Ödeme Planı is built on the principle that your financial data stays under your control. This document explains what data we collect when you use the app, how we store it, and the rights you have. In the free mobile version your financial records are kept on your device and are not sent to our servers; cloud features are only enabled with a premium subscription.

Data controller

The data controller is the developer who operates the Ödeme Planı app. For any questions or requests about your personal data, you can write to [email protected].

Data minimization

We only ask for the minimum data needed to provide the service. Your profile asks for a display name only; we do not collect additional identifying information such as your surname, city, or occupation. In the free version you do not need to create an account.

Free mobile version — data stays on your device

Your financial tracking records (incomes, fixed expenses, spending, debts, credit card tracking info, subscriptions, budgets, goals, assets) are stored in a local database (SQLite) on your device.
We do NOT collect real card numbers, CVV, or bank/payment instrument data. A credit card entry only contains what you type for tracking — card name, limit and balance. Premium payments are processed through Google Play; we never see or process your card details.
In the free version these records are not transmitted to our servers, and you do not need to create an account.
Reminders run as local notifications on your device; we do not send their contents to any server.
To show current exchange-rate, gold, and crypto values, your device makes requests directly to third-party services (Truncgil, CoinGecko, frankfurter.app / ECB). As a technical part of how the internet works, these requests reveal your device's IP address to the relevant service; your financial records are not included in them.

Premium (cloud) — data we collect

When a premium subscription enables cloud sync, web access, and family sharing, the following data is processed:

Account information (email, name, profile avatar).
The financial tracking records you sync to the cloud: incomes, fixed expenses, spending, debts, credit card tracking info (card name, limit, balance — not real card numbers), subscriptions, budgets, and goals.
An anonymous session identifier for guest (account-free) sessions on the web.

Storage and security

In the free version your data lives only on your device; it stays there until you delete it or remove the app.
In premium, the financial data you sync to the cloud is stored on encrypted servers in Europe (Frankfurt) and is private to you; other users cannot see it.
All connections are encrypted with HTTPS, and session cookies are kept secure.

Your rights

You can export your data as JSON or CSV.
You can delete all of your financial records with a single action.
In the free version your data is on your device, so removing the app removes your data entirely.
You can permanently delete your premium (cloud) account via Settings → Privacy → Delete my account.

Your statutory rights

Under applicable data-protection law (Türkiye's KVKK and, where it applies, the GDPR), you have the right to learn whether your personal data is being processed and to request information about it, to learn the purpose of processing, to have inaccurate or incomplete data corrected, to request erasure under the conditions set out in the law, and to claim compensation if you suffer damage due to unlawful processing. To exercise these rights, you can contact [email protected]. Because your financial records stay only on your device in the free version, you have direct control over those records.

Third-party services

We do not share the financial records you enter with third parties for advertising or marketing purposes. We use the following services to provide the app:

Google AdMob (free mobile version only) — shows banner ads. We serve ads in non-personalized (NPA) mode; AdMob does not access your financial records. When required, the app asks for consent through Google's consent framework (UMP). As part of how advertising works, limited data such as device identifiers may be processed.
RevenueCat — manages and verifies your premium subscription status. Payment is handled through Google Play; we never see your card details.
Supabase (premium cloud features only) — provides the authentication and database infrastructure for cloud sync, web access, and family sharing. Servers are located in Europe (Frankfurt).
Google OAuth (optional sign-in on the web) — only the basic profile information returned by Google (email, name, avatar) is read.
Exchange-rate / gold / crypto data services (Truncgil, CoinGecko, frankfurter.app / ECB) — used to display current market values. When your device connects to these services directly, its IP address is visible to the relevant service; your financial records are not shared.

Each service is subject to its own privacy policy. Because your financial records stay on your device in the free version, these services do not have access to that data.

Contact

For questions: [email protected]

Privacy Policy