StopCorn Privacy Policy

Koderka Łukasz Nawrocki (“we”, “us”) makes StopCorn, an iPhone app that helps adults quit or cut back on porn. This policy explains what happens to your information when you use StopCorn.

The data controller is Koderka Łukasz Nawrocki, Adama Logi 17/1, 60-134 Poznań, Poland, NIP 7792359653, REGON 366939239. Email: support@koderka.com.

• StopCorn has no account and no server of our own. What you enter stays on your iPhone.
• Your data is stored only on this phone, encrypted by iOS and locked whenever your phone is locked. It isn’t in iCloud or computer backups.
• Usage stats are off unless you turn them on. They are only counts of which features get used, like opening a lesson or finishing a check-in, not linked to you. Never your answers, notes or progress.
• Subscriptions are handled by Apple and RevenueCat. When StopCorn starts, it checks your subscription with RevenueCat, using a random ID and a device identifier from iOS. If you’ve turned on usage stats, RevenueCat is also told when the paywall (the plans screen) is shown.
• You can export your data, and you can delete everything at any time.

Everything you enter in StopCorn stays on your iPhone: your quiz answers and goal, daily check-ins (including urge and mood ratings, tags and notes), slips and what you noted about them, urge-tool sessions, lessons and reflections, reasons and values, if-then plans, risk times, the contact you call “my person”, your settings and a record of your usage-stats choices.

This data is kept in a database on your phone protected by iOS Data Protection (class Complete) and excluded from iCloud and computer backups. In short: “Stored only on this phone, encrypted by iOS and locked whenever your phone is locked.” This protection works when your phone has a passcode, which StopCorn’s own app lock also needs. We can’t see this data, and we have no copy of it.

Because the data isn’t in iCloud or computer backups, it doesn’t move to a new phone by itself. You can export an encrypted backup file (protected with a passphrase you choose) and save it where you want, for example in Files or iCloud Drive; whoever has the file and the passphrase can open it, so keep both safe. We never receive the file or the passphrase.

Some features send something only because you ask them to: “Text my person” opens Messages or WhatsApp with a message for the person you chose (StopCorn passes WhatsApp the person’s phone number and the message, and you send it), and “Share a weekly note” opens the iOS share sheet with a note you can edit. What you send is handled by the app you send it with.

If you are confirmed to be 18 or older and you turn on “Share usage stats” (during setup or in Settings), StopCorn sends a short list of events to Mixpanel, an analytics provider, on its EU servers. Until both are true, Mixpanel’s software isn’t started at all. When both are true, StopCorn also tells RevenueCat each time the paywall is shown and reads an Apple Ads attribution token for RevenueCat (see Purchases). In the app, the choice reads: “Only counts of which features get used, like opening a lesson or finishing a check-in, not linked to you. Never your answers, notes or progress.” That text describes the Mixpanel events; the paywall views and the Apple Ads token go to RevenueCat with the device identifier (see Purchases).

• What is sent: which onboarding screens were viewed (by screen number), that onboarding was completed, that the paywall was viewed or closed and which offer was shown, that a purchase was started or completed and which plan (yearly or weekly), or a restore was started, that a check-in was completed, that the urge tools were opened (and from where) and which tool was used, which program day’s lesson was opened or completed (the day number only), that a plan was created, that reminders or the app lock were turned on, and that a backup was exported. When you turn usage stats back on after turning them off, Mixpanel’s software also sends an opt-in event. Mixpanel’s software adds technical details to each event: the iPhone model, the device maker, the iOS version, the app version and build, the screen size, the analytics software’s version and the project key, the mobile network type, the carrier name (where iOS reports one) and whether Wi-Fi is in use, with the time, a random identifier, random event and session identifiers, and session counters.
• What is never sent: your answers, your goal, slips or masturbation data, urge or mood ratings, tags, notes, reasons, values, contact details or how an urge-tool session ended.
• Not linked to you: StopCorn doesn’t create a profile, doesn’t identify you and uses a random identifier that is reset when you turn usage stats off or delete everything. Mixpanel receives your IP address in transit; location from it isn’t stored.
• Not used for tracking or advertising: the usage-stats events go only to Mixpanel, for improving the app.
• Your choice: you can turn usage stats off at any time in Settings › Privacy & security. Each change is recorded on your phone. Events not yet sent when you turn usage stats off stay on your phone and are sent only if you turn usage stats on again.

Purpose: improving the app (which screens work, where people stop). Legal basis: your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)), which you give with the “Share usage stats” toggle and can withdraw at any time by turning it off. How long: Mixpanel deletes the events automatically after 2 years.

StopCorn Pro is an auto-renewable subscription sold through Apple’s App Store. Apple processes the payment as an independent controller (for EU users, Apple Distribution International Ltd., Ireland); we never see your payment details. We use RevenueCat to check whether your subscription is active. StopCorn contacts RevenueCat when the app starts, before any purchase and before the age check, at every launch, so that “Restore purchase” works from the first screen; it checks again when the app comes back to the foreground and the saved answer is old. After an under-18 answer, StopCorn makes no RevenueCat or Apple Ads call, and later launches don’t contact RevenueCat. In the launch where you give that answer, RevenueCat’s software has already started and may still contact RevenueCat on its own to refresh subscription data, until StopCorn quits. Every request carries:

• a random app user ID (no name or email from us), which stays the same until you delete the app;
• the identifier iOS gives StopCorn on your device (the identifier for vendor, IDFV; not the advertising identifier), so RevenueCat’s records are linked to your device;
• technical details RevenueCat’s software adds: the device model, the iOS version, the app version, build and bundle ID, the software’s version, your first three preferred languages, your App Store country, the StoreKit version and a few technical flags.

RevenueCat also receives your IP address in transit. It receives your App Store purchase history for StopCorn (purchases, renewals and restores). We don’t send RevenueCat any of your StopCorn data. RevenueCat’s software records by itself that StopCorn hasn’t asked to track you (your App Tracking Transparency status).

Legal basis for checking your subscription and keeping purchase records, including the device identifier, the technical details and the App Tracking Transparency status: performance of a contract (GDPR Art. 6(1)(b)). How long: RevenueCat keeps purchase records, with these details, for as long as StopCorn uses RevenueCat. It deletes them when StopCorn’s RevenueCat account ends, or earlier when we ask it to, which we do when you ask us to delete your data.

Paywall views: only if you are confirmed to be 18 or older and have turned on usage stats, StopCorn tells RevenueCat each time the paywall is shown, with the random app user ID, the device identifier, a session ID, the time and which offer was shown. Otherwise no paywall view is sent. Purpose: analytics. Legal basis: your explicit consent (GDPR Art. 6(1)(a) and Art. 9(2)(a)), as for usage stats; you withdraw it by turning usage stats off. How long: RevenueCat keeps paywall views with your purchase record, for the same time.

RevenueCat diagnostics: StopCorn never asks for them and can’t switch them off: RevenueCat can turn on its software’s diagnostics remotely. RevenueCat’s software records them on your phone until RevenueCat’s server says whether to collect them. If it turns them on, RevenueCat receives request timings and results, App Store errors, product, offer and transaction IDs, prices and currency, your App Store country, and purchase and expiry dates, with a session ID and the device identifier. Purpose and legal basis: our legitimate interest in keeping purchases and restores working and fixing errors in RevenueCat’s software (GDPR Art. 6(1)(f)). How long: RevenueCat keeps them under its data processing agreement until StopCorn stops using RevenueCat.

Apple Ads attribution: only if you are confirmed to be 18 or older and have turned on usage stats, StopCorn reads an Apple Ads attribution token and RevenueCat receives it. It tells us whether the install came from an Apple Ads campaign. It is not an advertising identifier, and StopCorn never asks to track you. RevenueCat’s software sends the token once, and RevenueCat uses it only to look up the Apple Ads campaign. If you turn usage stats off, a token not yet sent may still be sent until StopCorn quits; later launches don’t read it. The same applies after “Delete everything” in that launch. A token already sent stays with RevenueCat. Legal basis: your consent (GDPR Art. 6(1)(a)). RevenueCat keeps the token with your purchase record, for the same time.

StopCorn is licensed under Apple’s Standard EULA: https://koderka.com/apps/stopcorn/terms.

StopCorn is for adults (18+). During setup, iOS may let you share an age range through Apple’s Declared Age Range feature, or StopCorn asks whether you are 18 or older. The age range itself isn’t stored or sent. If you answer that you are under 18, StopCorn stops, deletes the answers you gave and shows where to find help.

No ads, no advertising identifiers, no tracking across other apps or websites, no data brokers, no selling or sharing of personal data for advertising, no crash-reporting service.

Crash reports reach us only if you turned on “Share with App Developers” in iOS Settings; Apple may then share them with us under Apple’s own terms. Purpose: fixing crashes. Legal basis: our legitimate interest in fixing crashes (GDPR Art. 6(1)(f)). We view them only in Apple’s tools. How long: we don’t copy or keep crash reports ourselves; they stay in Apple’s tools for as long as Apple keeps them under its own terms.

• Turn usage stats off at any time (Settings › Privacy & security).
• Export your data (Settings › Privacy & security › Export my data).
• Delete everything (Settings › Delete everything): StopCorn deletes its database and settings from your phone, removes its notifications and, if usage stats ran, opts out and resets the analytics identifier. Nothing remains in iCloud or computer backups, because the data was never there. It doesn’t change RevenueCat’s random app user ID, it keeps usage-stats events not yet sent (as above), and it can’t remove what RevenueCat, Mixpanel or Apple already hold. Deleting the app removes everything StopCorn and its providers’ software kept on the phone. Your subscription is managed by Apple and isn’t cancelled by deleting your data.
• Depending on where you live, you may have rights to access, correct, delete or port personal data and to withdraw consent. Because your app data never reaches us, the app’s own export and delete features cover it. For the data our providers hold (usage stats, purchase records, paywall views and diagnostics), contact us at support@koderka.com.

Provider	What for	Data	Location
Apple (independent controller for purchases)	App Store, payments, subscriptions, age range, Apple Ads attribution, crash reports you choose to share	Purchases, age range (not kept by StopCorn), the Apple Ads attribution token, crash reports you choose to share	For purchases: Ireland for EU users (Apple Distribution International Ltd.)
RevenueCat, Inc.	Checking subscriptions; its software’s diagnostics, if it turns them on; paywall views and Apple Ads attribution, if you’re 18+ and turned on usage stats	A random app user ID, the device identifier (IDFV), technical details and your IP address in transit; purchase history; diagnostics; if you’re 18+ and turned on usage stats, paywall views and the Apple Ads attribution token	USA
Mixpanel, Inc.	Optional usage stats	The events and technical details above, and your IP address in transit	EU data residency

International transfers: RevenueCat processes data in the USA under the EU Standard Contractual Clauses in its data processing agreement. Mixpanel stores usage stats in the EU (EU data residency) under its data processing agreement.

Emails you send to support@koderka.com are covered by the koderka.com website privacy policy: https://koderka.com/privacy.

You can complain to the Polish supervisory authority, the President of the Personal Data Protection Office (Prezes UODO), at uodo.gov.pl, or to the authority in the EU country where you live or work.

StopCorn helps with a personal habit and may hold information about your sexual behavior. That information stays on your phone, protected as described above, and is never sent to us or our providers. StopCorn is a self-help tool. It is not therapy, medical treatment or a medical device. If you’re struggling, please talk to a professional.

StopCorn isn’t for anyone under 18, and we don’t knowingly collect information from children.

If this policy changes, we’ll publish a new dated version at https://koderka.com/apps/stopcorn/privacy and, for important changes, tell you in the app or in the App Store release notes.

Koderka Łukasz Nawrocki, Adama Logi 17/1, 60-134 Poznań, Poland. NIP 7792359653, REGON 366939239. Email: support@koderka.com.