Privacy Policy & KVKK / GDPR Notice

1. DATA CONTROLLER

Processed by Birikim Yap (support@birikimyap.app) under KVKK & GDPR guidelines.

2. COLLECTED DATA & PURPOSES

Identity and contact data (your name or display name and email address), collected in one of three ways: direct registration with an email address and password inside the app, Google Sign-In, or Sign in with Apple. If you registered with an email address and password, your password is processed and stored by our authentication provider, Firebase Authentication; Birikim Yap cannot see your password and does not write it to its own records.

Account identifiers assigned by the system, the budget data you enter (income, fixed costs, variable expenses, categories, expense notes, savings goals and past-month records), your preference data (language, currency, dark/light mode, haptic and notification preferences), and couple/family budget data (invitation codes and group membership records).

Collection methods: in-app forms and the records you enter yourself, the Google and Apple sign-in services, and the device functions you grant permission for (microphone, camera). The app does not collect location data, contacts, photo library content, device identifiers or advertising identifiers. There is no advertising network, analytics or crash-reporting service in the app, and your in-app usage behaviour is not tracked.

3. THIRD-PARTY INTEGRATIONS & INTERNATIONAL TRANSFER

Google and Apple Sign-In for secure OAuth authentication. Firebase Authentication (Google) for account registration, sign-in and password reset; password reset and verification emails are also delivered through this infrastructure. Firebase infrastructure (Google) for the cloud database and server-side operations. Apple Speech Recognition (iOS) for converting voice expense input into text.

The cloud database and server-side operations run in Google Cloud's Frankfurt (Germany) region, with access restricted by Firebase Security Rules. Authentication records may be processed on Google's global infrastructure. All of these services operate outside Türkiye, so your personal data is processed abroad.

All communication between the device and the cloud takes place over a secure connection (TLS), and Google Cloud's standard storage security and encryption mechanisms apply on the cloud side. Birikim Yap does not use end-to-end encryption. Data on your device is held in the app's own sandbox allocated by iOS, without an additional encryption layer applied by the app.

Your personal data is NEVER sold to ad networks or shared for marketing purposes.

4. MICROPHONE & AUDIO PRIVACY

Voice inputs are converted to text using iOS Speech Framework. Raw audio files are not permanently stored by Birikim Yap or uploaded to the cloud database. Parsed numerical expense amounts and categories are saved to expense entries. Depending on device settings, language packs, and OS conditions, speech data may be processed by Apple speech services.

4b. CAMERA

The camera is used only to read the QR code of a couple/family budget invitation, and only while that screen is open. No photo or video is captured, stored on the device or uploaded to the cloud; the only information taken from the camera is the invitation code contained in the QR code. The app does not access your photo library and does not request permission for it.

4c. DATA SHARED IN A COUPLE / FAMILY BUDGET

The family budget feature is optional and a family group consists of at most two people. When you join a family group, the other member can see: your name, your email address, your role in the group (creator or joiner), the income and expense records you add to the shared budget, and the fact that those records were added by you.

YOUR PERSONAL BUDGET IS NOT SHARED. Income, expense, goal and past-month records that you do not add to the family group are available only to your own account and cannot be read by any other user, including your family member.

5. ACCOUNT DELETION

You can delete your account yourself via Profile Tab -> Account Management -> Permanently Delete My Account. For security reasons this requires that you have signed in recently; you may be asked to sign out and sign in again.

The following are permanently removed: your authentication record, your profile and all your budget data, your family group membership record and the name and email address held in it, your family join records, the local copies on your device, and widget data.

If you created the family group, the group is dissolved; the shared income and expense records and the invitation codes are deleted as well. If you were the party who joined a family group, the shared income and expense records are not deleted, because they are the other member's budget history; the name and account identifier pointing to you are removed from those records. Deletion cannot be undone.

6. YOUR RIGHTS & CONTACT

For all your rights under Article 11 of the Turkish Data Protection Law (KVKK) and the corresponding rights under the GDPR, the contact address is: support@birikimyap.app.

7. DATA RETENTION PERIOD

While your account remains open, your budget and profile data are retained so that the service can be provided.

When you delete your account, your account record and the associated budget data are permanently removed.

Records subject to a statutory retention obligation, if any, are kept only for the period required by the relevant legislation and deleted at the end of that period.

Data held locally on your device is removed from your device when you uninstall the app.

8. AGE LIMIT

Birikim Yap is intended for users aged 18 and over. Personal data is not knowingly collected from persons under 18.

If it is determined that data belonging to a user under 18 has been collected, the relevant records are deleted. You may report such cases to support@birikimyap.app.

9. CHANGES TO THIS POLICY

This policy may be updated due to changes in legislation or new features added to the app.

Material changes are notified within the app, and the current text can always be viewed under Profile -> Legal Information.

Continuing to use the app after such changes means you accept the updated policy.