Privacy Policy
Short version: Puchika keeps your wins so it can show them back to you. No ads, no trackers, no selling your data. We only count visits, anonymously.
1. Who is responsible
The data controller is İdil Özdemir, sole proprietor, Türkiye, who makes and runs Puchika (puchika.app). For any privacy question or request, email hello@puchika.app.
2. What we collect and why
| Data | Why |
|---|---|
| Account: your email address and password (stored only in scrambled, hashed form by our sign-in provider) | So you can sign in and see the same data on every device |
| What you put in Puchika: your wins, notebook pages, to-dos, your pet's state, the names you type, your settings, your points and unlocked items | This is the app itself: we store it so it's there next time |
| Purchases: what you bought, when, and the email address used at checkout. Paddle handles your payment details; we never see your card number | To add points to your account, handle refunds and keep the records the law requires |
| Technical data: IP address, browser and device type, and basic logs, processed by our hosting and sign-in providers | To deliver the site, keep accounts secure and prevent abuse |
| Anonymous visit counts: once a day, the site adds 1 to a few totals: a visit, the day your browser first came, where that first visit came from (for example Instagram), and whether you marked a win, opened the store, signed up or bought points. It sends no account, name, email or ID, and we only keep the daily totals | To know how many people use Puchika and come back, so we can make it better |
| Emails you send us | To answer you |
Without an account, Puchika keeps your data only in your own browser (local storage) and sends none of it to us.
Our legal bases are: providing the service you asked for (your account, your data and purchases), our legitimate interest in keeping Puchika secure, and legal obligations (purchase records).
3. Who helps us run Puchika
- Google Firebase (Google LLC / Google Ireland): sign-in, database and hosting. Your Puchika data is stored in Google's European data centres; sign-in data may be processed in the United States.
- Paddle.com (Paddle.com Market Ltd, UK): our reseller and Merchant of Record. Paddle processes your payment and billing details under its own privacy policy.
- Cloudflare: our domain name service, and forwarding of emails sent to hello@puchika.app.
- Google Fonts: the site's fonts are loaded from Google, which receives your IP address when they load.
- Authorities, if the law requires us to share data.
We don't sell your data, show ads or use third-party analytics or advertising trackers. Some of these providers are outside Türkiye and the EEA/UK; they protect transfers with safeguards such as the European Commission's Standard Contractual Clauses.
4. Cookies and local storage
Puchika doesn't use cookies for advertising or analytics. It uses your browser's local storage to remember your settings and keep a copy of your data for offline use, and our sign-in provider stores what it needs to keep you signed in. These are strictly necessary for the app to work.
For the anonymous visit counts, local storage also remembers the day your browser first came and what it has already counted today, so nothing is counted twice. This never leaves your device. If your browser sends a "do not track" signal (Global Privacy Control or Do Not Track), nothing is counted at all.
5. How long we keep it
- Your account data: until you delete your account. Ask us at hello@puchika.app and we'll delete your account and everything in it within 30 days.
- Purchase records: as long as tax and accounting law requires (usually up to 10 years).
- Emails: as long as needed to help you, then deleted.
- Anonymous visit totals: kept as long as useful. They can't be linked to you.
6. Your rights
You can ask to see, correct, export or delete your data, object to or restrict how we use it, and withdraw any consent. You can export your data yourself any time under Settings → Backup & transfer. Email hello@puchika.app and we'll answer within 30 days. You can also complain to your data protection authority: in Türkiye, the KVKK (Personal Data Protection Authority); in the EEA or UK, your local regulator.
7. Security
Data travels over HTTPS, and our database rules let each person read and write only their own data. No system is perfect, but we take reasonable steps to protect your information and will tell you if something goes wrong that affects you.
8. Children
Puchika is not meant for children under 13, and we don't knowingly collect their data. If you think a child under 13 has made an account, email us and we'll delete it.
9. Changes
If we change this policy, we'll update the date above, and for important changes we'll let you know in the app.