NoMo privacy

Who is responsible for your data

The data controller is Gleb Suchkov Kalmykov, an individual established in Spain, trading as NoMo. Write to privacy@nomoinc.co about anything on this page. It reaches a person, and it's the fastest way to get something acted on. If you need our full registration details for a formal request, ask at that address and we'll give them to you.

NoMo is one person, not a company. "nomoinc.co" is a domain name, chosen because it was available, and does not mean an incorporated company exists. None does. If one is ever formed, this page will name it before anything else changes.

Using NoMo without creating a named account

You can use NoMo without giving us your name, email address or Sign in with Apple details. To make purchases, restoration and a later account upgrade work reliably, the app normally creates a pseudonymous guest identifier and session with Supabase. That identifier is not your name and is not used for advertising.

Your focus progress remains on your device while you use guest mode: sessions, XP, coins, collection progress, island layout, notes and intentions are not uploaded as cloud backup. If the device is offline or anonymous sign-in is unavailable, guest mode is entirely local.

If you explicitly choose to share usage analytics, the limited events described below may be stored against that pseudonymous guest identifier. If you decline, no product-analytics events are recorded or sent.

RevenueCat may also use the pseudonymous identifier and process purchase history and limited transaction and device information needed to provide purchases and restore entitlements.

Creating a named account links your progress to your account and enables cloud backup and cross-device sync.

What stays on your device, always

Your Screen Time choices. The apps you pick for Focus Shield and Quiet Hours reach us as opaque tokens from Apple, never as names. We do not receive a list of your apps and could not read one if we tried.
Your website blocklist. Typed on the device, matched on the device, never uploaded.
Shield activity. How many times a blocked app was opened during a session is counted locally to work out your focus bonus, then goes nowhere.
Timer state, island layout, session notes and intentions. If you write a note about what you're sitting down to do, that note stays on the phone.
Error logs. If something breaks, the app keeps a short local log so support can ask you for it. The App Store build ships no third-party crash SDK and sends no crash data anywhere by itself. Apple's own crash reporting may pass us reports, and only if you opted in to sharing with developers in your device settings.

What we hold, if you create an account

Signing in, with Apple or with an email address and password, turns on cloud backup and cross-device sync. From then on we hold, on our servers:

your email address and display name;
your focus sessions: when one started, how many minutes it ran, and whether you finished it. Not what you were doing, and not the note you wrote;
your progress: level, XP, coins, streak, pets, islands, achievements, and quests;
your app settings;
your purchase and subscription state.

That is the whole list.

Where it lives. On Supabase (Supabase, Inc.), in their `eu-central-1` region in Frankfurt, Germany. Supabase is our processor: they host the database and run sign-in for us, and do nothing else with what's in it.

Optional product analytics

If you opt in, NoMo records a small, fixed allowlist of first-party product events, for example, app opened, onboarding completed, session started, Premium screen viewed, purchase completed or restore failed. We use these events to understand reliability and which parts of the product are useful.

These events may be linked to your named account ID or pseudonymous guest ID. They are not used for advertising or cross-app tracking. They do not contain your Screen Time selections, the names of blocked apps or websites, session notes, intentions, browsing history or advertising identifiers.

Analytics is off until you actively choose to enable it. You can withdraw consent at any time in Settings under Privacy. Turning it off stops new collection and deletes any unsent events queued on the device. Account deletion removes stored analytics rows from NoMo's own database.

There is no third-party analytics SDK, no advertising SDK and no ATT prompt, because there is nothing here to track you with.

Purchases

All payments run through the App Store. Apple is the merchant of record, so they process your payment details and we never see a card number. Two things happen afterwards:

Our own server checks the receipt with Apple so Premium unlocks on your account.
RevenueCat (RevenueCat, Inc., United States) processes a pseudonymous App User ID, purchase history, Apple receipt and transaction information, entitlement status, and limited technical information such as device type and operating system needed to operate and secure the purchase service. We do not send RevenueCat your Screen Time choices, blocked-app list, website blocklist, session notes or advertising identifiers. Because RevenueCat is in the United States, this is a transfer outside the EU, covered by the standard contractual clauses in their data processing terms.

Notifications

Notifications are optional and off until you allow them. They are delivered through Apple's Push Notification service and by local notifications scheduled on the device itself. We use them for your own sessions, streaks and Quiet Hours, never for marketing. Turning them off in iOS Settings stops them immediately.

App and website blocking

If you turn on Focus Shield, NoMo uses Apple's Screen Time API (Family Controls) to hold the apps you chose shut for the length of a session.

Blocking apps during a session is free on every tier, and the Screen Time permission itself is never behind the paywall. Website blocking and standing Quiet Hours schedules are part of Premium.

Apple designed this API so that your app choices and your usage stay inside the operating system. NoMo receives no list of your apps and no record of what was blocked, and none of it reaches our servers. Turning the feature off, or revoking the permission in iOS Settings, releases everything immediately.

The mailing list

If you sign up for updates on our website, we store your email address and the date you consented, and nothing else. We use it to send occasional notes about new features, new friends, and what we're building. Roughly monthly, never daily.

We ask you to tick a box first. We never add anyone who didn't.
You'll get a confirmation email before anything else arrives, so a mistyped address can't sign someone else up.
Every email has a one-click unsubscribe link. Using it removes you immediately and permanently.
We never sell, rent, or share the list, and we don't use it for advertising.
The list is held by Kit (Kit.com, Inc., United States) purely to deliver these messages on our behalf. Kit is our processor, not a recipient free to do as it likes with your address. That transfer outside the EU is covered by the standard contractual clauses in Kit's data processing terms.

Signing up is entirely optional, and the app works exactly the same whether you do or not. To be removed at any time, use the unsubscribe link or write to privacy@nomoinc.co.

What we never collect

What you were doing while you focused. NoMo has no idea and doesn't want one.
Your location, contacts, photos, microphone, health data, or messages.
Your browsing history. The website blocklist never leaves the device.
Advertising identifiers. NoMo contains no ads and no third-party ad SDKs.
We do not sell or share your personal information, including as those terms are defined by the California Consumer Privacy Act, and we do not use it for cross-context behavioural advertising.

Who else is involved

The following service providers may process data in the limited ways described here:

Apple sells the app, processes payments, delivers notifications, and carries crash reports if you opted in.
Supabase hosts your account and synced progress, in the EU.
RevenueCat holds the record of your subscription entitlement.
Kit holds the mailing list and sends its emails. Only if you joined.
Cloudflare serves this website. Like any web host it briefly logs IP addresses to keep the site up and fend off attacks. We run no analytics here, and there are no tracking cookies on this site.

Children

NoMo is not directed at children under 13, and we do not knowingly collect personal information from them. The app works fully without an account, which means there is usually nothing to hand over in the first place. If you believe a child has given us personal information, write to privacy@nomoinc.co and we will delete it.

Why we're allowed to hold any of it

GDPR asks us to name a lawful basis for each thing we do, so here they are in plain terms:

Your account and synced progress: performance of our agreement with you. You asked us to keep your progress; we can't do that without holding it.
Purchases and unlocking Premium: performance of that same agreement. We can't give you what you paid for without recording that you paid.
Product analytics: your consent, which the Usage analytics switch gives and takes back at any time.
The mailing list: your consent, given by ticking the box. You can withdraw it with the unsubscribe link, and withdrawing costs you nothing else.
Support emails: our legitimate interest in answering you.
Keeping the app working and secure: our legitimate interest in the app not being broken.
Screen Time data is processed on your device under your own authorization, and is never sent to us.

How long we keep things

On-device data: until you delete it or delete the app. We hold no copy.
Account data and first-party analytics: NoMo account data and first-party analytics are kept until account deletion, unless a longer period is required to establish, exercise or defend legal claims.
Mailing list: until you unsubscribe or ask us to delete you.
Support emails: up to two years, so we have context if you write again.
Purchase records: App Store transaction and entitlement records are retained by Apple and RevenueCat according to their legal obligations and retention policies. NoMo may retain the minimum transaction records required for fraud prevention, accounting or legal compliance.

Your rights

If you never signed in, your data lives on your device and deleting the app deletes it.

If you have an account, you can delete it and everything in it from inside the app: open Settings → Danger zone → Delete account and confirm. Deleting your account removes your NoMo profile, synced progress, collection, settings, first-party analytics, and NoMo database links to your account. Where applicable, we revoke the stored Sign in with Apple credential. Deletion does not cancel a subscription and cannot erase transaction records Apple must retain. RevenueCat and Apple may retain limited purchase records under their own legal obligations. To request deletion of data held on our behalf by a processor, contact privacy@nomoinc.co.

In full, you can ask for a copy of what we hold, have it corrected or deleted, object to how we use it, ask us to restrict it, withdraw a consent you gave, or ask for your data in a portable format. We answer within a month. If you're in the EU or UK these are your GDPR rights; elsewhere, we honour them anyway, and we will never treat you worse for using them.

If you think we've handled your data badly and we haven't put it right, you can complain to a data protection regulator. In Spain that's the Agencia Española de Protección de Datos; elsewhere in the EU or UK it's your own national authority. We'd rather you told us first, but the right is yours either way.

Changes

If this policy changes in a way that matters, we'll say so in the app's release notes rather than bury it. The date at the top always tells you when it last moved.

Questions

Write to privacy@nomoinc.co. A person will answer.

Your focus is nobody's business