Privacy Notice

• Account: your email address and name when you create an account or sign in, with Google or with email and password.
• Password: if you sign in with email and password, we store your password only as a bcrypt hash, never in plain text.
• Library: methods you save and collections you create.
• Assistant: the messages you send to the AI assistant and its replies (chat history).
• Notifications (mobile app): if you enable the daily reminder, your device push token and timezone. They are used only to deliver one daily notification about a method in your chosen fields.
• Requests: the email and message you send when reporting an issue or contacting us.
• Billing: a payment-provider customer reference and a card token reference for subscriptions. We never see or store your card number; the payment provider handles it.
• Technical: strictly-necessary cookies for sign-in and security (see the Cookie Policy).

• To provide the service and your account (performance of a contract).
• To authenticate you and keep the service secure (legitimate interest / legal obligation).
• To run the AI assistant you ask questions to (your request / contract).
• To take payment for paid plans (contract).
• Where we rely on consent (e.g. optional communications), you may withdraw it at any time.

When you use the assistant, your messages are sent to our AI model provider (Google Gemini) to generate an answer, and the conversation is stored as chat history. Do not share sensitive personal data in chat. Chat history is retained for a limited period (see Retention) and is deleted when you delete your account.

We use a small set of cookies for session and sign-in security, plus one cookie that remembers your language choice. We do not use advertising, analytics or cross-site tracking cookies. See the Cookie Policy for details.

• Google: sign-in (OAuth) and the Gemini AI model behind the assistant.
• Supabase: database hosting.
• iyzico: subscription payments.
• Expo: delivery of the daily mobile notification, via Apple APNs / Google FCM.
• Resend: transactional emails (e.g. invites).
• We do not sell your personal data.

Some processors operate outside Türkiye and the EEA. Where data is transferred internationally we rely on appropriate safeguards (e.g. the processor's standard contractual clauses) as required by KVKK/GDPR.

• Chat history: kept for a limited period (currently about 90 days), then automatically purged.
• Account, library and billing records: kept while your account is active and as required by law, then deleted or anonymised.

• Access: learn what data we hold and request a copy (export).
• Rectification: correct inaccurate data.
• Erasure: delete your account and associated data ('right to be forgotten').
• Objection / restriction: object to or limit certain processing.
• You can exercise account access, export and deletion from your account settings, or by contacting us below.

We protect data with signed, httpOnly session cookies, bcrypt-hashed passwords, server-side authorization, TLS in transit and access controls. The Security page describes these measures in more detail. No system is perfectly secure, but we work to industry standards.

We may update this notice; material changes will be reflected by the date above.

To exercise your rights or ask a question, use the Contact form.