The iPhone and Android app

Consumer Health Data Privacy Policy

Effective November 1, 2026

Using an app for drinking less can say something about you. Laws such as Washington's My Health My Data Act and Nevada's consumer health data law protect that kind of data. This page says what we do with it and what rights you have.

Who this covers

The One Less app for iPhone and Android is run by One Less Drink ("we"). This policy covers the app. It applies to people in Washington and Nevada, and we follow it for everyone else who uses the app too.

Our App Privacy Policy has more detail about the app. The quiz on onelessdrink.com is covered by our website privacy policy.

What stays on your phone

Everything you log or answer in the app stays on your phone, and we do not collect it. That means your number for each night, your morning check-ins, your plans, your drinking style quiz, your setup and safety answers, what you want back, the price of a drink and your settings. The app does not send any of it to us, to Meta or to anyone else.

On Android, if your phone backs up to your Google account, that backup can hold a copy, under Google's own policy. It never reaches us.

What we receive, and why

Any data that comes from the app can show that someone uses an app for drinking less, so we handle all of it as consumer health data. This is what we receive:

• Subscription checks and purchase records. Each time you open the app, whether or not you subscribe, it checks with RevenueCat, our subscription service. RevenueCat receives a random ID made on your phone, your purchase receipts (the plan, its price and its dates), the app version, phone model, system version, country and IP address. On iPhone it also receives an ID Apple gives the app on your phone, your language settings and whether you allowed tracking when your iPhone asked, with or without Meta. We use this to give you the subscription you paid for, to check that each purchase is real, to answer your questions, and to count how many people subscribe, renew or cancel.
• Ad install reports from Apple. If one of our ads led you to install the app on iPhone, your iPhone sends the company that showed the ad, such as Meta, a report signed by Apple with one number from the app: whether you opened it or started a subscription. The report leaves out your name and any ID of you or your phone, so we and the ad company see it as counts, never as you. Once after you install, the app also passes a one-time code from your iPhone to RevenueCat, which asks Apple whether one of our App Store ads led to the install and keeps that answer with your purchase record. We use these to see which of our ads lead to installs and subscriptions. On Android the app sends no ad reports.
• Events for Meta, with your separate consent, on iPhone. If you tap Share with Meta in the app and then allow tracking when your iPhone asks, each time you open the app it tells Meta Platforms, Inc. that One Less, an app for drinking less, is open on your iPhone, and roughly how long you used it the time before. When you start a subscription, it also tells Meta that, with the price. Meta also receives your IP address, basic details about your iPhone such as its model, system version, language and time zone, and an ID Meta's software kit (SDK) makes. The SDK also sends a little of its own: requests for its settings, session length and small technical events, such as a note that an automatic setup is off. Meta may link this to your Meta account and to what it knows about your activity over time and across other apps and websites, and it uses the data under its own terms, including to measure and target ads. We use the results Meta shows us, which are counts, to see which of our ads work. Without both of your yeses, Meta's SDK never starts and sends nothing. Its file with a random ID is on your iPhone, with or without a yes, and that ID leaves the phone after both yeses, never before.
• Emails you send us. If you write to hello@onelessdrink.com, we receive your email address and whatever you choose to tell us. We use it to answer you.

The app never asks for your location, and we do not use geofencing.

Where it comes from

From you, through the app on your phone and the emails you send us. From Apple and Google, which run the app stores and handle payments. From RevenueCat, which passes on purchase records and Apple's answer about App Store ads. From the companies that show our ads, which show us counts of installs and subscriptions.

Who we share it with

• RevenueCat, Inc., our subscription service. It works for us under a data processing agreement and handles the subscription checks and purchase records described above.
• Apple Inc. and Google LLC, which run the App Store and Google Play. They handle payments and keep their own purchase records under their own policies. On iPhone, Apple also signs the ad install reports and answers whether an App Store ad led to an install.
• The company that showed an ad, such as Meta, receives Apple's install report, without any ID of you.
• Meta Platforms, Inc., on iPhone and with your separate consent, as described above. Meta does not work for us: it uses the data under its own terms.
• Cloudflare, Inc., which forwards email sent to hello@onelessdrink.com, and Google LLC, which hosts our inbox.

We may also disclose data when the law requires it. We share it with no one else, and we do not sell consumer health data.

Your consent, and how to take it back

Beyond Apple's ad install reports described above, which your iPhone sends itself, the app asks for your consent before it shares anything with Meta, and it works the same whichever you choose. What the app needs to work, like checking your subscription, does not need that consent.

On iPhone you can stop sharing with Meta any time. Turn off Share ad results with Meta in the app's Settings or on its Privacy screen, or turn off tracking for One Less in your iPhone's Settings under Privacy & Security, Tracking. Either one stops anything new from going to Meta and deletes the events and session data still waiting on your iPhone. It does not delete what Meta already has.

To ask for that, write to us with Your Meta sharing ID, shown on the app's Privacy screen, and we pass the request on to Meta. We cannot promise what Meta does with it. You can also clear this activity yourself in your Meta account, under Your activity off Meta technologies. The ID stays on your iPhone after you turn sharing off so that a request can name it.

Your rights

• Confirm. Ask whether we collect, share or sell your consumer health data.
• See it. Get a copy of the consumer health data we hold about you, and a list of every company we shared it with, with a way to contact each one.
• Delete it. Ask us to delete it. We delete our records and ask RevenueCat to delete its record. If you shared with Meta, we pass your request on to Meta, as described above, and we cannot promise what Meta does with it. You can delete what is on your phone yourself, with Erase all data in Settings or by deleting the app. Erase also removes Your Meta sharing ID, so note the ID first.
• Take back your consent. Stop sharing with Meta, as described above.
• Appeal. Ask us to look again if we turn down a request.

To use any of these rights, write to hello@onelessdrink.com. For a purchase record, include the order number from your Apple or Google Play receipt email. Those records carry no name or email address, so that is how we find yours and know it is yours. For what went to Meta, include Your Meta sharing ID from the app's Privacy screen. No order number is needed for that, and you do not need a subscription.

We answer within 45 days. If we need more time, we tell you why within those 45 days and take at most 45 more. We do not charge for requests, and using your rights never changes how the app works for you or what you pay.

Appeals

If we turn down a request, you can appeal by replying to our answer, or by writing to hello@onelessdrink.com with Appeal in the subject. We answer within 45 days and explain what we did and why. If we turn down your appeal, you can contact the Washington State Attorney General at atg.wa.gov/file-complaint or the Nevada Attorney General at ag.nv.gov.

Keeping it safe

The people who run the app are the only ones at One Less Drink who can see subscription records and the emails we get. The app talks to RevenueCat, and to Meta if you allow it, over encrypted connections.

How long it is kept

RevenueCat keeps purchase records for as long as we offer the app, unless you ask us to delete them. We keep your emails until your question is settled. Meta keeps what it received under its own terms.

Changes to this policy

If we change this policy, we post the new version here with a new date. Before the app shares consumer health data in a new way, it asks for your consent again.

Contact

Questions about this policy or your data? Write to hello@onelessdrink.com.