Privacy Policy

Last updated: 10 Ekim 2026 · Publisher: Emirhan Arslan · Contact: emirhanarslan5588@gmail.com

In short: Pusula shows no ads, does not track you and does not sell your data. If you create an account, your data is stored on our server. Direct and group messages are end-to-end encrypted and we cannot read them.

1. What data do we process?

Account: email address, password (only as an irreversible hash), optional display name.
App data: tasks, notes, cash records, goals, habits, settings. Synced with your account; if you do not create an account it stays on your device only.
Pusula Medya: your username, profile, posts, stories, marketplace listings (title, description, price, city, photo; public), likes/comments, follow and block information, photos/videos you upload, and, if you turn on appointment booking, your booking settings (working hours, services) and booking requests (date and time, chosen service, note; visible to both the person booking and the owner).
Messages: direct and group messages and their media are end-to-end encrypted with keys generated on your device. The server stores only encrypted data and public keys. Your decryption key exists only on your device; if you delete the app or lose the device, old messages cannot be recovered. If you turn on disappearing messages in a chat, messages sent afterwards are deleted from the server when the time you chose runs out; copies the other person saved or screenshotted are not affected.
Technical data: IP address and request logs are kept for a short time for rate limiting and security.
Subscription: If you buy Pusula Pro through Google Play, Google sends us your subscription status and purchase token; your card or payment details never reach us. The subscription record (status, end date, token) is stored with your account.

2. AI assistant

When you use the assistant, your message and the context needed to answer (tasks, notes, cash summary, goals, etc.) are sent through our server to the AI provider (currently Google Gemini) after your explicit consent. Providers on free tiers may use submitted data to improve their service, so do not enter ID numbers, passwords, health or other sensitive information. Only when you ask the assistant about your messages (for example "what is in my inbox"), short previews of recent messages are decrypted on your device and sent to the AI provider.

3. Backups

Server data may be backed up, encrypted, to a private repository. Backups exist only to restore the server after a disaster.

4. Optional Google connection

If you connect Google Calendar and Gmail, we use only the scopes you authorize, to read and add calendar events and to create email drafts. The assistant does not send email. You can remove the connection at any time in Settings or in your Google account. Our use of Google data complies with the Limited Use requirements of the Google API Services User Data Policy.

5. Sharing and third parties

We do not sell your data. To run the service we use: server hosting (Render), media storage (Cloudflare R2), AI (Google) and email delivery (for verification and password reset). Media links are served only through the app. Pro subscription payments are processed by Google Play.

6. Reports and safety

When you report content or a message, the reported content (including, for an end-to-end encrypted message, the evidence your device attaches) is reviewed by us. We have no access to messages you do not report. We may restrict or close accounts that break the rules. Posts that receive reports from several different people may be hidden automatically until we review them.

7. Retention and deletion

You can delete your account in Settings → Delete account, or by following the steps on the account deletion page. When you do, your profile, posts, stories, messages, uploaded media and app data are permanently removed from the server. Copies in technical backups disappear within 30 days at the latest.

8. Your rights

You have the right to access, correct, delete, port and object to the processing of your data (under GDPR, UK GDPR, CCPA/CPRA, KVKK and similar laws, where they apply). You can use the export and deletion tools in the app, or write to emirhanarslan5588@gmail.com. If you are in the EU/EEA or UK you may also lodge a complaint with your local data protection authority. Data is processed on servers that may be located outside your country; by using the service you understand your data may be transferred internationally.

9. Children

Pusula is not directed to children under 13 (or the higher minimum age in your country, for example 16 in some EU countries) and we do not knowingly collect their data. You must meet the minimum age to use Pusula Medya.

10. Changes

This policy may be updated; the current version is published on this page. We will notify you in the app about important changes.