Privacy Policy

1. Data controller

The App is provided by Ali Osman Ay, an independent developer based in Türkiye ("we", "us", the "Developer"). The Developer is the data controller for the personal data covered by this Policy. You can reach us at the email address in Section 20.

2. Summary

• The App requires no account, registration or login; we do not ask for your name, email address or phone number.
• The activities you create, your timer sessions, wallet balance and settings are stored only on your device and are not sent to our servers. We do not operate any server of our own.
• To measure the stability and quality of the App we use Google Firebase Analytics and Firebase Crashlytics, which automatically collect technical usage and crash data.
• We do not sell your personal data and the App shows no advertising.

3. Data stored on your device

The content you enter into the App (activity names, types, icons and colours, coefficients, session start/end times and durations, wallet transactions, wallet mode, theme and notification preferences) is kept in a local database on your device. We have no access to this data; it is not collected, viewed or transferred to third parties by us.

You alone decide what to write in this content. We recommend that you do not enter health, belief or similarly sensitive information in activity names; if you do, you do so at your own responsibility.

4. Data collected automatically (Firebase)

The App includes the Firebase Analytics (Google Analytics for Firebase) and Firebase Crashlytics software development kits provided by Google LLC and its affiliates. When you use the App these services may automatically collect:

• Identifiers: a random app-instance ID generated by Firebase and a Crashlytics installation ID. No advertising identifier (Android Advertising ID, Apple IDFA) is collected; advertising-ID collection and ad-personalisation signals are disabled in the App.
• Device and app information: device make and model, operating system and version, app version, language, screen characteristics and technical state such as free memory/storage.
• Usage data: events logged by Firebase by default, such as first open, session start, session duration, screen views, app updates and app removal.
• Approximate location: country/region/city-level location derived from your IP address. No precise (GPS) location is collected.
• Crash and error data: stack traces at the time of the crash, timestamp, device state and the technical context of the error.

5. Data we do not collect

The App does not collect your name, email, phone number, contacts, photos, camera, microphone, precise location, health data or payment information. The activity names, durations and balance you enter are not intended to be sent to the analytics or crash-reporting services. Crash reports may nonetheless, by their nature, contain technical context from the moment the error occurred.

6. Purposes and legal bases

We process the data in Section 4 to: operate the App; detect and fix crashes and errors; understand usage trends in aggregate and improve the App; maintain security and prevent abuse; and comply with our legal obligations.

• European Economic Area, United Kingdom and Switzerland (GDPR/UK GDPR): our legitimate interests in crash reporting and basic measurement (Art. 6(1)(f)); your consent where applicable law requires it (Art. 6(1)(a)); legal obligations (Art. 6(1)(c)).
• Türkiye (Law No. 6698, KVKK): the legitimate interests of the controller (Art. 5/2-f), legal obligation (Art. 5/2-ç) and, where required, explicit consent (Art. 5/1).
• Other countries: the valid legal grounds provided by the data-protection law of your country.

7. Sharing and service providers

We do not sell or rent your personal data, and we do not share it for behavioural advertising. Data is shared only with the following recipients and only to the extent described:

• Google LLC / Google Ireland Limited (Firebase Analytics and Crashlytics): as a service provider processing data on our behalf. Google's handling of this data is governed by the Google Privacy Policy (policies.google.com/privacy) and the Firebase privacy and security documentation (firebase.google.com/support/privacy).
• Apple and Google (app stores and operating systems): downloading, updating, device backup and notification infrastructure are subject to their own privacy policies.
• Authorities: to the extent required by law, court order or the protection of our rights.
• Successors: in the event of a transfer of the App, merger or similar transaction, provided the protections of this Policy continue to apply.

8. International data transfers

Google may process data on servers in various countries, including the United States. The data-protection laws of those countries may not offer the same level of protection as those of your country. Transfers rely, where applicable, on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the EU–U.S. Data Privacy Framework and the mechanisms provided in Article 9 of the KVKK.

9. Retention

• App data on your device: remains on your device until you delete it or uninstall the App.
• Firebase Analytics data: subject to Google's retention settings; user-level and event-level data is retained for up to 14 months depending on configuration, while aggregated (anonymised) reports may be kept longer.
• Firebase Crashlytics data: crash records are retained by Google for approximately 90 days.

10. Smartwatch, widgets and Live Activities

The Apple Watch and Wear OS apps communicate directly with your phone via Apple WatchConnectivity and the Google Wearable Data Layer. Timer state, wallet balance, today's net value and the activity list are transferred only between your own paired devices; they are not transmitted to us.

Home and lock screen widgets, Live Activities and the Dynamic Island display the same local data on your device. These surfaces may be visible to others on your lock screen; managing their visibility in your device settings is your responsibility.

11. Permissions and notifications

The App requests only the notification permission (for timer and daily-review reminders). Notifications are scheduled locally on your device. You can withdraw this permission at any time in your device settings. No location, contacts, camera, microphone, photos or calendar permission is requested.

12. Backups

If your operating system's backup feature (iCloud Backup or Android device backup) is enabled, your App data may be backed up to your Apple or Google account under that company's terms. We have no access to those backups; you can manage backup in your device settings.

13. Security

We apply reasonable technical measures to protect your data; however, no software, device or method of transmission is completely secure. The security of your device (screen lock, operating-system updates, physical access to the device) is your responsibility. We do not guarantee absolute security.

14. Your rights

Depending on where you live, you may have the following rights:

• EEA, United Kingdom, Switzerland (GDPR): access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests, withdrawal of consent, and the right to lodge a complaint with your local supervisory authority.
• Türkiye (KVKK Art. 11): to learn whether your data is processed, to request information, to learn whether it is used for its purpose, to know the third parties to whom it is transferred, to request rectification, erasure or destruction, to object, and to claim compensation; and the right to complain to the Personal Data Protection Board.
• California and other U.S. states (CCPA/CPRA etc.): the right to know, delete, correct and not be discriminated against. We do not sell personal information or share it for cross-context behavioural advertising.
• Brazil (LGPD) and other countries: the rights of access, correction, deletion, portability and objection granted by local law.

15. How to exercise your rights

You can access, edit or delete the app data on your device directly within the App; uninstalling the App deletes all local data. For requests concerning analytics and crash data, write to the address in Section 20. Because there is no account system we cannot identify you directly; we may ask for additional information (for example the app-instance ID) to process your request. We respond within the period required by applicable law (as a rule, 30 days).

16. Your choices

• You can turn off usage statistics at any time in the App under Settings > Privacy > "Share usage statistics"; once off, Firebase Analytics stops collecting data on that device. Crash reports are not affected by this setting.
• The App does not use your advertising identifier, so there is no separate ad-tracking preference for you to set.
• You can turn off notifications in your device settings.
• You can stop all data collection, including crash reports, by uninstalling the App.

17. Children

The App is not directed at children under 13 (or under the age of digital consent in your country if higher; up to 16 in the EEA depending on the country), and we do not knowingly collect personal data from them. Minors may use the App only with the permission and under the supervision of a parent or guardian. If you believe a child has provided data to us, please contact us.

18. Automated decision-making and tracking

We do not carry out automated decision-making or profiling that produces legal or similarly significant effects for you. The App does not track you across other companies' apps and websites; we use analytics data only to see, in aggregate, how many people use the App and from which countries.

19. Changes and language

We may update this Policy from time to time. The current version is published on this page and the date at the top shows the last update. Your continued use of the App after changes means you accept the updated Policy; it is therefore your responsibility to check this page regularly.

This Policy is published in Turkish and English. In the event of a discrepancy between the versions, the Turkish text prevails, subject to the mandatory provisions of the law of your country.

20. Contact

For any question or request about this Policy or your personal data: [email protected]