Privacy Policy

1. Our approach

Bir Nefes is designed to operate with as little data as possible. We do not build advertising profiles, perform behavioral tracking or sell your data. This policy covers the website and Android and iOS apps.

2. Data we may process

We use these data only to provide, secure, support and improve the core service and to prevent abuse.

• Device and session: random device ID, platform, app version and secure session tokens
• Preferences: selected content categories, pause duration and app settings
• Usage and progress: displayed or viewed content, question progress, free-use entitlement and timestamps
• Purchases and entitlements: store, product type, verification result and subscription status
• Support: email, device/support code and message content
• Technical security logs: IP address, request time, error and security records

3. Information kept on the device

On Android, selected app package names and foreground-app information are processed on-device for pausing. On iOS, Screen Time and FamilyControls tokens are processed in Apple-protected storage and the app group. We do not upload these lists for advertising or profiling.

Selections, timing preferences and limited offline-tolerance records may remain in local storage.

4. Data we do not collect

Payments are processed by Apple App Store or Google Play. We cannot access your card details.

• location, contacts, camera or microphone content
• advertising identifiers or behavioral advertising profiles
• third-party analytics or advertising SDK data
• messages, photos or content from other apps
• payment-card details

5. Sharing and transfers

Data is stored on servers in Türkiye managed by ContraWorks. We share it only with essential technical providers or competent public authorities. Apple and Google independently process store purchases under their own policies.

We do not sell or rent personal data for marketing. No international transfer is currently planned within our own infrastructure; Apple and Google store processes remain independent.

6. Retention

Anonymous device and usage records are retained while the service is active. Records inactive for 24 months are deleted or anonymized. Support, transaction, security and legal records are retained only for reasonable or legally required periods.

Following a deletion request, data with no legal retention requirement is deleted, destroyed or anonymized.

7. Security

We apply reasonable technical and organizational safeguards including secure transport, access controls, secure token storage and restricted logging. No system can guarantee absolute security; please notify us of suspected issues.

8. Children’s privacy

Bir Nefes is not specifically directed at children. Users under 18 are expected to use it with a parent or guardian’s knowledge. Contact us if you believe a child’s data was processed without appropriate permission.

9. Your choices and rights

You can disable permissions in system settings, delete local app data and request deletion of server records. Data subjects in Türkiye can review their detailed statutory rights in the KVKK Privacy Notice.

10. Website and cookies

This website uses no advertising, analytics or tracking cookies. Hosting infrastructure may temporarily process IP addresses and standard server logs for security and delivery. If optional cookies are added, prior information and required choice controls will be provided.