← Nona

Privacy Policy

Effective: October 2026 · Nona app (iOS)

Українська версія

Who We Are

Nona is an app that calculates a psychomatrix (the Pythagorean square) from a date of birth.

Data controller: Serhii Smus, individual entrepreneur, registered in Ukraine.

Jurisdiction: Ukraine.

Contact: flavisanguis@gmail.com

What Data We Process

We do not collect: geolocation, contacts, photos (the app only saves cards you create to your photo library with your permission), or advertising identifiers. The app shows no ads. To measure our advertising, the app includes the Meta SDK, and to improve the app we count anonymous usage events (see "Advertising & Measurement").

Information About Other People

The app allows you to create profiles and perform calculations for other individuals by entering their date of birth and an optional name.

If you provide information relating to another person, you represent and warrant that you have the right to provide such information and, where required by applicable law, have obtained any necessary consent or authorization from that individual.

You remain solely responsible for any information about other people that you choose to enter into the app.

Legal Basis for Processing

You may withdraw consent at any time (see "Your Rights" and "Data Deletion" below) without affecting the lawfulness of processing carried out before withdrawal.

Where Data Is Stored

How We Use Data

Solely to operate the app: matrix calculations, daily readings, compatibility, and synchronization of your profiles. We do not sell data and do not use it for profiling beyond the app's features. We do not share data with third parties for advertising purposes, except for limited, pseudonymized purchase-measurement data shared with advertising platforms as described in "Advertising & Measurement" below.

We do not use your data for automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

Advertising & Measurement

We promote Nona through advertising platforms (for example, Meta and Apple).

Apple ad measurement. To measure our advertising campaigns, we use Apple's mechanisms. SKAdNetwork / AdAttributionKit report only aggregated campaign results to us. AdServices for Apple Search Ads reports which campaign and keyword the app was installed from. These mechanisms do not identify you and do not require tracking permission.

Meta advertising and analytics. To measure the performance of our ads on Facebook and Instagram, we use the Meta SDK. It sends Meta in-app events (installs, app opens, trial starts and purchases — only the plan type, amount and currency), technical device data and your IP address. We do not collect the advertising identifier (IDFA), do not request tracking permission, and tell Meta that such permission has not been granted. We do not send Meta your date of birth, names, calculation results or any other app content. Meta processes this data under its own privacy policy: facebook.com/privacy/policy.

Anonymous usage statistics. To understand which features are used, the app sends our server (Supabase, EU infrastructure) only the event name (for example, "square viewed" or "payment screen opened"), the app version and language — with no user or device identifier, names or dates. These records are kept for 180 days.

When you start a subscription, we may share limited, pseudonymized purchase events with these platforms (including via RevenueCat) solely to measure and improve our advertising. We do not use advertising identifiers (IDFA) and do not track you across other apps or websites. The app itself shows no ads.

Data Retention

Data Security

We implement reasonable technical and organizational measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and therefore we cannot guarantee absolute security.

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the competent supervisory authority without undue delay and, where required by applicable law, within 72 hours of becoming aware of it. Where the breach is likely to result in a high risk to you, we will also notify you directly without undue delay.

Your Rights

Subject to applicable law (including the GDPR, where it applies to you), you have the right to:

To exercise any of these rights, write to flavisanguis@gmail.com. We will respond within the timeframe required by applicable law (for GDPR requests, generally within one month).

Share Cards

Compatibility Invites

If you invite someone to compare compatibility, we create a link that stores only the digit counts in the cells of your square and your life path number — no date of birth, name, or account identifier. The link is valid for 30 days, after which the data is deleted.

AI-Generated Content

Readings, interpretation texts, and compatibility descriptions in the app are generated using artificial intelligence (via Anthropic) based on numeric calculations derived from dates of birth. This content is provided for entertainment and informational purposes only and does not constitute professional psychological, medical, financial, or other advice. You should not rely on it as a substitute for guidance from a qualified professional.

Third Parties

Each third party processes data only to the extent necessary to provide its service to us and is bound by its own data protection obligations.

International Data Transfers

Some of our service providers may process data in countries outside your country of residence or outside the European Economic Area ("EEA").

Where personal data is transferred internationally, we take appropriate measures designed to ensure that such transfers are carried out in accordance with applicable data protection laws and that an adequate level of protection is provided.

Such measures may include the use of contractual safeguards, including Standard Contractual Clauses approved by the European Commission, where required.

Data Deletion

For any data questions, write to flavisanguis@gmail.com.

Children

The app is not intended for children under 13 (or under 16 in jurisdictions where the GDPR sets a higher age of consent for information-society services) and does not knowingly collect their data. If we become aware that we have inadvertently collected data from a child below the applicable age without appropriate consent, we will delete it promptly.

Session Technologies

The app does not use cookies.

To maintain authenticated sessions, we use secure session tokens and similar technical mechanisms that are necessary for account sign-in, security, and synchronization functionality.

These technologies are used solely to provide the services requested by you and are not used for advertising or cross-site tracking purposes.

Policy Changes

We will notify you of material changes through an in-app notice before they take effect. Previous versions of this policy are available upon request at flavisanguis@gmail.com.