Lunyb collects web browsing history, name, email address, and shares some of this with third parties.
Extracted automatically from the developer's own privacy policy text -- not independently verified by Nomatra.
“RevenueCat — mobile in-app purchase orchestration; receives anonymous purchaser identifiers and product metadata.”
“Stripe and Adyen — web payment processing; PCI-DSS Level 1 providers.”
“Stripe and Adyen — web payment processing; PCI-DSS Level 1 providers.”
“Supabase (PostgreSQL hosting, authentication, edge functions) — primary backend, EU and US regions.”
“Cloudflare receives the domain name and the originating IP, governed by its own privacy policy.”
“IPQualityScore — domain reputation lookups for Threat Blocker and the URL-safety checker.”
“OneSignal (layered over Apple APNs / Google FCM) — push notification delivery; only the device push token is shared, never notification content.”
“OneSignal (layered over Apple APNs / Google FCM) — push notification delivery; only the device push token is shared, never notification content.”
“OneSignal (layered over Apple APNs / Google FCM) — push notification delivery; only the device push token is shared, never notification content.”
“Branch — deep linking and attribution for invitation flows.”