Privacy Policy

This Privacy Policy explains how Boutanna Apps ("Boutanna Apps", "we", "us"), a company registered in the Republic of Türkiye, handles information when you use our website at boutannapps.com and our mobile applications (together, the "Services"). It applies to all of our apps, including Deadpoint and Getups. For the purposes of the Turkish Personal Data Protection Law No. 6698 ("KVKK") and the EU General Data Protection Regulation ("GDPR"), Boutanna Apps is the data controller.

1. Information in our apps

Content you create

Our apps are designed to keep your content with you. What you enter in an app, for example climbs and sessions in Deadpoint or wardrobe items in Getups, is stored locally on your device. Where an app offers iCloud sync, your content is stored in your private iCloud database, which belongs to your Apple account and which we cannot access. We do not upload your content to our own servers. If your device backups are on, iOS may include app data in your own iCloud or computer backup.

Purchases and subscriptions

Paid features are sold as in app purchases or auto renewing subscriptions through the App Store. Apple processes all payments, and we never receive your name, payment card or billing address.

To know which features you have unlocked and to show the right subscription options, our apps use Adapty, a subscription management service. Adapty processes purchase and transaction information received from Apple, a random app user identifier, device and app information (such as device model, operating system version, app version, language, country and time zone) and IP address. Adapty does not receive the content you create in our apps.

Usage statistics and crash reports

Some of our apps use Google Firebase services provided by Google:

• Firebase Analytics records how features are used, for example which screens are opened and whether a session or outfit is saved, together with an app instance identifier, device and app information and approximate location derived from IP address (city or country level). We use it in aggregate to understand what works and what to improve.
• Firebase Crashlytics sends a technical report when an app crashes, including the state of the app, device model, operating system version and an installation identifier, so we can find and fix bugs.

We configure these tools so they are not used for advertising. We do not collect your Apple advertising identifier (IDFA), we do not link this data with data from other companies and we do not send the content you create to Firebase. The table below shows which services each app uses today.

We update this table before any app starts using a new service or feature that changes how data is handled. The App Store privacy details for each app reflect the same information.

What we do not do

Our apps do not show advertising, do not use advertising networks and do not track you across apps and websites owned by other companies. We do not sell personal data, and we do not use your content to train models or for any purpose other than providing the app to you.

2. Our website

Our website does not use advertising cookies, tracking pixels or cross site tracking. It is hosted on Cloudflare, which processes standard technical data such as IP address, browser type and the pages requested in order to deliver the site securely and protect it from abuse. We may use Cloudflare's cookieless analytics to see overall visitor numbers.

When you use our contact form, we receive your name, email address, optional company name and your message. The form is delivered to our inbox through our email provider, Resend. We use this information only to read and reply to your message.

3. When you contact us or join a waitlist

If you email us, use the contact form or join a waitlist, we receive the details you choose to share. We use them to respond, to provide support, to let you know about early access when you asked us to, and to keep a record of our conversation. We delete support conversations when they are no longer needed, and in any case within 24 months of our last exchange, unless the law requires us to keep them longer. You can leave a waitlist at any time.

4. Legal bases

We process personal data only where the law allows it: to perform a contract with you (for example, providing a subscription you purchased), for our legitimate interests in running, securing and improving the Services and answering messages, to comply with legal obligations, and with your consent where it is required, such as for waitlist emails.

5. Service providers and international transfers

We share personal data only with the service providers below, only as far as needed to run the Services, or when required by law:

• Apple: App Store distribution, payments and, where offered, iCloud sync.
• Adapty: subscription and purchase management.
• Google Firebase: usage statistics and crash reports, in apps that use them.
• Cloudflare: website hosting, security and cookieless analytics.
• Resend: delivery of contact form messages.

Some of these providers process data on servers outside Türkiye, including in the European Union and the United States. Where this happens, we rely on the safeguards permitted under KVKK and GDPR, such as standard contractual clauses, and on your explicit consent where KVKK requires it.

6. Data retention

We keep personal data only as long as it is needed for the purposes in this policy. Subscription records are kept while your subscription is active and afterwards for as long as tax and accounting rules require. Usage statistics are kept in pseudonymous or aggregated form and deleted on a rolling basis. Content stored on your device stays under your control and is removed when you delete the app.

7. Your rights

Under KVKK (Article 11) and, where applicable, GDPR, you have the right to learn whether we process your personal data, to request information about it, to learn the purpose of processing and whether it is used accordingly, to know the third parties it is transferred to in Türkiye or abroad, to request correction or deletion, to object to results that arise from automated analysis, and to request compensation for damage caused by unlawful processing. EU residents may also request data portability and complain to their local supervisory authority.

You can delete content stored by our apps at any time by deleting the app. For anything we or our providers hold, send your request to hello@boutannapps.com with the subject "Data request" and the name of the app. We will respond within 30 days.

8. Children

Our Services are not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has shared personal data with us, please contact us and we will delete it.

9. Security

We use reasonable technical and organisational measures to protect personal data, including encrypted connections and limited access. Keeping your content on your device also means there is no central database of your activity to protect in the first place.

10. Changes to this policy

We update this policy when our Services or practices change, for example before an app adds iCloud sync or Firebase, or when a new app launches. We will change the date at the top of this page and, for significant changes, let you know in the app.

11. Contact

For any privacy question or request, email hello@boutannapps.com.