No Nut: Quit Your Addiction
Privacy Policy
Burak Eray Kayis ("we," "us," or "our") publishes No Nut: Quit Your Addiction ("No Nut"). This Privacy Policy explains how information is handled by the No Nut app on iOS and iPadOS, its Apple Watch companion, and related app services. It does not describe the Android app, which has a separate policy.
1. Information you provide
- Personal habit and recovery content. Streak history, goals, notes, motivations, daily and relapse reports, challenges, custom plans, activities, progress, and other information you enter. Depending on what you write, this can reveal sensitive information about your health, sexual life, or personal habits. Please enter only what you want the app to process.
- Support and feedback. Messages sent through Feedback or Private Support, the identifier associated with those messages, and information you choose to share with our team or mentors. Feedback requests also include app version, iOS version, and premium status. If you email us, we receive your email address and the content of your correspondence.
- Photos. Appearance Tracker photographs are stored in the app's local database. They are not included in No Nut's own server backup feature. See section 3 for Apple device backups and deletion limitations.
- Purchase information. Apple processes App Store payments. We and our purchase-service provider receive transaction, subscription, entitlement, and purchase-related identifiers needed to deliver purchases, manage premium access, and support restoration. We do not receive your full payment-card number.
2. Information processed automatically
The app, our backend, and integrated service providers process information needed for the following functions:
- Service identity and streak updates. Our backend creates a pseudonymous numeric user identifier. The app sends the start date of your current streak when creating this identifier and when updating your streak. A pseudonymous identifier is not the same as anonymous information.
- Usage and diagnostics. App and operating-system versions, device and installation identifiers, session information, feature interactions, screens and purchase entry points, premium status, configuration, crash reports, and related technical information.
- Notifications. Push subscription identifiers, push tokens and device information, the app user identifier, and tags such as premium status and whether the blocker is enabled. Notification-service initialization and subscription-related processing may occur even if you have not allowed notification alerts.
- Network information. Internet Protocol (IP) addresses and related connection logs processed when your device contacts our services or providers. Providers may derive approximate location from an IP address. The app does not request permission for GPS or precise location.
- Watch pairing. If you connect the Apple Watch companion, the app sends a pairing key linked to your app user identifier to our backend so the companion can access supported streak information.
3. Local storage, photos, and Apple device features
No Nut uses on-device storage, including its local database and preferences, for recovery content, photos, settings, Gold balances, feature unlocks, and related app state. Some data is shared with the app's own extensions using Apple's app-group storage.
- Camera. Camera permission is used to take Appearance Tracker photos and scan backup or Watch-pairing QR codes. You can deny or revoke camera access in Settings; the related camera features will then be unavailable.
- Photos and removal. Removing an Appearance Tracker photo from the visible list can mark it as deleted without immediately erasing its underlying image from the local database. Do not treat this action as secure erasure. Removing the app's local data or deleting the app removes the local app container, subject to copies retained in device backups.
- Apple backups. Local app data, including photos, may be included in iCloud Backup, computer backups, or device transfers according to your Apple settings. These are separate from No Nut's server backups. Apple or your backup tools control those copies; review and manage them separately. Offloading an app can retain its data.
- App Lock. Face ID, Touch ID, or device-passcode authentication is performed by Apple's LocalAuthentication system. No Nut receives the authentication result, not your biometric templates or device passcode. App Lock does not guarantee that backups, widgets, or notifications are hidden.
- Widgets. Streak history is made available to the No Nut widget through shared local storage. Widget and notification previews may reveal progress to people who can see your device; manage their visibility in Apple settings.
4. No Nut backup and restore
If you use Backup or enable Auto Backup, the app sends supported recovery data to our backend, linked to your app user identifier. This includes history, challenges, notes, reasons, reports, custom plans, blocked or allowed entries, progress records, and related settings. Appearance Tracker photos are not part of this server-backup payload. Backend requests for backup and restore use HTTPS and additional application-level encryption; this is not a claim of end-to-end encryption or that the service cannot read a backup.
Your backup QR code contains an identifier used to retrieve your backup. Anyone who obtains it may be able to restore the associated data. Keep it private and do not post it publicly. Restoring a backup replaces supported local records. Turning off Auto Backup stops future automatic backups; it does not itself delete an existing server copy. Contact us to request server-side deletion.
5. Safari content blocking
No Nut supplies blocking rules to its Safari content-blocker extension, including supported custom keywords, blocked sites, and allowed sites. Safari applies these rules. The content-blocker extension does not send us a feed of the pages you visit or your Safari browsing history. Your custom rules can be included in a No Nut backup if you use that feature. Blocker-enabled status may also be sent as a notification-service tag. Content blocking depends on your Safari settings and is not a device-wide filter.
6. Analytics, configuration, notifications, and purchases
The iOS app integrates the following providers:
- Firebase Analytics measures app usage and feature events.
- Firebase Crashlytics processes crash and diagnostic information, including app, device, and installation information.
- Firebase Remote Config delivers configuration values and feature settings.
- Mixpanel processes product-usage events and automatic session information, linked to the app's pseudonymous user identifier, with properties such as premium status and environment.
- OneSignal supports push messaging and related subscription, device, user-identifier, and feature-tag processing described in section 2.
- RevenueCat verifies App Store purchases and entitlements, supports eligible purchase restoration, and processes purchase-related identifiers, transaction information, and purchase-entry attributes.
- Apple operates the App Store, payment and subscription systems, push infrastructure, device permissions, and Apple backup services under its own terms and privacy practices.
These providers process the data needed for their functions, subject to applicable law and their service terms. This policy requires service providers handling personal data on our behalf to protect it consistently with this policy and applicable requirements; it does not authorize independent advertising use of your recovery content. Provider documentation is available from Firebase, Mixpanel, OneSignal, RevenueCat, and Apple.
7. Purchases and Apple refund requests
Apple determines App Store refund requests. When responding to a refund inquiry, we or our purchase provider may provide Apple with relevant transaction, delivery, entitlement, and purchase-consumption information, only where permitted and with valid consent where required. Acknowledging this policy or using the app does not by itself replace a separate consent required by Apple or applicable law. Your private notes, recovery reports, photos, and support-message contents are not provided to Apple for refund evaluation. Contact us about consent withdrawal or a privacy request; Apple controls the refund decision.
8. Purposes and legal grounds
We process information to operate the app and requested features; provide backup, restore, Watch pairing, and support; deliver enabled reminders and notifications; verify purchases; understand reliability and feature usage; prevent misuse; and meet legal obligations.
Where data-protection law requires a legal basis, processing must rest on the applicable basis: performing a contract for requested services, consent for processing that requires it, legitimate interests in maintaining and securing the service where those interests are not overridden by your rights, or compliance with a legal obligation. Where sensitive information requires explicit consent or another special legal condition, that condition must also be met. This policy is a notice, not a substitute for a permission or consent required by law.
9. Sharing and external services
Information may be disclosed to backend, hosting, support, analytics, diagnostics, configuration, notification, and purchase providers for the purposes above; when required by law or reasonably necessary to protect rights and security; or in a business transfer, subject to applicable privacy obligations. Access to support messages is needed by the team or mentors handling your request. Do not send passwords, payment-card details, or unnecessary sensitive information in messages.
If you open community links such as Telegram, visit an external website, or share content through another app, that service handles the information you send under its own policies. We do not sell your personal information or use your private recovery content for targeted advertising. No Nut does not display third-party advertising. Where Apple's App Tracking Transparency permission is required, tracking must not occur without it; this policy does not grant that permission.
10. Retention and deletion
Local records remain according to the app's storage and deletion behavior and your device settings. Some removal actions hide records rather than securely erase them, as explained for photos above. Deleting the app does not automatically delete server backups, support messages, provider records, or copies held in Apple backups, and does not cancel an App Store subscription.
Server-side backups, identifiers, support messages, purchase-support records, and technical logs are retained for as long as reasonably necessary to provide the relevant service and meet legal, security, and dispute-resolution obligations. Provider retention depends on the relevant service and configuration. Deletion requests are assessed under applicable law; limited records may need to be retained, and backup copies may persist until their normal removal cycle. Retained information remains subject to applicable protections.
To request access, correction, a copy, or deletion of server-side information, email
11. Your choices and privacy rights
You can manage camera, Face ID, notification, widget, and Safari-extension settings on your device, and disable Auto Backup in the app. Disabling notifications does not by itself stop analytics or all notification-provider processing. The app does not currently provide a dedicated analytics opt-out switch. Contact us to exercise an applicable objection, restriction, deletion, or consent-withdrawal right. Stopping use prevents new app activity but does not remove existing records.
Depending on your location, you may also have rights to data portability, to object to certain processing, to restrict it, or to complain to a competent data-protection authority. Withdrawal of consent does not affect processing lawfully performed before withdrawal. We will not discriminate against you for exercising a privacy right. Apple manages information held independently in your Apple Account and its own services.
12. Security and international processing
No Nut uses HTTPS for backend connections and application-level encryption for supported backend requests. No transmission, device, or storage system can be guaranteed completely secure. Protect your device, backup QR code, Watch pairing code, and Apple Account. App Lock is an additional access control, not a guarantee of confidentiality across every device surface or backup.
Our providers may process data outside your country, where laws may differ. International transfers must comply with applicable requirements, including an appropriate transfer mechanism or other lawful basis where required. Contact us for information relevant to your request.
13. Children and personal wellbeing
No Nut is not directed to children under 13, or a higher minimum age where local law requires it. We do not knowingly collect personal information from children below that age. If you believe this has occurred, contact us so we can investigate and take appropriate action. The App Store age rating is content guidance and does not replace local legal requirements.
No Nut is a habit-building and self-help tool. It does not access Apple Health or HealthKit data and is not a medical service. Habit reports and progress estimates are not diagnoses or clinical measurements.
14. Changes to this policy
The original effective date is January 13, 2022. We may revise this policy as the app or applicable requirements change. We will post revisions here and provide additional notice or request consent when required. Material changes will apply prospectively as required by law.
15. Contact us
Burak Eray Kayis
Email: