Privacy Policy
1. Who we are
Nomly Apps is an indie iOS app publisher operated by Vladislav Goliakov. We publish a portfolio of mobile apps (Dream Diary, PAW, MedScan, PDFSign, Calories) and operate the nomly.space marketing website along with internal publishing tooling.
2. What we collect via nomly.space
- Aggregated analytics — page views and traffic source via our self-hosted analytics. We do not use third-party advertising trackers on this site.
- Contact email — only when you write to hello@nomly.space; we use it to reply.
nomly.space does not require accounts. We do not knowingly collect personal data from visitors beyond the above.
3. TikTok Integration — what data we touch
Nomly Apps integrates with TikTok's Developer Platform to publish content from our internal pipeline to a TikTok account that we own and operate. Specifically:
- OAuth scope
user.info.basic— we read the open ID, display name, and avatar of the connected TikTok account (our own) to confirm the integration is active. - OAuth scope
video.publish— we publish videos (with caption + privacy controls) to the connected TikTok account using the Content Posting API's Direct Post endpoint.
We do not connect, read, or store data for TikTok accounts other than ones owned by Nomly Apps. We do not share TikTok-derived data with any third party. Access tokens are stored encrypted in Google Cloud Secret Manager and used only for the publishing flow described above.
4. Data we receive from iOS apps
The Nomly Apps iOS portfolio (Dream Diary, PAW, MedScan, PDFSign, Calories) each ship with their own in-app privacy policies that describe data flows specific to that app. Those policies take precedence for in-app behaviour.
5. Data sharing
- We do not sell personal data.
- We use minimal third-party processors strictly necessary to operate the service: Google Cloud (hosting + Secret Manager), AppsFlyer (mobile attribution for our paid marketing), PostHog (product analytics for our apps).
6. Retention
We retain TikTok OAuth tokens until you (the connected operator) revoke access via the TikTok account settings or contact us to remove the connection. Aggregated website analytics are retained for up to 24 months.
7. Your rights
Subject to applicable law (GDPR / CCPA), you may request access, correction, or deletion of any personal data we hold about you. Contact hello@nomly.space.
8. Changes
Material changes to this Policy will be reflected by updating the "Effective" date above and, for tooling integrations, by re-prompting the connected operator for re-authorization where appropriate.
9. Contact
Privacy questions: hello@nomly.space.