Privacy Policy
Who we are
Stalvek is operated by Can Pınar, an individual based in Türkiye, who is the data controller. Contact: support@stalvek.com.
What we collect
- Your email address and password. The password is stored only as a hash by our authentication provider.
- Your display name and the avatar you pick.
- Your habits, completions, streaks, reminders and settings (theme, language).
- A profile photo, if you choose your own. It is processed on your device.
We do not upload these to our servers.
If you buy Stalvek Pro, the payment is handled by Apple or Google. We use RevenueCat to manage subscriptions. Its SDK starts when the app opens so your subscription status can be checked; it receives an anonymous app user identifier, your purchase status and technical information such as your IP address, as described in RevenueCat's own privacy policy. We never see your payment details.
Reminders are scheduled locally on your device. We do not run a push notification server.
What we do not do
- No advertising, no analytics SDKs, no cross-app tracking.
- We do not sell or share your personal data for marketing.
Camera and photos
Stalvek asks for camera or photo library access only when you choose to set a profile photo. It never accesses your microphone.
Service providers
- Supabase: account authentication and your profile record.
- RevenueCat: subscription status and entitlements.
- Apple / Google: app distribution and payments.
Our Supabase project stores account data in the West EU (Ireland) region. Some providers (such as RevenueCat, Apple and Google) may process data outside the EU and Türkiye under their own privacy policies.
Retention and deletion
We keep account data until you delete your account. You can delete it at any time in the app: Settings, Profile, Delete account. This removes your account and profile from our servers. Data on your device is removed when you delete the app.
Your rights
Depending on where you live (for example under the GDPR or KVKK) you can ask for access, correction, deletion or export of your data, and you can object to processing. Write to support@stalvek.com; we answer within 30 days. You may also complain to your local data protection authority.
Children
Stalvek is not directed at children under 13 (or the minimum age in your country) and we do not knowingly collect their data.
Changes
If we change this policy we update the date above and, for material changes, notify you in the app.