This Privacy Policy explains how the NoBuy mobile app ("NoBuy," "we," "us") handles information when you use it. By using NoBuy you agree to this policy.
NoBuy is designed to work without an account. The information you create in the app — your challenges, daily check-ins, streaks, freezes, notes, spending categories and envelope amounts, your name, avatar, and reward — is stored locally on your device. We never receive the text or the amounts themselves and cannot access them. (Anonymous events describing your activity — that a check-in happened, that a challenge was started — are a separate thing, and section 2 sets out exactly what they contain.) If you delete the app, this data is removed with it (unless you have enabled a device backup such as iCloud or Google backup, which is controlled by your device settings, not by us).
NoBuy uses Google Analytics for Firebase to understand how the app is used in aggregate. This helps us see which features people actually reach and where they get stuck.
What we receive: anonymous events describing that something happened — a challenge was started, a check-in was completed, a paywall was viewed, a widget was added, an error occurred. Alongside them we store four coarse properties: your challenge mode (no-buy or low-buy), a bucketed challenge length, a bucketed day count, and whether Premium is active. Firebase also assigns a resettable, app-scoped installation identifier.
What we never receive: the text you type. Your check-in notes, reward names, envelope names, category names, your name, and every amount of money you enter stay on your device and are never included in an event. We do not receive your contacts, location, photos, or health data. Error reports contain fixed diagnostic strings, never your content.
No advertising, no tracking. As of version 1.1.0 NoBuy links the Firebase Analytics build that does not collect Apple's advertising identifier (IDFA). We show no ads, we run no advertising SDKs, and we do not combine your data with information from other companies' apps or websites. In Apple's terms, NoBuy does not “track” you.
NoBuy does not yet offer an in-app switch to turn analytics off — we intend to add one. Today, deleting the app stops all collection, and you can email us to have the analytics records for your installation deleted. Note that iOS's Allow Apps to Request to Track setting does not affect this collection, because NoBuy does not use the advertising identifier it governs. See Firebase's privacy information.
NoBuy Premium and Freeze Packs are sold as in-app purchases processed by Apple (App Store) or Google (Google Play). We use RevenueCat to manage subscription status. Your actual payment details (card number, billing address) are handled by Apple or Google — we never see or store them. RevenueCat receives a purchase token and an anonymous app-user ID so the app knows whether Premium is active. See RevenueCat's privacy policy, Apple's, and Google's.
NoBuy is not directed to children under 13, and we do not knowingly collect personal information from them.
You can delete all app data at any time by removing the app or using any in-app reset option. Depending on where you live (for example under GDPR or the CCPA), you may have rights to access or delete personal data. Because the content you create is stored entirely on your own device, deleting the app removes it. The anonymous analytics described in section 2 are not linked to your identity and cannot be traced back to you individually, so there is no personal profile for us to hand over — but if you would like us to delete the analytics records associated with your app installation, email us and we will do so. For any question, email smtoksari@gmail.com.
On-device data is retained until you delete it, and its security rests on your device's own operating system protections. The anonymous usage events described in section 2 are retained by Firebase for up to 14 months and then deleted automatically. No method of storage or transmission is 100% secure.
We may update this policy as the app evolves. Material changes will be reflected by the "Last updated" date above.
Questions about privacy? Email smtoksari@gmail.com.