Privacy Policy — Downshift & Website

1. Who we are and what this policy covers

Eleutherion LLC (“Eleutherion,” “we,” “us,” or “our”), based in Franklin, Wisconsin, United States, operates the Downshift iOS app and eleutherionlabs.com. This policy covers the app, optional account backup, our company website, and related support communications. Contact us at hello@eleutherionlabs.com with privacy questions.

Downshift is a nicotine tracking and behavior-change tool. It is not a medical service. An account is optional and separate from an App Store subscription. Using the app as a guest keeps your tracking records on your device, but subscription services and enabled product analytics still involve the providers described below.

We do not sell personal information or share it for targeted advertising. We do not use advertising pixels in the app or on this website.

2. Information handled by Downshift

Your tracking information

Depending on the features you use and the version of the app, Downshift stores your selected nicotine product (pouches, vaping, or cigarettes), brand and strength, baseline use, routine, goals, reasons for reducing, plan and pace, usage logs and timestamps, check-ins, craving records, triggers, progress, savings estimates, reminders, and settings. This may include information you entered in earlier app versions. These details can reveal health information or habits, so we treat them as sensitive.

The app uses these records to calculate allowances and plans, display progress, provide craving support, and personalize the features you request. Plans and estimates are calculated by the app; we do not send your tracking records to an external AI service. The app does not read Apple Health records, contacts, photos, or precise GPS location.

Optional account and cloud backup

If you choose Sign in with Apple, Apple supplies an app-specific identifier and the name or email information made available during authorization. You can use Apple’s private relay email where offered. Supabase processes authentication information, session credentials, your account identifier, and account profile information for us.

Signing in enables backup and synchronization of your tracking information, onboarding answers, plans, history, and eligible settings to our Supabase database, linked to your account. Existing guest records may be merged with that account’s backup. Cloud backup is available to signed-in accounts independently of subscription status. Signing out stops future synchronization from that device; it does not delete the existing cloud copy.

Subscriptions and purchases

Apple processes App Store payments. RevenueCat helps us display offers, validate purchases, restore access, and manage subscription entitlements and support. They process transaction and subscription information such as purchased products, status, dates, price, currency, and customer or transaction identifiers, together with technical information needed to operate those services. We do not receive your full payment card details.

Guest subscriptions use a RevenueCat customer identifier. When you sign in, the app associates subscription access with your Downshift account identifier so purchases and access can be restored. Your detailed nicotine logs and cloud backup are not sent to RevenueCat.

3. Product analytics and technical information

Downshift uses PostHog for optional product analytics. Starting with build 2610112115, analytics is off by default and collects events only after you enable “Share anonymous product analytics” in Settings on that device. You can turn it off there at any time. Earlier builds enabled analytics by default with a Settings opt-out. Upgrading to the new behavior turns that earlier setting off until you explicitly opt in again; restoring a cloud account does not enable analytics on a device. No additional automatic consent prompt is shown. Events describe app sessions, screens, onboarding steps, feature actions, purchase flows, and sign-in or synchronization outcomes. Associated properties can include coarse categories, such as the nicotine product category, offer shown, action, and error category.

Analytics uses an installation-level identifier rather than your name or account identifier. Although the setting calls this “anonymous,” an identifier can link events from the same installation, so this information should not be understood as completely anonymous. The SDK and service may also process app and operating-system versions, device characteristics, timestamps, and network information such as an IP address and approximate location derived from it.

We do not send detailed nicotine amounts, the contents of your logs, free text, email addresses, Apple or Supabase account identifiers, authentication tokens, or Screen Time app selections in product analytics. Session replay, automatic screen and interaction capture, surveys, and automatic exception capture are disabled. We do not use PostHog person profiles or advertising identifiers to track you across other companies’ apps and websites.

Turning analytics off stops future analytics collection through this setting; it does not automatically delete events already received. Essential authentication, purchase, security, and network processing continues when those services are used. Providers may maintain technical logs for reliability, troubleshooting, and abuse prevention.

4. Device permissions, reminders, and ratings

App blocking: If you enable Screen Time protection, Apple’s Family Controls framework supplies opaque selection tokens for apps or categories you choose. Downshift stores the selections on the device to apply the blocking rules you request. These tokens do not disclose the underlying app identities to us. The native selection tokens, permission state, and active blocking-session details are excluded from cloud backup. Starting with build 2610112115, Screen Time permission outcomes and blocking start/stop events are also excluded from product analytics. Earlier builds could send those basic events when analytics was enabled, but not the selected app tokens. You can manage or revoke permission in iOS Settings.

Notifications, widgets, and Live Activities: With the relevant permissions and settings, Downshift schedules local reminders and shares the data needed by its own widgets and extensions through on-device shared storage. Progress or nicotine-related information may appear on your Home Screen, Lock Screen, or Dynamic Island and may be visible to someone with access to your device. Manage previews, notifications, widgets, and Live Activities in the app or iOS Settings. Notification reminders are off by default and require you to enable them; an existing explicit notification choice is preserved on update.

App Store ratings: Downshift may request Apple’s native rating prompt after plan personalization. Apple controls whether it appears and handles submitted ratings and reviews. Downshift records locally that it requested the prompt; Apple does not tell the app whether you submitted a rating or what score you chose. Written App Store reviews and the reviewer name you use may be publicly visible.

5. Website visits and support

You can browse eleutherionlabs.com without an account. We do not add advertising pixels, behavioral analytics scripts, or social-media tracking widgets to the website. Cloudflare hosts and delivers it and provides network security. Page requests may involve an IP address, requested URL, time, browser information, and security signals. Cloudflare may provide aggregate traffic and security information to us.

The website does not set advertising or analytics cookies or use browser storage to profile visitors. Cloudflare may use technical cookies or similar mechanisms for security checks. You can manage cookies in your browser; blocking necessary security cookies may affect access.

If you contact us, we receive your email address and the information you send, including names, messages, support details, and attachments. We use it to respond, investigate problems, handle privacy requests, and retain relevant correspondence. Email links open your email app and do not automatically attach your Downshift records. Please send only what is needed for your request, and never send passwords or full payment details.

6. Why we use information

We use information to:

Provide tracking, personalized plans, progress, reminders, and support tools.
Save preferences and, when you sign in, authenticate and synchronize your account.
Offer, validate, restore, and support subscriptions.
Understand product use and improve reliability through enabled analytics.
Deliver and secure our website and respond to support or privacy requests.
Prevent misuse, resolve disputes, and meet applicable legal obligations.

Where applicable data-protection law requires a legal basis, processing depends on the purpose: providing a service you request, our legitimate interests in operating and securing the service and responding to inquiries, legal obligations, or your consent where required. Where consent is required for sensitive information or optional processing, you may withdraw it, subject to applicable law. This policy explains our practices; it is not a substitute for consent required by law.

The providers used for the purposes above include:

Apple: App Store purchases and reviews, Sign in with Apple, and device features.
RevenueCat: subscription validation, customer identifiers, entitlements, offers, and subscription support.
Supabase: account authentication and the cloud backup and synchronization you enable by signing in.
PostHog: enabled product analytics and related technical processing.
Cloudflare: website hosting, delivery, and security.
Email service providers: delivery and storage of communications you send us.

Providers receive information relevant to their role. They process it under the terms applicable to their services; Apple also independently manages your Apple Account, payment, and App Store activity. We may disclose information to comply with law or lawful requests, protect rights and safety, investigate fraud or misuse, or as part of a merger, acquisition, or transfer of the business, subject to applicable privacy protections and notice requirements. Linked third-party websites have their own privacy policies.

8. Sensitive and consumer health information

Nicotine-use history, cravings, goals, routines, and related inferences may be considered sensitive or consumer health data under laws that apply where you live. The sources are your entries, your app activity, and calculations based on those records. We use them to provide the tracking, planning, and support features you request. If you enable account backup, Supabase processes the backed-up records for us. Support providers may also handle details you choose to include in a message.

We do not sell consumer health data, use it for targeted advertising, or send your detailed tracking records to advertising networks. We do not use location-based geofencing around healthcare facilities. You can contact us to request access, deletion, or withdrawal of consent for collection or sharing where applicable law provides those rights. Turning off a feature or signing out stops the associated future processing as described here; request deletion separately for existing server records.

9. Retention, reset, and account deletion

Local records remain until you delete or reset them in the app or remove them through the operating system. Device or iCloud backups you control may retain copies under your Apple settings. Resetting local data or uninstalling Downshift does not by itself delete your cloud account or records held by subscription providers. If you are signed in, changes may synchronize with your account; use account deletion when you want to remove the account and its backup.

We retain account and synchronized records while needed to provide the account service. Use the in-app Delete Account control to request deletion of your Downshift authentication account and cloud backup; after successful deletion, the app also resets its local data. Signing out instead lets you choose whether to keep or remove the local copy and leaves the cloud account intact. Other devices or backups may retain previously downloaded copies.

Analytics, technical logs, and support correspondence are retained for the purposes described above and according to the relevant service configurations and legal requirements. Limited records may need to be retained for security, fraud prevention, disputes, accounting, or legal compliance. Provider backup copies may persist until their normal retention cycle expires. We do not promise a fixed deletion period for records independently controlled by Apple or other providers.

Deleting an account does not automatically remove Apple or RevenueCat transaction records or earlier analytics events. Contact us for help with a request involving those records. Deleting the app or account does not cancel an App Store subscription. Manage or cancel it in your Apple Account subscription settings.

10. Your choices and privacy rights

Use a guest profile if you do not want account backup.
Sign out to stop future cloud synchronization from a device, or use Delete Account to remove the account and backup.
Turn off “Share anonymous product analytics” in Downshift Settings.
Manage notification, Screen Time, widget, and Live Activity permissions and visibility.
Choose what you include in support requests and manage website cookies in your browser.

Depending on where you live and the law that applies, you may have rights to access or receive a copy of personal information, correct it, delete it, restrict or object to processing, withdraw consent, or appeal a decision about a privacy request. Withdrawal does not affect processing already lawfully performed. You may also have the right to complain to a data-protection authority or other regulator.

Send requests to hello@eleutherionlabs.com with “Privacy request” in the subject. We may ask for information needed to verify your request, but do not send passwords. We will respond as required by applicable law and explain any applicable exception. For an appeal, reply with “Privacy appeal” and describe the decision you want reviewed. We will not discriminate against you for exercising applicable privacy rights, although removing information needed for a feature may prevent us from providing that feature.

11. Security and international processing

We use reasonable technical and organizational safeguards, including HTTPS for network services, authenticated cloud access, and database access rules intended to restrict records to their account owner. Cloud backup is not represented as end-to-end encrypted against us or our hosting provider. No transmission or storage system can be guaranteed completely secure.

Eleutherion is based in the United States. Providers may process information in the United States and other countries where they operate. Protections may differ from those in your home country. Applicable transfer safeguards are required where the law calls for them; contact us with questions about processing affecting your data.

12. Children’s privacy

Downshift and this website are not directed to children under 13, and we do not knowingly collect personal information from children under 13. A higher age threshold or parental permission may apply under local law. If you believe a child has supplied personal information, contact us so we can investigate and delete it as appropriate. Downshift does not encourage anyone to start using nicotine.

13. Changes and contact

We may update this policy as the app, website, or our practices change. The date above identifies the current version. We will provide additional notice or obtain consent for material changes when required by law. For privacy questions, support, and data requests, contact Eleutherion LLC, Franklin, Wisconsin, United States, at hello@eleutherionlabs.com.