Privacy Policy

1. Introduction

This Privacy Policy explains the purposes for which, and the manner in which, your personal data is processed when you use the Velum. - Quotes application (the "Application"), as well as your rights. We value your privacy and process your data only for the purposes set out in this policy.

Data controller: Abdullah Onur Şimşek (individual developer)

Address: Tunahan Mahallesi 210. Sokak 17625 Ada Gökkuşağı Evleri, Etimesgut/Ankara, Türkiye

Contact: contact@berryfilm.art

For users residing in Türkiye, the privacy notice and explicit consent processes under the Turkish Personal Data Protection Law No. 6698 ("KVKK") are additionally governed by the KVKK Privacy Notice and Explicit Consent Statement.

2. Data We Process

Depending on how you use the Application, we process the following data:

2.1. Account and Identity Data

• Sign in with Apple / Sign in with Google: name (if provided) and email address.
• Email registration: name, email address, and password (the password is stored in encrypted/hashed form within the authentication infrastructure; it cannot be seen by us).
• Guest (anonymous) use: no personal identity information is collected; only an anonymous user identifier tied to the device is created.
• The sign-in method (identity provider) you use and whether the account is anonymous.
• Your agreement records (the version information of the Terms of Use, Privacy, and KVKK documents).

2.2. In-App Usage and Preference Data

• The aphorisms you save ("saved items") and reading/browsing statistics (e.g., number of items read, the theme/philosopher/thought you are most interested in, recently viewed content).
• Application preferences such as language preference, appearance theme, font, and size.
• Your notification preference and the notification time you select.

2.3. Device and Technical Data

Important: The data we hold directly, as specified in 2.1 and 2.2 above — name, email, user identifier, together with the aphorisms browsed and aphorisms saved — is used solely for the purpose of operating the Application (account, synchronization, personalized experience), within the Application; it is not sold or transferred to third parties for advertising or marketing purposes. In guest (anonymous) use as well, browsed and saved aphorisms and preferences are collected; this data is linked not to your personal identity but to an anonymous user identifier tied to your device.

• The notification token (FCM/APNs token) of your device, in order to send notifications.
• Your time zone information, so that daily notifications are delivered at the correct time.
• An anonymous identifier generated on the device for subscription mapping (appAccountToken — a random UUID).
• Analytics and advertising data: for app usage analysis (Firebase Analytics) and advertising (Google AdMob), the relevant services may process device/app information, approximate interaction data, and advertising identifiers. For details, see Section 9.

2.4. Subscription Data

• Your Pro subscription status, plan type, start/end, and renewal information.
• Subscription verification is performed through notifications sent by the Apple App Store / Google Play (e.g., Apple App Store Server Notifications). Your payment and card information is not processed or stored by us; these transactions are carried out by the relevant app store.

3. The Purposes for Which We Process Data

• To create your account, verify your identity, and maintain your session;
• To synchronize your saved items, statistics, and preferences across devices;
• To send the daily edition and announcement notifications you have requested;
• To activate, verify, and manage your Pro subscription;
• To operate the Application, resolve issues, and improve service quality;
• To carry out aggregate/anonymized usage analyses in order to understand and improve how the Application is used (Firebase Analytics);
• To display advertisements in the Free version (Google AdMob);
• To fulfill our legal obligations and protect our rights.

4. Data Retention and Hosting

Your data is hosted on our infrastructure provider Google Firebase, in the European Union region (europe-west3 — Frankfurt, Germany). Data is retained for as long as your account is active and for as long as necessary for the purposes set out in this policy. When you delete your account, your relevant data is deleted or anonymized; data that is required to be retained by legislation may be kept for the relevant period.

5. Sharing of Data and Third Parties (Data Processors)

We do not sell your data. Your data is shared only with the following service providers, for the purpose of providing the service and to the extent necessary:

These providers may operate their own servers, some of which are located outside Türkiye (e.g., the United States, the EU); accordingly, your data may be transferred abroad. For users residing in Türkiye, the information and consent under the KVKK regarding transfers abroad are set out separately in the KVKK Privacy Notice and Explicit Consent Statement.

In addition, we may share data with competent authorities for the purpose of fulfilling a legal obligation, responding to lawful requests from official authorities, or protecting our rights.

• Google (Firebase): authentication, database (Firestore), server functions, storage, and cloud notifications (FCM). Data hosting is in the EU region (Frankfurt).
• Google (Firebase Analytics): aggregate/anonymized usage data for the purpose of analyzing and improving app usage.
• Google (AdMob): advertising in the Free version. AdMob may process device/app information and advertising identifiers to serve and measure advertisements and to prevent fraud. See Section 9.
• Apple: Sign in with Apple, App Store subscription and purchase infrastructure, push notifications (APNs).
• Google: Sign in with Google and Google Play subscription infrastructure.
• Email delivery: an email delivery service (Gmail/SMTP) for sending data-export and informational emails.

6. Children's Privacy

The Application does not knowingly collect personal data from children without the required consent. Users under 18 years of age must use the Application under the supervision of a parent/guardian. If you believe that a child's data has been processed without consent, please notify us at contact@berryfilm.art; we will carry out the necessary deletion.

7. Data Security

We apply reasonable technical and administrative measures (e.g., access controls, encryption in transit, locking user data to its owner) to protect your data against unauthorized access, alteration, and loss. We remind you that no system is 100% secure; if you become aware of a security vulnerability or unauthorized access, please contact us.

8. Your Rights and Control

The Application provides tools that give you direct control over your data:

In addition, you may exercise your rights arising from legislation — such as access, rectification, erasure, and objection to processing — by applying to contact@berryfilm.art. For details of your rights under the KVKK, please refer to the KVKK Privacy Notice and Explicit Consent Statement.

• Exporting your data: Through Settings, using the "Send me my data" option, you can request a copy of the data belonging to your account (account information, saved items, subscription status) as an email attachment.
• Clearing your data / deleting your account: You can delete your data using "Clear data" in guest use and "Delete my account" in a registered account.
• Notifications and preferences: You can change notifications and other preferences from Settings at any time.

9. Advertising and Analytics

9.1. Google AdMob (Advertising)

In the Free version, advertisements are displayed through Google AdMob. AdMob may process device and app information and advertising identifiers (e.g., IDFA on iOS, Advertising ID on Android) to serve advertisements, manage their frequency, measure their performance, and prevent fraud. This data is processed by Google as a separate data controller under its own policies.

You can find information about Google's advertising and data practices at the following addresses:

• On iOS, where tracking is carried out for personalized advertising, your consent is requested in accordance with Apple's App Tracking Transparency (ATT) framework; if you do not grant permission, advertisements will not be personalized, but ad display may continue.
• For users in Europe, your advertising preferences are obtained where necessary through a consent management screen (CMP).
• Google Privacy Policy: https://policies.google.com/privacy
• How Google uses data from sites/apps: https://policies.google.com/technologies/partner-sites
• Google advertising technologies: https://policies.google.com/technologies/ads

9.2. Firebase Analytics (Usage Analysis)

We use Firebase Analytics to understand and improve how the Application is used. In this context, screen/interaction events and basic device information are processed, generally in aggregate and anonymized form. We do not use this data to profile individual users for advertising purposes.

The personal data we hold directly (name, email, user identifier, browsed and saved aphorisms) is not sold or transferred to third parties for advertising purposes; it is used solely for the operation of the Application.

10. Changes

We may update this Privacy Policy from time to time. The current version is always published within the Application and/or on the relevant channels. For significant changes, we will provide notice as appropriate.

11. Contact

For all your questions and requests relating to privacy: contact@berryfilm.art