We store the email address for compliance reasons. We don't have access to the in-app purchase payment info. Therefore payment info is not associated with the npub.  

 Can you say more clearly what law or regulation you’re complying with?