Privacy Policy
Last updated: 2 September 2026
This Privacy Policy explains how Attribution Main ("Attribution Main", "we", "us") collects, uses, shares and protects information in connection with this website (attributionmainapp.com) and the mobile applications we develop and publish.
We are committed to processing personal data lawfully, fairly and transparently, in line with the EU General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA) and the platform requirements of Apple and Google.
1. Who we are
Attribution Main is a mobile application development and user acquisition studio. We build and publish our own iOS and Android applications and run marketing campaigns to promote them. For the purposes of data protection law we act as the data controller for data collected through this website and through the applications we publish.
Contact for any privacy matter: [email protected]
2. Information we collect
2.1 Website
This website is informational. We do not require registration and we do not sell anything through it. When you visit, we may process:
- Technical data — IP address, browser type and version, operating system, referring page, and pages viewed, recorded in standard server logs for security and availability purposes.
- Contact data — if you email us, we process the address you write from and the content of your message in order to reply.
2.2 Mobile applications
Our applications may process the following categories of data, depending on the specific app and the permissions you grant:
- Device and technical identifiers — device model, operating system version, language, time zone, app version, and advertising identifiers (IDFA on iOS where you have granted permission, or Google Advertising ID on Android).
- Usage and event data — app opens, screens viewed, feature usage, session length, in-app purchases and other product events used to improve the app and measure marketing performance.
- Attribution data — information about the advertisement, campaign or channel through which you installed the app, processed through our mobile measurement partner.
- Diagnostic data — crash reports and performance data.
- Data you provide — content you voluntarily enter into an app (for example notes, preferences or settings), and support correspondence.
We do not knowingly collect precise location data, contacts, photos or health data unless a specific app feature requires it, the app's store listing discloses it, and you explicitly grant permission.
3. How we use information
- To operate, maintain and improve our applications and website.
- To measure the performance of our advertising campaigns and attribute installs to the correct source.
- To personalise content and, where applicable, to show relevant advertising inside our free applications.
- To detect, investigate and prevent fraud, invalid traffic and abuse.
- To provide customer support and respond to enquiries.
- To comply with legal obligations and platform policies.
4. Legal bases (GDPR)
- Consent — for advertising identifiers, personalised advertising and any optional tracking. On iOS this is requested through the App Tracking Transparency prompt; in the EEA and UK through a consent management flow.
- Legitimate interests — for security, fraud prevention, aggregated analytics and improving our products.
- Contract — where processing is necessary to provide the functionality you requested.
- Legal obligation — where we are required to retain or disclose data by law.
5. Advertising and measurement partners
To acquire users and to measure results, we work with advertising platforms and measurement providers. Depending on the application and campaign these may include, among others, Meta Platforms, TikTok for Business, Moloco, Unity Technologies and a mobile measurement partner (MMP).
These partners may receive limited technical and event data — such as an advertising identifier, install timestamp, campaign identifiers and post-install events — in order to attribute installs and optimise campaigns. Each partner processes such data under its own privacy policy. Where you have not granted tracking consent, we rely on privacy-preserving frameworks such as Apple's SKAdNetwork, which provide aggregated, non-identifying measurement only.
You are always in control. You can reset or limit your advertising identifier in your device settings at any time, withdraw tracking consent, and opt out of personalised advertising. Doing so does not stop you from using our applications.
6. Sharing of information
We do not sell personal data. We share information only:
- with service providers acting on our behalf (hosting, analytics, attribution, crash reporting, customer support), bound by contract to process data only on our instructions;
- with advertising and measurement partners as described in section 5;
- where required by law, regulation, legal process or an enforceable governmental request;
- to protect the rights, property or safety of Attribution Main, our users or the public.
7. International transfers
Our service providers may process data outside your country of residence, including outside the EEA. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
8. Data retention
We keep personal data only as long as necessary for the purposes described above. Event and attribution data is typically retained in an identifiable form for up to 24 months and in aggregated form thereafter. Server logs are retained for up to 12 months. Support correspondence is retained for as long as needed to handle the request and to comply with legal obligations.
9. Your rights
Depending on where you live, you may have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request deletion of your data;
- object to or restrict certain processing;
- withdraw consent at any time;
- receive your data in a portable format;
- opt out of the sale or sharing of personal information (we do not sell personal data);
- lodge a complaint with your local data protection authority.
To exercise any of these rights, write to [email protected]. We respond within 30 days.
10. Children
Our applications are not directed at children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal data from children. Our apps carry accurate age ratings and our advertising campaigns are not targeted at children. If you believe a child has provided us with personal data, contact us and we will delete it.
11. Security
We apply technical and organisational measures appropriate to the risk, including encryption in transit, access control on internal systems, and regular review of third-party integrations. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to this policy
We may update this Privacy Policy from time to time. The "last updated" date at the top of this page reflects the latest revision. Material changes will be communicated through this website or within the relevant application.
13. Contact
Attribution Main
Email: [email protected]
Website: attributionmainapp.com