I believe you’re allowed to run ads on free tiers and offer to remove them by paying. You’re not however allowed to track people without their consent, thus you can’t force personalised ads on users, and say that the only way to get rid of the privacy invasion is to pony up.