Privacy policy

Last updated: 2026-10-03 · Türkçe

Data controller: the operator of Defter. Contact: kuratowskiapp+cari@gmail.com.

What data we collect

• What you write in your ledger: a customer's name, phone number, note, history entries (date and text) and the "private" flag.
• Account data: if you use our own address with a password, your username and a one-way hash of your password (the password itself is never stored). If you use the app inside the marketplace, only the pseudonymous ID the marketplace derives for this app; we never see your name, email or marketplace identity.
• Technical log: request method, path, status code and duration. Search text, form content and IP addresses are not logged. An IP address is kept in memory for at most 15 minutes, only to rate-limit failed sign-in attempts.
• The date you last used the app (so inactive accounts can be deleted).

How we collect it

• Only what you type on screen.
• We do not receive data from other apps through connections, and we do not send data to other apps.
• No behaviour tracking, analytics, advertising tools, third-party cookies or external fonts. The pages make no requests to outside servers.

What we use it for

• Only to show your ledger to you.
• We do not sell your data, use it for advertising, combine it with other users' data, use it to train AI models, or share it with anyone.

How we protect it

• Customer data is encrypted at rest (AES-256-GCM). Each user sees only their own records.
• Customers flagged "private" are never included in exports or backups.

Retention and deletion

• Your data is kept until you delete it.
• An account that is not opened for 24 months is deleted automatically with all of its data. The marketplace does not notify us when you uninstall the app, which is why we set this limit.
• You can delete everything at any time: inside the marketplace from Ayarlar → Tüm verimi sil (Settings, delete all my data), on our own address from Hesap → Hesabı sil (Account, delete account).
• To request deletion or a copy of your data, write to kuratowskiapp+cari@gmail.com. For marketplace users we verify you from inside the app; we never ask for your real identity.
• Backups (encrypted, private customers excluded) are kept for at most 30 days.