Privacy Policy

Last updated: 14 August 2026

This Privacy Notice for My Last Drink ("we", "us", or "our") describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you:

Questions or concerns? Reading this Privacy Notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at mylastdrinkapp@gmail.com.

Table of Contents

  1. What information do we collect?
  2. How do we process your information?
  3. What legal bases do we rely on to process your personal information?
  4. When and with whom do we share your personal information?
  5. Do we use cookies and other tracking technologies?
  6. How do we handle your social logins?
  7. Is your information transferred internationally?
  8. How long do we keep your information?
  9. How do we keep your information safe?
  10. Do we collect information from minors?
  11. What are your privacy rights?
  12. Controls for Do-Not-Track features
  13. Do United States residents have specific privacy rights?
  14. Do other regions have specific privacy rights?
  15. Health information and your explicit consent
  16. Your support contact
  17. Do we make updates to this notice?
  18. How can you contact us about this notice?
  19. How can you review, update, or delete the data we collect from you?

1. What information do we collect?

Personal information you disclose to us

In short: We collect personal information that you provide to us.

We collect personal information that you voluntarily provide to us when you register on the Services, or otherwise when you contact us. This may include:

Sensitive information. When necessary, with your consent or as otherwise permitted by applicable law, we process the following category of sensitive information:

Payment data. All payment data is handled and stored by Apple (App Store / In-App Purchase), Google Play, and RevenueCat. You may find their privacy notices here: Apple, Google, and RevenueCat. All payments are processed directly by the Apple App Store and Google Play through their in-app purchase systems. My Last Drink never receives, processes, or stores payment card details. RevenueCat is used to manage and verify subscription status across both platforms on our behalf.

Social login data. We provide the option to register using your Google account. If you choose to register this way, we will collect certain profile information about you from Google, as described in "How do we handle your social logins?" below.

Age verification. When you create an account, we ask you to enter your date of birth to confirm you meet our minimum age requirement of 18. We use this only at that moment, to calculate your age — we do not store the date of birth you enter. We retain only a simple confirmation that the age requirement was met. If the date entered shows you are under 18, we do not create an account and do not retain the date you entered. See "Do we collect information from minors?" below.

Application data. If you use our application, we may also collect the following, if you choose to grant permission:

Information automatically collected

In short: Some information — such as IP address and device characteristics — is collected automatically.

We automatically collect certain technical and usage information when you use the Services, including IP address, device and browser characteristics, operating system, and information about how you use the app. This does not reveal your specific identity. We collect this through analytics tooling (PostHog), described further below.

Google API

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

2. How do we process your information?

In short: We process your information to provide, improve, and administer our Services, communicate with you, for security and fraud prevention, and to comply with law.

3. What legal bases do we rely on to process your personal information?

If you are located in the EU or UK, this section applies to you. The GDPR and UK GDPR require us to explain our legal bases:

We are the "data controller" of the personal information described in this Notice.

If you are located in Canada, this section applies to you. We rely on your express or implied consent, or on limited statutory exceptions (for example, fraud prevention, or where required by law), as permitted under Canadian privacy law.

4. When and with whom do we share your personal information?

In short: we share information with the service providers below, and in limited other situations.

PurposeThird party
Allow you to sign in with your Google accountGoogle
To store and secure user account data, craving records, and photos (cloud database, authentication, and file storage)Supabase
To build, compile, and deliver app updates to users' devicesExpo Application Services (EAS)
To analyse anonymised, consented app usage data and improve the productPostHog
To manage subscription status and entitlements across app storesRevenueCat
To process subscription payments and manage in-app purchases on iOSApple App Store (In-App Purchase)
To process subscription payments and manage in-app purchases on AndroidGoogle Play (Play Billing)

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or part of our business.

We have not sold or shared any personal information with third parties for a business or commercial purpose. We do not run advertising, ad networks, or retargeting of any kind.

5. Do we use cookies and other tracking technologies?

In short: we use a lightweight analytics identifier (via PostHog) to understand app usage. We do not use tracking technologies for advertising.

My Last Drink does not use browser cookies (there is no browser within the app). Our analytics provider, PostHog, assigns each device an anonymous identifier to track usage across sessions — functioning similarly to a cookie — solely to help us understand how the app is used and improve it. This is consented, privacy-safe, and never used for advertising, retargeting, or building profiles about individual users. We do not permit any third party to use tracking technologies on our Services for advertising purposes.

6. How do we handle your social logins?

In short: if you register using your Google account, we receive certain profile information from Google.

Our Services offer the ability to register and log in using your Google account. Where you choose to do this, we receive certain profile information from Google (typically your name and email address). We use this information only as described in this Notice. We are not responsible for how Google handles your information — please review Google's own privacy policy.

7. Is your information transferred internationally?

In short: your information may be processed in countries other than your own.

Our servers are located in Germany and the United States. Your information may be transferred to, stored by, and processed in the facilities of the third parties listed in Section 4, including facilities in the United States.

If you are located in the EEA, UK, or Switzerland: we rely on the European Commission's Standard Contractual Clauses for transfers of your personal information to third-party providers outside the Protected Area. These clauses require all recipients to protect personal information originating from the EEA or UK in accordance with European data protection standards. Further details can be provided on request.

8. How long do we keep your information?

In short: for as long as you have an account with us.

We keep your personal information for as long as your account is active. When you delete your account (Settings > Export / delete my data), we permanently delete your associated records, unless a longer retention period is required by law.

9. How do we keep your information safe?

We use appropriate technical and organisational security measures to protect your information, including encryption at rest and in transit, and row-level security so each user can only ever access their own records. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Do we collect information from minors?

My Last Drink is strictly for adults aged 18 and over. We do not knowingly collect data from anyone under 18. At sign-up, we ask you to enter your date of birth to verify you meet this requirement; we do not store the date you enter, only a confirmation that the requirement was met. If the date entered shows you are under 18, we do not create an account and do not retain the date you entered. If we later learn we have collected information from someone under 18 by other means, we will deactivate the account and delete the data. Contact us at mylastdrinkapp@gmail.com if you believe this has occurred.

11. What are your privacy rights?

Depending on your location, you may have the right to access, correct, delete, or export your personal information, restrict or object to its processing, and withdraw consent at any time. You can exercise most of these rights directly in the app (Settings > Export / delete my data), or by contacting us at mylastdrinkapp@gmail.com.

If you are in the UK and unhappy with how we've handled your information, you can complain to us directly, or to the Information Commissioner's Office (ico.org.uk, 0303 123 1113). If you are in the EEA, you may complain to your local data protection authority. If you are in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

Marketing communications. You can turn off "Occasional Premium offers" at any time in Settings — this is a separate, genuine opt-in from our service notifications.

12. Controls for Do-Not-Track features

We do not currently respond to Do-Not-Track browser signals, as no uniform standard exists yet. If one is adopted, we will update this Notice accordingly.

13. Do United States residents have specific privacy rights?

In short: California residents have rights under the CCPA/CPRA.

Categories of personal information we collect

CategoryExamplesCollected
A. IdentifiersName, email address, account identifiersYes
B. California Customer RecordsName, contact informationYes
C. Protected classifications—No
D. Commercial informationSubscription/purchase statusYes
E. Biometric information—No (Face ID/Touch ID for app-lock is processed on-device by the operating system; we never receive biometric data)
F. Internet/network activityApp usage data via analyticsYes
G. Geolocation dataPrecise location, only at the moment of an SOS messageYes
H. Audio/visual informationPhotos you choose to uploadYes
I. Professional/employment information—No
J. Education information—No
K. Inferences—No (we do not build profiles or draw inferences about you for business purposes)
L. Sensitive personal informationAccount login information, health data, precise geolocationYes

We have not sold or shared any personal information with third parties for a business or commercial purpose in the preceding twelve months. We do not use your information for targeted advertising, and we do not use automated decision-making or profiling that produces legal or similarly significant effects.

Your rights include the right to know, access, correct, and delete your personal data, obtain a copy of it, and not be discriminated against for exercising these rights. To exercise these rights, email mylastdrinkapp@gmail.com.

California "Shine the Light" law. California residents may request information about disclosures of personal information to third parties for direct marketing purposes. As noted above, we do not disclose personal information for third parties' own direct marketing purposes.

14. Do other regions have specific privacy rights?

Australia and New Zealand

We collect and process your personal information under Australia's Privacy Act 1988 and New Zealand's Privacy Act 2020. You have the right to request access to or correction of your personal information at any time by contacting us. If you believe we are unlawfully processing your personal information, you may complain to the Office of the Australian Information Commissioner, or the Office of the New Zealand Privacy Commissioner.

15. Health information and your explicit consent

The information you record in this app about alcohol cravings, drinking, relapses, moods, and your reasons for stopping is health information. Under data protection law this is "special category" data and receives the highest level of protection. We only collect and use it with your explicit consent, which you give when you choose to record it. You can withdraw that consent at any time by deleting the relevant entries or your entire account, in Settings. Withdrawing consent does not affect anything we did lawfully beforehand.

16. Your support contact

If you choose to nominate a support contact, we store that person's first name and mobile number solely so the app can prepare a message for you to send from your own phone. We never contact that person ourselves, never send them anything automatically, and never use their details for any other purpose. Please only add someone who is happy for you to store their number. You can remove them at any time in Settings.

17. Do we make updates to this notice?

We may update this Privacy Notice from time to time. The updated version will show a new "Last updated" date at the top. If we make material changes, we will notify you by posting a prominent notice in the app or sending a notification.

18. How can you contact us about this notice?

If you have questions about this notice, please email us at mylastdrinkapp@gmail.com.

19. How can you review, update, or delete the data we collect from you?

You have the right to request access to the personal information we collect from you, details about how we've processed it, correct inaccuracies, or delete it. You may also withdraw your consent to our processing at any time. You can exercise these rights directly in the app (Settings > Export / delete my data), or by emailing mylastdrinkapp@gmail.com.