Privacy Policy

What we store, and how to erase it

Effective 10 October 2026 · Applies to the Kılıbık mobile app for iOS and Android

The short version

Kılıbık needs an account, because the whole point is syncing a list between two phones. So unlike a purely offline app, we do hold your data on a server: your e-mail address, the name you chose, and the tasks you and your partner exchange.

We do not sell it. To see which features get used and to fix crashes we collect anonymous usage statistics and crash reports; your tasks, name and e-mail are never part of them, and you can turn them off in Settings (details). The app does show ads, served by Google AdMob; exactly what that involves is set out under Advertising below. Your tasks are readable by exactly two people — you and the partner you paired with. You can delete the entire account, and everything attached to it, from inside the app.

What we collect

• Your e-mail address — used to sign you in, to verify the address at sign-up, and to reset your password. Your partner can see it on their Settings screen.
• Your display name and role — the name you type at registration and whether you chose Prenses or Erkek. Both are shown to your partner.
• Your pairing — who you are paired with, and the six-character invite code while it is waiting to be used. The code is deleted the moment it is redeemed.
• Your tasks — the title, the optional detail and note, whether it is done, and the times it was created and completed.
• Anonymous usage statistics and crash reports — which screens are opened, counts of events such as "a task was created", and technical details if the app crashes. Details below.
• A notification token for each device — an identifier Google gives us so a notification can reach your phone. It identifies the installation, not you.

That is the complete list of what we hold on our server. There is no location, no contacts, no photos, no address book and no device fingerprint. We have no access to your advertising identifier; what Google uses it for is set out under Advertising below.

Where it is stored

Everything sits in Google Firebase — Firebase Authentication for the account, Cloud Firestore for the profile and tasks, Firebase Cloud Messaging for the notifications, Google Analytics for Firebase for usage statistics and Firebase Crashlytics for crash reports. That means the data is held on Google Cloud servers under Firebase's privacy terms, and Google acts as our processor.

Your account and your tasks are not sold, not shared with advertisers, and not handed to any third party beyond the Google services listed above. Ad serving is a separate flow altogether: what AdMob collects from your device is never joined to your e-mail address or your tasks.

Who can read your tasks

Two people: the one who created the task and the one it was assigned to. This is enforced on the server, not just hidden in the app.

• You can read your own profile and your partner's — nobody else's.
• There is no way to list or search users. The only route into a pairing is a code somebody gives you.
• A pairing counts only when both profiles point at each other, so a one-sided write grants nobody access.

We can technically reach the database as its administrator, as any operator can. We do not read your tasks, and we would only ever look at stored data if you asked us to while reporting a problem.

Notifications

When a task is created, we send one push notification to the phone it was assigned to. It contains the sender's name and the task title. That is the only notification Kılıbık sends — no marketing, no reminders, no digests.

You can turn notifications off in your phone's system settings at any time; the app keeps working without them.

Deleting your data

Two separate actions, both in Settings:

• Eşleşmeyi bitir ends the pairing and deletes every task between you and your partner, on both sides. Your accounts remain.
• Hesabımı sil deletes the account itself. Your tasks go, the pairing on your partner's side is cleared, your profile is removed and the login is destroyed.

If you cannot reach the in-app option for any reason, write to the address at the bottom of this page and we will delete the account for you.

How long we keep it

Your account and tasks stay until you delete them. There is no automatic expiry, and no archive kept after deletion.

Advertising

Kılıbık is free and pays for itself with ads. You see banner ads between the tasks in your list and on the task-creation screen. They are served by Google AdMob.

To serve them, AdMob reads some data from your device. None of it passes through us; it goes straight to Google:

• Your advertising identifier — the IDFA on iOS, the Advertising ID on Android. A number with no connection to your name or e-mail, which you can reset from your phone's settings.
• Your IP address — used to decide which country and language the ad should be chosen for. Not street-level location.
• Device information — model, operating system version, screen size, language.
• Ad interaction — which ad was shown and whether it was tapped, so the same ad is not repeated endlessly and fraudulent clicks can be filtered out.

None of this is linked to your Kılıbık account. Google explains why and how it processes this data in its advertising data policy.

Ads are restricted to a 4+ content rating, so no gambling, alcohol, dating or adult advertising is shown.

There are no in-app purchases.

Usage statistics and crash reports

To see which features are useful and to fix bugs we use two Firebase services: Google Analytics for Firebase and Firebase Crashlytics.

• What is sent — the screens you open and events such as "signed up", "paired", "task created" or "thanked"; coarse categories such as a task's priority or the reaction chosen; your role (Princess/Boy), whether you are paired and the app language; device model, operating system, app version, country; and a random per-installation ID that Firebase assigns. If the app crashes, the technical stack trace of the crash.
• What is not sent — the text of your tasks, notes and special days, your name, your e-mail, your partner's name, your invite code. This data is not linked to your account or your identity.
• Not used for advertising — Analytics does not access your advertising identifier (IDFA / Advertising ID), the data is not used to personalise ads and is not combined with AdMob. By Apple's definition this is not tracking.

If you'd rather not, turn off Settings › Privacy › Share usage statistics; from then on neither statistics nor crash reports are sent. The app keeps working exactly the same.

Google explains how it processes this data on the Firebase privacy page.

Your consent for ads

The first time you open the app, Google's consent screen asks whether you want personalised ads. On iOS, Apple's "allow the app to track you" prompt appears as well.

If you say no, ads still appear but are not personalised — they are chosen by the country you are in rather than by anything about you. The app behaves identically either way; no feature is withheld.

To change your mind later, use your phone's settings: Settings › Privacy & Security › Tracking on iOS, Settings › Google › Ads on Android. You can reset or delete your advertising identifier from the same place.

App stores

Kılıbık is distributed through the Apple App Store and Google Play. Apple and Google collect their own download and usage statistics as part of running those stores, under their own privacy policies. We receive only anonymous aggregate reports.

Children

Kılıbık is meant for adults in a relationship and is not directed at children. We do not knowingly collect personal data from children. If you believe a child has registered, write to us and we will remove the account.

Your rights

Data-protection laws such as the GDPR and Turkey's KVKK give you the right to access, correct, export and delete your personal data, and to object to its processing. Your name and role are editable in the app, deletion is a button in Settings, and for anything else — including a copy of what we hold — write to us and we will answer within 30 days.

Changes to this policy

If a future version changes what the app stores or transmits, this page is updated before that version is released, and the effective date above changes with it.

Contact

---