BIRAKAMAZSIN — Privacy Policy

• You need no account to use the app. Your quit date, habits and daily records are kept on your phone.
• An account is only for backup. If you never create one, nothing is sent to any server.
• Your smoking habit and related records are health data. We process them only with your explicit consent; creating an account asks separately for your consent to transfer abroad.
• There are no ads, no analytics, no tracking and no in-app purchases, and the app contains no SDK for any of them.
• You can download and delete your data from inside the app, and have your account deleted by email without the app.

• Data controller: Serdar Şahin (Sole Proprietorship)
• Trade name: E²S Studio
• Tax office / Tax ID: Davutpaşa Tax Office — 7960782593
• Address: Çırpıcı Mah. Yeşilyol G Sk. No:40, Zeytinburnu, 34025 Istanbul, Türkiye
• Contact: info@e2sstudio.com

The app is published under the E²S Studio brand; the legal person behind the brand is the sole proprietorship above. The App Store shows Serdar Şahin as the seller, being the business's legal name, while Google Play shows E²S Studio as the developer. They are the same business.

This policy is written under Turkish Law No. 6698 on the Protection of Personal Data (KVKK) and the European Union General Data Protection Regulation (GDPR).

What you enter and what the app records is held in the app’s own storage. Unless you create an account it is sent to no one, us included, and it is deleted when you remove the app or choose “Delete my data”.

• Your quit date and quit attempts (including the moments you recorded having one)
• How many cigarettes you smoked a day, how many come in a pack and the pack price you entered; döner and tea prices for the savings comparison. No cigarette brand is asked for or stored.
• Your use of crisis mode and its outcome, the breathing exercise and mini game, the triggers you chose after a slip, your daily mood and craving strength, milestones seen and articles read
• Your chosen tone, notification preferences and a record of the consents you gave (with version and time)

Reminder notifications are scheduled on your phone by the app itself; no data is sent to a server for them. Notification permission is optional.

Information about your smoking habit and quitting process is special-category personal data (health data) under Article 6 of the KVKK. We process it only on the explicit consent you give when you first set up the app (KVKK Art. 6/2; GDPR Art. 9(2)(a)).

You can withdraw your consent at any time: Settings → Privacy and data → “Delete my data” erases the data on your phone and, if you have one, your account. Withdrawal does not affect processing carried out before it.

The health information in the app is general information, not medical advice. For medication and treatment, consult your doctor or the ALO 171 helpline.

If you create an account to back up your data, the following is held on the server:

• Your email address — for signing in. There is no password; a 6-digit code is emailed to you each time you sign in.
• A copy of the data listed above that is kept on your phone (tone and notification preferences, habits and prices, quit attempts, in-app records and your consent records)
• Security logs — the authentication provider keeps technical records such as the IP address and time of a sign-in, to prevent abuse

Legal basis: your explicit consent for health data (KVKK Art. 6/2), and providing the backup service you asked for in the case of your email address (KVKK Art. 5/2-c; GDPR Art. 6(1)(b)).

Account and backup data is hosted by Supabase; authentication and the database run on its servers in the Frankfurt (EU) region, Germany. Sign-in code emails are sent through Resend, which receives your email address for that purpose (USA). Your data is therefore processed outside Türkiye. This transfer rests on the explicit consent you give with a separate checkbox when creating an account (KVKK Art. 9). If you do not consent, no account is created and your data stays on your phone.

Supabase and Resend process the data only to provide these services, under their own data processing agreements.

Retention periods:

• Data on your phone: until you choose “Delete my data” or remove the app.
• Account and backup data: until you delete your account.
• Provider backups: deleted data may remain in backups for a while and is overwritten on the provider’s backup cycle.

Your data is not sold, rented or shared with third parties for their own purposes.

Supabase privacy information: https://supabase.com/privacy · Resend privacy information: https://resend.com/legal/privacy-policy

• Location, contacts, photos, camera, microphone
• The advertising identifier, or tracking across apps and websites
• Cigarette brand or product information
• Your name, phone number or financial information

The app requests no location, camera, microphone or contacts permission.

BIRAKAMAZSIN is not directed at children, and its store listing declares its audience accordingly. We do not knowingly collect data from anyone under 13.

If you believe a child under 13 has created an account, write to info@e2sstudio.com and the account will be deleted.

Inside the app: Settings → Privacy and data → “Delete my data”. It asks you to confirm twice. If you have an account, your account and all backed-up data on the server are deleted first, then the data on your phone.

Without the app: email info@e2sstudio.com from the address the account uses, with the subject “BIRAKAMAZSIN account deletion”. The account is deleted within 30 days at the latest.

What is deleted:

• Your account and your email address
• All backed-up data on the server: preferences, habits, quit attempts, in-app records and your consent records

The data on your phone is deleted when you delete it inside the app or remove the app; for a request made by email we have no access to your phone, so that part is up to you.

Under Article 11 of the KVKK and under the GDPR you have the right to learn whether your data is processed, to request information, to access your data, to have it corrected, exported or erased, to object to its processing, to withdraw your consent and to complain to a supervisory authority.

You can take a copy of your data from the app yourself: Settings → Privacy and data → “Download my data” (a JSON file).

For any other request, email info@e2sstudio.com with the subject “KVKK Application”; we will answer within 30 days at the latest.

Questions, bug reports and requests: info@e2sstudio.com · E²S Studio (Sole Proprietorship · Davutpaşa Tax Office · Tax ID: 7960782593)

If we update this policy, the effective date on this page changes with it. If the kinds of data collected change materially, we will say so inside the app as well.