Privacy Policy

This policy explains in plain language what data is processed when you use the Ebcedia app and the ebcedia.com website, why it is processed, who it is shared with, and what your rights are.

01Who is responsible

Ebcedia is developed and provided by independent developer Mehmet Şişoğlu (Istanbul, Türkiye). He is the data controller under the GDPR and the Turkish data protection law (KVKK).

For any question or request: apps@mehmetsisoglu.com

02In short

• You don't need to sign up. The app creates an anonymous account for you automatically. We never ask for your email, phone number or location.
• To write your reading, we send the names you enter to OpenAI. We only do this after you give explicit permission in the app, and you can withdraw it at any time.
• To improve the app, we use Google Analytics (Firebase) to measure which screens get used, anonymously. No ads, no tracking: we don't follow you across other apps or websites, so we don't show the tracking (ATT) prompt either. You can turn statistics off in Settings > Usage statistics.
• You can delete your data at any time in Settings > Delete All Data.

03What we process

• What you type for an analysis: your name; optionally your mother's, father's or partner's name; the mother's and father's names, gender and origin preference in a Baby Name analysis; your birth date if you add it; the reading style you choose. We use these for the abjad calculation and the reading text.
• Your results and history: stored so we can show your history and keep the readings you unlocked.
• Anonymous account ID: a randomly generated user number that links your credits, Premium status and history to you.
• Profile: your analysis credit balance and Premium status.
• Device record: a device number based on Apple's app-specific device identifier (identifierForVendor). It stops the free first analysis from being claimed again and again on the same device.
• Purchase records: Apple transaction ID, product and dates. Used to give you what you bought, restore it and handle refunds.
• Push token (FCM) and app language: so the "your analysis is ready" notification reaches the right device in your language.
• Support messages: if you email us, your email address and what you write. Used only to reply to you.

What we don't collect: your email address (unless you write to us), phone number, location, contacts, health data, payment card details (Apple handles payment) or advertising identifier. We don't access your photos; when you save a share card, we only add it to your library.

Usage statistics (Google Analytics for Firebase): Screens opened, session length, in-app purchase events, device model, OS version, app language and an approximate country/city derived from your IP address are collected with a random installation ID. This is not linked to your name, your analyses or your account; your advertising ID is not collected and ad personalization is off. It is used only to improve the app and kept by Google for up to 14 months. You can turn it off at any time in Settings > Usage statistics. We don't use AdMob or RevenueCat.

Other people's names: When you run a reading for your mother, partner or someone close to you, you enter their name. We use it only for the reading you asked for. Please enter other people's names respectfully.

04AI (OpenAI)

To write your reading, the following is sent through our server to OpenAI (USA): the names you type for the analysis, your birth date if you add it, and the analysis settings (analysis type, language, reading style, calculated abjad values).

• This only happens after you tap "Allow and continue" on the permission screen in the app.
• You can withdraw your permission at any time in Settings > AI. If you don't allow it, or withdraw it, your names are not sent to OpenAI, and the AI reading can't be written.
• Your email, account details and device ID are not sent to OpenAI.
• Under OpenAI's API terms, this data is not used to train models. OpenAI may keep it for up to 30 days to monitor for abuse.

05Notifications

We don't send daily or weekly notifications. If you allow notifications, you may only get:

• a short alert when your analysis is ready (via Google Firebase Cloud Messaging);
• one reminder if you haven't run an analysis for 30 days;
• one reminder 72 hours after a Compatibility analysis.

Your phone schedules these two reminders itself. A reminder may show the title of your last analysis (for example, a name) on your lock screen. Notifications are optional. You can turn them off at any time in iOS Settings > Notifications > Ebcedia.

06Who we share data with

We don't sell your data and we don't share it for advertising. We only work with these providers to run the service:

• Supabase: anonymous account, database and server functions.
• OpenAI: writing the reading text (only if you gave permission).
• Google (Firebase Cloud Messaging and Google Analytics): delivering push notifications and anonymous usage statistics.
• Apple: purchases, subscriptions and notification delivery.
• Resend: technical alert emails sent to the developer. They contain only the anonymous account number, device number, analysis type and error text. Names are never included.

If the law requires it, we may share the necessary data with competent authorities.

07International transfers

Supabase, Google, OpenAI, Apple and Resend may process data outside Türkiye and the European Union, for example in the USA. We make these transfers with safeguards that follow Article 9 of the KVKK and the GDPR's rules on international transfers. For sending your names to OpenAI, we ask for your explicit consent. For the other providers, we rely on the appropriate safeguards the law provides.

08Legal bases

• Consent (GDPR Art. 6(1)(a); KVKK Art. 5(1) and Art. 9): processing your names and birth date with AI and transferring them abroad for that purpose.
• Contract (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)): preparing the analysis you ask for, showing your history, providing your purchases and sending the notifications you asked for.
• Legitimate interest (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)): preventing abuse of the free analysis, protecting against fraud and keeping the service secure.
• Legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)): keeping purchase records as tax and accounting rules require.

09How long we keep data

• Account, profile and analysis history: until you tap Delete All Data in the app.
• History and preferences on your device: until you delete the app.
• Device record: as long as needed to prevent abuse of the free analysis. You can ask us by email to delete it.
• Purchase records: as long as needed to provide what you bought and to meet legal record-keeping duties (tax, accounting).
• Push token: deleted together with your account.
• Data sent to OpenAI: up to 30 days on OpenAI's side.
• Support emails: for a reasonable time to solve your issue and handle any follow-up.

10Deleting your data

When you tap Settings > Delete All Data in the app, the following is permanently deleted: your anonymous account, your profile (including your credits and Premium status), your analysis history and results, and the push token and purchase links tied to your account.

What is kept:

• Device record: it is unlinked from your account and kept so the free analysis can't be claimed again. You can ask us by email to delete it.
• Apple purchase records: kept for purchased access, refund notices and legal obligations.

This can't be undone. Deleting your data does not cancel your subscription. Cancel it separately on your iPhone in Settings > [your name] > Subscriptions. A subscription or Lifetime purchase tied to your Apple Account can be reactivated with Restore Purchases.

11Your rights

Under the GDPR and Article 11 of the KVKK, you can ask:

• whether we process your data, why, and who receives it, and get a copy;
• to correct wrong or incomplete data;
• to delete your data;
• to restrict processing or to object to it;
• to receive your data in a portable format;
• to withdraw your consent at any time (this doesn't affect processing done before);
• for compensation if you suffered damage from unlawful processing.

Send your request to apps@mehmetsisoglu.com. Because your account is anonymous, we may ask for some details to confirm the data is yours. We reply within 30 days.

If you're not happy with our answer, you can complain to the Turkish Personal Data Protection Authority (KVKK) or, if you live in the EU, to the data protection authority in your country.

12Children

Ebcedia is not directed at children under 13, and we don't knowingly collect their data. If you think this has happened, write to us and we will delete it. Names entered in a Baby Name analysis are used only to suggest names.

13Security

Your data travels between your device and our servers over encrypted connections (HTTPS). Access rules on the server make sure only your account can reach your data. No system is completely secure, but we take reasonable technical and organisational measures.

14Website and cookies

• The ebcedia.com website uses Google Analytics 4 to measure visits in aggregate. It sets cookies in your browser and collects information such as approximate location (from your IP address), browser type and page interactions.
• The abjad calculator on the website runs entirely in your browser. The name you type is not sent anywhere.
• You can delete or block cookies in your browser settings.

15Changes

When we update this policy, we change the date at the top. We also announce significant changes in the app.

16Contact

Questions and requests: apps@mehmetsisoglu.com