for personal data. You should protect your device, account credentials, and exported files. No storage or transmission method can guarantee absolute security.

11. Children and family use

An app's intended audience depends on the service it provides. SnusTracker is intended for adults who track their snus use. A family or creative app can have a different audience; this policy does not impose a blanket adult-only restriction on those apps.

Where a child's use involves personal data and parental authorisation is required by applicable law, that authorisation must be obtained before the relevant processing. Parents or guardians can contact us to request access to or deletion of their child's data, subject to appropriate verification. If you believe a child has provided personal data without required authorisation, contact us with the app name so we can investigate and remove the data where required.

12. Changes and contact

We update this policy when our data practices or legal requirements change and revise the date above. For material changes, we provide appropriate notice through the affected app or another suitable channel, and request consent before new processing where required.

For questions about this policy or your personal data, contact TangCai Invest AB, Sweden, at info@tangcai.se.