Privacy Notice

Account: email, name, language, sign-in method and a salted hash of your password. If you use Google, we receive your verified email, name and avatar link.

Session and security: a session token, and your IP address for rate limiting and abuse prevention.

Use of the service: the reports you request or open, and your report quota.

Billing: subscription status and identifiers from our payment provider. Card details stay with the provider.

Waitlist: your email, language, the time you joined and the version of the consent text you accepted.

To run your account, plan and reports: performing our contract with you. To keep the service secure and stop abuse: our legitimate interest. To email you once when Pro opens: your consent, which you can withdraw. To keep accounting records: legal obligation.

We do not use your data for advertising and we do not sell it.

Creem (Armitage Labs OÜ, Estonia; payments, merchant of record), Cloudflare (delivery, security and the Turnstile check), Google (only if you choose Google sign-in), and our hosting and email servers.

Anthropic processes public App Store review text and app details to write reports. We do not send your account data to it.

Some providers process data outside Türkiye and the European Economic Area. We rely on the safeguards the law allows, such as standard contractual clauses or your explicit consent where required.

Account data until you delete your account. Sessions expire after 30 days. Short-lived security records (verification and rate limit entries) are deleted automatically. Billing records are kept as long as tax and accounting law requires, unlinked from you after account deletion. Waitlist emails are deleted after the launch email or when you ask.

You can ask whether we process your data, get a copy, correct it, have it deleted, restrict or object to processing, move it to another service, and withdraw consent. You can also complain to the Personal Data Protection Board (KVKK) or your local data protection authority.

You can delete your account yourself on the Account page. For other requests, see the KVKK application page or write to [email protected].

We only use cookies that are strictly necessary. Details are on the cookie policy page.

We use encryption in transit, hashed passwords, rate limits, and limit who can reach production data. No system is perfectly secure; if a breach affects you, we will notify you and the authorities as the law requires.

The service is not meant for people under 16 and paid plans are for adults.

If we change this notice in a way that matters, we will tell you in the product or by email before it applies.