Privacy Policy

When you create an account and edit your profile we process:

• Your e-mail address and password. The password is never stored in plain text; only a one-way hash is kept.
• Your display name and username.
• If you add them: profile and cover photo, date of birth, phone number, social media links.
• Language, time zone, week start, appearance and notification preferences.
• If you start as a guest, a temporary account is created without an e-mail address.

Plans, categories, items, budget and spending amounts, notes, reminders, favorites and plans you save from Discover are stored in your account.

Your content is private by default. If you make a plan or your profile public, the parts you choose are visible to other users in Discover and on your profile page.

The photo library or camera is accessed only when you choose to add a photo, with the operating system’s permission. The app does not scan your library.

Uploaded photos are resized and converted to WebP on our server; EXIF metadata, including location, is removed. When the content a photo belongs to is deleted, the file is removed from storage.

• Session records: device type and name, device identifier, browser or app information (user agent), IP address and last-used time. You can review and sign out sessions in Settings → Security.
• Your device’s push notification token, if you allow notifications. You can revoke this permission at any time in your operating system settings.
• Your notification preferences and a record of preference changes.

To understand how the app is used, we record events on our own servers: event name, time, platform, app version, screen and a randomly generated anonymous identifier. If you are signed in, events are linked to your account.

We do not use third-party analytics or advertising SDKs. We do not collect advertising identifiers (IDFA/AAID), we do not track you across other apps or websites, and we do not sell your data.

To operate and secure the service, our servers log IP address, request time, requested address and error details. Passwords, tokens and similar secrets are masked before logging.

If error monitoring is enabled, technical details of a crash, such as the error message, screen and app version, are sent to that service; secret fields are stripped before sending.

• To create your account, store your content and sync it across your devices.
• For security: sign-in, e-mail verification codes, session management and abuse prevention.
• To send reminders and account notifications. Announcements and promotional messages are sent only if you separately opt in.
• To answer support requests and improve the service.
• To comply with legal obligations.

We share data only with infrastructure providers that help us run the service, and only as far as their task requires:

• Server, database and file storage providers.
• An e-mail delivery service for verification codes and notification e-mails.
• Push notifications: Expo (650 Industries, USA) together with Apple Push Notification Service and Google Firebase Cloud Messaging. Only the device token and notification content are sent to them.
• An error monitoring service (if enabled).
• Competent authorities, only when legally required.

The push notification infrastructure and some infrastructure providers are located outside Türkiye, so the device token, notification content and other data the service needs may be transferred abroad.

The list of providers, their locations and the legal basis for transfer under Article 9 of the Turkish Personal Data Protection Law (KVKK) will be added to this section before release.

In-app purchases are disabled in this version and no payment information is collected. When purchases become available, payments will be processed by Apple or Google; your card details will not reach us.

To resolve a support request or investigate a security issue, authorized team members may view your account in a limited way. This access is logged. Sensitive actions such as account deletion or password and e-mail changes cannot be performed during such access.

• Account and content data: for as long as your account exists.
• Plans, notes and reminders you delete are moved to Archive and permanently deleted after 60 days.
• Verification codes: valid for a short time (15 minutes by default) and invalid once used.
• Session records: until you sign out or the session expires.
• When you delete your account, account and content data are deleted immediately. See the Account Deletion page for details.

Account deletion

You can access, correct and delete your data, and object to its processing. Your full rights under KVKK are described in the KVKK Notice.

In the app: Settings → Privacy → Export My Data gives you a JSON copy of your data, and Settings → Account → Delete account deletes your account.

For any other request, write to tech@toostack.com.

KVKK Notice

We announce material changes in the app or by e-mail.