Privacy Policy

1. Identity of the Data Controller

Data Controller:
Yiğit Türkmen (individual developer)

Contact Email:
hi@yigit.work

The Data Controller determines the purposes and means of processing personal data within the meaning of Article 4(7) GDPR.

2. Scope of This Policy

This Policy applies to all users of the App and governs the processing of personal data obtained through:

• Account creation and authentication
• Use of App features and services
• Subscription and membership access
• User-initiated communications

This Policy does not apply to third-party services governed by their own privacy policies.

3. Categories of Personal Data Processed

We process only personal data that is strictly necessary to operate the App.

3.1 Data Provided Directly by the User

• Full name
• Email address
• Profile photograph (uploaded voluntarily)

3.2 Authentication Data (Sign in with Apple)

When you sign in using Sign in with Apple, we may receive:

• A unique user identifier
• Your name and email address (depending on Apple ID settings)

We do not access or store Apple ID passwords.

3.3 Technical & Notification Data

• Device identifiers required for push notifications
• Notification tokens used exclusively for reminders

No analytics, tracking, or advertising data is collected.

4. Purposes of Processing

Personal data is processed solely for the following purposes:

• Creating and managing user accounts
• Providing cleaning schedules and reminders
• Delivering push notifications
• Managing user profiles
• Managing access to paid features
• Communicating regarding account-related matters
• Ensuring security and proper functioning of the App

Personal data is never used for advertising, tracking, or profiling.

5. Legal Bases for Processing (GDPR Article 6)

We rely on the following lawful bases:

Article 6(1)(a) – Consent
For optional features such as profile photos and notifications.

Article 6(1)(b) – Performance of a Contract
For providing core functionality and paid subscription features.

Article 6(1)(f) – Legitimate Interests
Limited to security, fraud prevention, and service integrity.

6. Push Notifications and Reminders

The App sends push notifications strictly related to cleaning schedules and reminders.

Users may disable notifications at any time via device settings. Disabling notifications does not affect other App functionality.

7. Subscriptions and Payments

The App offers optional paid subscriptions or memberships.

Payments and subscriptions are processed exclusively through:

• Apple App Store (iOS devices)
• Google Play Store (Android devices, if applicable)

The Developer does not collect, process, or store:

• Payment card details
• Billing addresses
• Bank or financial account information

All payment transactions are handled directly by Apple or Google in accordance with their own privacy and security policies.

Subscription status, purchase validation, and entitlement information may be processed via RevenueCat solely to manage access to paid features.

8. Third-Party Data Processors

We use the following third-party processors:

8.1 Supabase

Used for backend services, authentication, and secure data storage.

8.2 RevenueCat

Used for managing subscriptions and in-app purchase entitlements.

8.3 Resend

Used exclusively for transactional and account-related email communication.

All processors act under GDPR-compliant data processing agreements.

9. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), appropriate safeguards such as standard contractual clauses are applied.

10. Data Retention and Account Deletion

Personal data is retained only for as long as necessary.

Account Deletion

• Users can delete their account directly within the App
• Upon deletion:
  • All personal data is permanently and irreversibly deleted
  • No backups or residual copies are retained

11. Data Security

Appropriate technical and organizational measures are implemented, including:

• Encrypted data transmission
• Restricted access controls
• Infrastructure-level security provided by Supabase

Despite these measures, no system can be guaranteed to be completely secure.

12. Camera and Photo Library Access

The App may request access to the device camera and photo library solely to enable profile photo uploads.

No media is accessed or transmitted without explicit user action.

13. User Rights Under GDPR

Users have the right to:

• Access their personal data
• Rectify inaccurate data
• Erase personal data
• Restrict processing
• Object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

Requests may be submitted to hi@yigit.work.

14. Children's Privacy

The App is not intended for children under the age of 13.

We do not knowingly process personal data of children.

15. Changes to This Policy

This Policy may be updated from time to time.

Changes will be published within the App and take effect immediately upon publication.

Continued use of the App constitutes acceptance of the updated Policy.

16. Governing Law

This Policy is governed by applicable data protection laws, including the GDPR.