Nomore - Privacy Policy

1. Who We Are and What This Policy Covers

This Policy describes Nomore's device permissions, local storage, installation and purchase analytics, and Apple Ads attribution. It does not replace Apple's privacy policy or authorize optional device access. Nomore does not require a separate user account.

Reading or accepting this Policy is not consent to every possible use of personal information. Where consent or a device permission is required, the applicable consent or permission must be obtained separately. Declining ATT does not remove purchased access.

2. Information Used for App Features

• Subscription records: Names, providers, prices, currencies, billing periods, dates, trial settings, categories, payment-method labels, websites, notes and charge history you enter are stored on your device to manage your personal subscription ledger, calendar views and spending estimates. This ledger content is not included in the app's startup, attribution or purchase logs.
• Images, calendars and reminders: A subscription image you select through Apple's system photo picker is cropped and stored locally; it is not uploaded through our logging system. If enabled, local notifications may display a subscription's name, amount and expected charge date on your device, including its lock screen. Calendar synchronization writes subscription names, dates, recurrence and price history to a separate Nomore calendar. An account calendar may be synchronized by the operating system.
• Exchange rates: Nomore requests reference rates from Frankfurter using the ECB provider, a fixed EUR base and, where needed, a historical date. The request does not contain your subscription ledger. The provider receives standard connection information. Converted totals are estimates, not guaranteed transaction or settlement rates.
• Preferences: Language, display preferences, onboarding and privacy choices are stored on your device.
• Support: If you choose to email us, we receive your email address, message and attachments you send. Your mail provider also processes the message under its own terms. Do not include unnecessary sensitive information.

3. Startup and Usage Logs

After the startup privacy notice is accepted, Nomore sends installation and startup records to Alibaba Cloud Simple Log Service. A record is generated on the initial eligible launch and subsequent cold launches or genuine returns from the background. Merely displaying a permission prompt is not intended to count as a new background return.

The fields include a randomly generated installation identifier (uid), app identifier (jointype), record date and time, startup type, device model, iOS version, network category, display resolution, app version, system region (country) and app language (language). Region describes a system setting and does not establish your physical country.

If ATT is authorized and a valid advertising identifier is available, the current IDFA is added at transmission time for authorized advertising measurement. Denied, restricted, unavailable and all-zero identifiers are omitted. IDFA is not written into Nomore's local logging queue. We do not obtain a MAC address or use device characteristics to create a fingerprint.

The receiving service also receives standard connection information such as the public IP address and receipt timestamp. A random installation identifier and associated records are pseudonymous, not necessarily anonymous.

Privacy-label data categories: User ID, Device ID, Purchase History, Product Interaction and Advertising Data are used for analytics, linked to the user or installation, and declared for tracking. Crash Data, Performance Data and Other Diagnostic Data are declared for analytics, not linked to the user and not used for tracking. These diagnostic categories concern app faults, performance and technical operation; ordinary device information accompanying identified startup records is not represented as anonymous diagnostics.

4. Apple Ads Attribution and ATT

For an eligible new installation, Nomore uses Apple's AdServices framework to request an attribution token and sends that token only to Apple's attribution API. After the first-install startup log is delivered, the attribution process can continue asynchronously. Temporary network or attribution failures can be retried on a later eligible cold launch within the implemented attempt limits; a result is not guaranteed.

Apple may return whether the installation is attributed, organization, campaign, ad-group, ad and keyword identifiers; country or region; conversion type; claim type; click or impression date; and placement. Available fields depend on Apple's response. We prefix returned fields with ads_, for example ads_attribution, ads_campaignId, ads_adGroupId and ads_keywordId.

The result is cached on this installation and uploaded to Alibaba Cloud with the installation identifier, date, time, region and language. A valid IDFA is included only when ATT authorization permits access. The AdServices token is not sent to Alibaba Cloud. Attribution results can exist without an IDFA; Apple's attribution response and permission-dependent detail are controlled by Apple.

Cached attribution is linked to this installation's subsequent purchase-event records to measure the relationship between advertising acquisition and purchases. This does not disclose your Apple Account email or name to Nomore. We do not use an alternative identifier or fingerprint to bypass a refusal of tracking permission. ATT authorization is limited to the disclosed purpose and is not blanket permission for unrelated processing.

5. Subscriptions, Lifetime Purchases and Purchase Logs

Apple processes purchases and payment credentials. Nomore uses StoreKit product and verified transaction information to retrieve prices, check trial eligibility, recognize purchases, restore access and refresh membership status. We do not receive your payment-card number or Apple Account password.

Nomore sends a purchase-start event when you actually initiate the StoreKit purchase flow. A separate event is sent for a verified success returned by that direct purchase. The event category (type) distinguishes a purchase attempt, a successful free-trial purchase and a successful paid purchase. A purchase attempt is not evidence of payment.

Fields include the installation identifier, app identifier, record date and time, product list price (order_amount), actual product currency (order_currency), membership duration (order_days, with 0 for lifetime), applicable trial days (order_freedays), and transaction and original-transaction identifiers for successful purchases. Any cached Apple attribution fields are included with the ads_ prefix. A valid authorized IDFA may be added at transmission time and is not persisted locally.

The logged price is the product's list price, not a representation of the amount actually charged. For example, a successful free trial may carry the product's normal price while no payment is due at that time. Apple's billing records govern actual charges, refunds and taxes.

Restoration, historical transaction callbacks and automatic renewals are not reported as new direct purchase events by this logging flow. Transaction identifiers are retained locally to avoid repeatedly reporting the same successful purchase. Purchases are not delayed while waiting for an attribution result that is not yet available.

6. Purposes and Applicable Legal Bases

We use feature information to provide requested subscription recording, calendar, reminder, currency-conversion and spending-summary functionality; StoreKit information to provide and verify purchased access; support messages to respond to you; and installation, attribution and purchase-event logs to understand usage, diagnose operational issues and measure advertising acquisition and conversion.

Where the GDPR or similar rules apply, processing necessary to supply a requested service is based on performing the contract or taking steps at your request; optional permission-dependent processing and advertising-identifier access rely on the applicable consent; processing required by law relies on the relevant legal obligation. Where applicable law permits a legitimate-interest basis for limited operational security or diagnostics, that basis requires necessity, proportionality and consideration of your rights. We do not treat all analytics as necessary to perform the contract.

You may withdraw consent for future processing without invalidating lawful earlier processing. The available controls and rights-request channel are described below. We do not make decisions producing legal or similarly significant effects about you solely by automated processing.

7. Recipients and Service Providers

• Apple: StoreKit and the App Store process products, payments and entitlements; AdServices processes the attribution token and returns the attribution result. Apple may receive connection or service-specific information under its Privacy Policy.
• Alibaba Cloud Simple Log Service: Receives startup, attribution and direct purchase-event records for our analytics and advertising measurement. This is a logging service, not an upload service for your subscription ledger, notes or user photos. See Alibaba Cloud's privacy information.
• Frankfurter: Supplies ECB reference exchange rates and receives rate-request parameters and connection information. See Frankfurter's website.
• Email providers: Process support messages only when you choose to send them.

Access to personal information must be limited to the stated purposes and subject to appropriate confidentiality, security and data-protection obligations. We do not authorize service providers to repurpose Nomore logs for unrelated advertising. We may disclose information where legally required, to protect rights and security, or in a lawful corporate transfer subject to applicable safeguards and notice. We do not publicly post your personal logs.

8. Permissions and Your Choices

• Calendar full access: Requested when you enable calendar synchronization, so Nomore can create, find, update and remove its renewal events. You can change access in iOS Settings. Denial prevents synchronization, not local subscription recording.
• Notifications: Requested when you enable renewal reminders, for local alerts, sounds and badges. You can disable notifications or hide their lock-screen previews in iOS Settings.
• Photos: The system photo picker lets you select an image without granting Nomore general access to your library. No camera permission is requested for this feature.
• ATT: Requested through Apple's system prompt. You can manage it in Settings → Privacy & Security → Tracking. Denying or revoking ATT prevents subsequent IDFA access and use in new log requests, including retries. Startup, Apple attribution and direct purchase-event records may continue without IDFA for permitted analytics and functionality. This does not authorize cross-company tracking using the installation identifier or any other substitute identifier. Turning off ATT does not automatically delete records already uploaded.

Ordinary app storage, screen dimensions, app version, system version, language and region do not require a separate iOS permission prompt. Their use and disclosure still remain subject to applicable privacy rules. Network access may be subject to system or regional controls. No photo-library, contacts or microphone permission is required by the logging features described here.

To withdraw consent for analytics processing or request deletion of existing server records, contact luckingxstar@163.com. We will explain the available means of identifying the relevant installation and apply the request as required by law. Do not send an IDFA or unnecessary identity documents by email. Turning off ATT alone is not a request to delete all logs.

9. Storage, Retention and Deletion

Preferences, subscription records, selected images, exchange-rate caches, calendar synchronization state, installation identity, pending log events, successful-purchase deduplication identifiers and cached attribution are stored in the app's local data. Nomore marks its logging state as excluded from device backup. The logging client uses an ephemeral network session without a persistent cookie store.

Undelivered startup records are eligible for retry for up to seven days, with a bounded queue and attempt limit. Successfully uploaded pending events are removed from the local queue. Attribution and purchase-deduplication state may remain for the installation's lifetime; exhausted pending records may remain in local state until the app's data is removed. Retry eligibility is not the same as a guaranteed file-deletion deadline.

Server log retention: Startup, Apple advertising-attribution and direct purchase-event logs are retained in Alibaba Cloud Simple Log Service for 180 days under the configured retention policy. Expired records are removed through that policy, subject to any legally required preservation or restriction. This server retention does not change Apple's own billing-record retention.

Retention must be limited to what is necessary for the disclosed purpose and any applicable legal obligation. When a valid deletion or withdrawal request applies, affected data must be deleted, anonymized or restricted as required by law; legally required records may be retained for the applicable requirement.

The app's Delete Data action clears the subscription ledger and its history, associated local reminders, Nomore calendar content and exchange-rate settings. Calendar cleanup requires the necessary system access. It retains language, privacy and onboarding choices and does not restore an already-used free creation allowance. It does not erase server logs, local logging state, installation attribution or Apple purchase records. Removing the app normally removes its local sandbox data; it does not automatically delete server records or cancel an Apple subscription.

10. International Processing and Security

Nomore services are provided to users worldwide. The destination for the analytical logs they generate is automatically assigned by the network to a nearby country or region. Apple, along with network and support service providers, may process information in other locations as part of their service operations. Consequently, information may be processed outside of your own country or region—including in areas where legal protections may differ.

Where applicable law requires a transfer mechanism, assessment, notice or separate consent, those requirements must be satisfied before the relevant transfer. Acceptance of this Policy or an ATT prompt alone is not a substitute for such safeguards. Contact us for information about the safeguards applicable to your data. We do not claim that a particular standard-contract or adequacy mechanism has been completed merely by publishing this Policy.

The three logging endpoints and Apple's attribution API use HTTPS. Local queued records omit IDFA, and we limit recorded fields to the configured schemas. Security also depends on device protection, cloud access controls and operational practices. No service can promise absolute security. Where required, we will notify affected people and authorities of a personal-data breach.

11. Your Privacy Rights

Depending on your location and applicable law, you may request access, a copy, correction, deletion, restriction or portability of your information; object to certain processing; withdraw consent; and complain to a competent privacy regulator. These rights may be subject to lawful exceptions and proportionate identity checks.

Residents of the EEA and UK may exercise applicable GDPR or UK GDPR rights and contact their supervisory authority. People protected by mainland China's PIPL or Hong Kong's PDPO may exercise the relevant information, access, correction and other applicable rights. Residents of other jurisdictions, including applicable US states, may exercise their local rights without unlawful discrimination. Where a right to appeal a request decision applies, reply to our decision to request an appeal.

We do not sell personal information for money or provide Nomore logs to data brokers. Where local law defines sale, sharing or targeted advertising more broadly, the applicable opt-out rights remain available; an ATT choice does not replace every statutory choice. Send rights requests to luckingxstar@163.com. We will respond within the deadline required by the law that applies to your request. Nomore has no separate account to close.

12. Children

Nomore is not designed to collect personal information from children below the age at which consent is valid under applicable law. An App Store age rating is not parental consent. Where a child's information has been collected without the required authorization, contact us so that we can investigate and delete or otherwise address it as required by law. Parents and guardians can control device permissions and purchases through Apple's family and device settings.

13. Changes and Contact

We may update this Policy when the app or processing practices change. The update date identifies the version. Material changes require the notice, renewed consent or other steps mandated by applicable law; posting an updated document alone does not authorize a new incompatible use.

Email: luckingxstar@163.com