Privacy Policy

1. Introduction

This Privacy Policy describes how Mahmud Çıkrık ("I", "me", "developer") collects, uses, and handles your information when you use the Idypot: Idea Cauldron iOS application ("App"). By using the App, you agree to the practices described in this policy. If you do not agree, please do not use the App.

Idypot is operated by an independent individual developer and is available exclusively on the Apple App Store. All data handling is governed by applicable privacy laws, including GDPR and relevant Turkish personal data protection legislation (KVKK).

2. Information We Collect

2.1 Account Information

If you sign in with Apple, Google, or another supported provider, we collect:

Your unique user ID (UID) assigned by Firebase Authentication
Email address (if provided by your sign-in provider)
Display name (if provided by your sign-in provider)

2.2 Anonymous Sign-In

If you use the App without creating an account, Firebase assigns an anonymous UID to your session. No personal information is collected in this case. However, anonymous accounts are subject to automatic deletion by Firebase after a period of inactivity (see Section 6).

2.3 Usage Data

We collect anonymised usage events through Firebase Analytics, including:

App sessions, screen views, and feature interactions
Crash reports and performance metrics via Firebase Crashlytics and Performance Monitoring
Device type, operating system version, and language settings

This data cannot be used to identify you personally and is used solely to improve the App.

2.4 Purchase and Subscription Data

Subscription and one-time token purchases are processed by Apple and managed through RevenueCat. We receive transaction status, product identifiers, and entitlement data from RevenueCat to verify access. We do not receive or store your full payment card details.

2.5 Push Notification Tokens

With your permission, the App collects a device push notification token via Apple Push Notification Service (APNs) and Firebase Cloud Messaging (FCM). This anonymous token is used solely to route notifications to your device. It does not identify you personally.

3. How We Use Your Information

Service delivery: authenticating your session, restoring purchases, delivering AI-generated content
Push notifications: notifying you when AI image generation is complete, and optionally for new features or subscription offers
App improvement: analysing aggregated, anonymised usage patterns to fix bugs and improve performance
Customer support: responding to support requests sent to mahmudckrk@gmail.com

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Anonymous Accounts & Data Retention

        Important notice for anonymous users: Firebase may automatically delete anonymous
        accounts that have been inactive for 30 days. When an anonymous account is deleted, any associated
        data stored in Firestore under that UID may also be permanently removed. To preserve your data and
        history, please upgrade to a full account (Sign in with Apple or another provider) from within the App.
      

Signed-in account data is retained for as long as your account is active. You may request deletion of your account and associated data at any time by contacting mahmudckrk@gmail.com. Account deletion will be processed within 30 days.

Anonymised analytics data may be retained by Firebase/Google per their own data retention policies. This data is not linked to your identity.

5. Push Notifications

We use Apple Push Notification Service (APNs) and Google Firebase Cloud Messaging (FCM) to send you the following types of notifications, subject to your device permission settings:

Service announcements: your AI-generated image is ready to view
Transactional: subscription renewal confirmations or payment issues
Marketing (optional): new features, promotional offers, or subscription discounts

To provide this service, an anonymous device push token is collected and shared with Firebase (Google) and Apple solely for the purpose of delivering notifications to the correct device.

You can disable notifications at any time in your device Settings > Notifications > Idypot. Disabling notifications will not affect your ability to use the App.

6. Third-Party Services

The App uses the following third-party services, each governed by their own privacy policies:

Firebase (Google LLC)

Used for authentication, cloud database (Firestore), analytics, crash reporting, push notifications (FCM), and performance monitoring. Data may be processed on servers in the United States and other countries where Google operates. See Firebase Privacy.

RevenueCat Inc.

Used to manage in-app subscriptions and one-time purchases, verify entitlements, and handle subscription lifecycle events. See RevenueCat Privacy Policy.

Apple Inc.

Payments are processed exclusively by Apple via the App Store. Apple also provides APNs for push notifications and handles Sign in with Apple authentication. See Apple Privacy Policy.

AI Image Generation Provider

Image generation requests may be processed by a third-party AI model provider. Prompts submitted for generation may be transmitted to and processed by that provider. We do not knowingly submit personally identifiable information as part of generation prompts.

7. Children's Privacy

The App is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided personal information, please contact us at mahmudckrk@gmail.com and we will delete that information promptly.

8. Your Rights

Depending on your jurisdiction, you may have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your account and personal data
Object to or restrict certain types of processing
Data portability (where technically feasible)

To exercise any of these rights, contact mahmudckrk@gmail.com. We will respond within 30 days.

9. Security

We take reasonable technical measures to protect your information, including using Firebase's built-in security rules and encrypted connections (HTTPS/TLS). However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the App after changes constitutes acceptance of the revised policy.

11. Contact

For privacy-related questions or requests, contact:
Mahmud Çıkrık
mahmudckrk@gmail.com