How attribution works

InfluTo is deterministic first: whenever the referral code or link reaches the app directly, the match is exact. A link-click fallback covers taps that never carried a code into the app. Every attributed purchase is verified with the store (through RevenueCat, StoreKit 2 or Google Play) before a commission exists.

InfluTo never uses the IDFA or any advertising identifier, never asks for App Tracking Transparency permission, never matches by device characteristics, and never links a user across apps or websites. What to declare in the stores: Privacy & App Store review.

Referral code entry (exact)

1. The user hears or reads a creator's code — a podcast, a video description, a caption, in person.
2. They install the app and type the code into your code field (the ready-made component, or your own field calling applyCode()).
3. The SDK validates the code with InfluTo and records the attribution.
4. On RevenueCat apps, the SDK also writes the influto_code subscriber attribute.

A typed code is an explicit action by the user. It attributes on every platform and needs no permission of any kind. Manual code entry is on by default for new apps (Settings → Advanced). How to design the field: Let users enter a referral code.

Links that carry the code into the app (exact)

• Web, Capacitor, Cordova and PWA apps: the referral link opens your web app with the code as a URL parameter; @influto/web reads it and claims that exact click.
• Android apps built with the web SDK: links to Google Play also carry the code in the Play-signed Install Referrer, which @influto/web accepts through captureInstallReferrer().
• RevenueCat: if your app already knows the code — your own deep link or promo flow — setting the influto_code attribute attributes the customer directly.

Link-click matching (fallback)

When someone taps a creator's link, goes to the App Store or Google Play and installs without the code reaching the app, InfluTo matches that install to the recent tap on the same link, within 72 hours. It's a best-effort match limited to that app and that window:

• Device characteristics such as model, screen size or timezone are never compared — it is not device fingerprinting.
• Nothing is matched across other apps, websites or ad networks.
• The match only ever decides between "referred by this creator" and "organic".
• A typed code or an in-app code always overrides it.

If a tap can't be matched, the install counts as organic. Nobody is charged for an unattributed install; commissions only exist once a real purchase is verified.

Attribution window

Link-click matching looks back 72 hours from the install. The window is the same for every app.

It applies to link-click matching only. Typed codes and in-app links aren't limited by it.

Lifetime attribution

Once a user's purchase is attributed to a creator, every later purchase and renewal by that user stays with that creator. A code typed later doesn't move an existing subscriber to someone else. Plan changes follow the new price on the next renewal.

Which method wins

• Several taps: the most recent one wins.
• A tap and a typed code: the typed code wins — until the user's first attributed purchase, after which lifetime attribution applies.

Privacy and compliance

• No IDFA, no advertising ID, no ATT prompt, no cross-app tracking.
• No device fingerprinting: attribution never matches by device characteristics.
• The iOS SDK ships an Apple privacy manifest declaring no tracking.
• Users can ask for their attribution data to be deleted; retention follows the Privacy Policy.

Click quality

Clicks are screened for bots, link previews and automated or repeated tapping before they count, and flagged clicks are left out of creator stats and milestone progress. Commissions only come from purchases the store has verified. See Analytics for how clicks are counted.