PRIVACY POLICY

Thank you for using the Nüans application. Your privacy is of paramount importance to us. This Privacy Policy explains what personal data is collected, how it is used, processed, and protected when you use our services.

1. COLLECTED DATA

1.1 Account Information

• Email address: Used for secure authentication, identity verification, and account management.
• First and Last Name: Used to personalize your user profile and address you appropriately.
• Google account information: If you choose to log in via Google, we access basic profile details permitted by your Google settings.

1.2 Usage Data

• Dhikr count and history: Stored to help you track your personal spiritual progress.
• Chat history: Stored to facilitate your interactions with the AI Spiritual Counseling assistant and the Divine Word (Quran Chat) room.
• Dream interpretation records: Used to provide and display your AI-powered dream analyses.
• Mood check (Ahval-i Ruhiye) data: Used to track your emotional well-being over time and suggest personalized spiritual recommendations.
• Prayer time preferences: Saved to manage notification schedules and adhan reminders.
• Memorization Cards & Holy Quran progress: Saved to track your surah/dua memorization status, spaced repetition metrics, and reading/listening history.
• Prayer Book (Library) Records: Used to provide AI-powered personalized prayer recommendations, save favorite prayers to your Heybe, and track Tasbih integrations.
• Community Hatim & Hearts Circles Data: Completed Juz slots, Hatim circles joined, custom intention titles created, and community interactions.
• Global Live Dhikr Gatherings: Aggregated anonymous dhikr contributions submitted during synchronous live gatherings and invitation notification preferences.
• Qaza Tracking Data: Calculated missed prayer and fast records, daily completed Qaza logs, and personal Qaza targets.
• Intention Journey & Reflection Logs: Your selected 7-day spiritual intention theme, initial intention statement, daily completed steps, and personal reflection / closing notes recorded in your Journey Notebook.
• Friday Sermon: A record that you marked the week's good deed as completed, and the points you earned.

1.3 Location Data (Qibla Compass & Live Noor Map)

We request permission to access your device's approximate location solely to calculate the precise direction of the Qibla and to display anonymized city-level spiritual participation indicators on the Live Noor Map. Your exact GPS coordinates are NEVER stored on our servers; on the map, indicators are fuzzed by 1-2 km at the city level and are NEVER shared with third parties.

1.4 Technical Data

• Device Information: Collected to ensure application performance, stability, and compatibility.
• Notification Preferences & Device Tokens (FCM): Your device token is securely collected to deliver push notifications, automated reminders, and local intention journey reminders.
• Usage statistics: Aggregated and processed anonymously using Firebase Analytics.
• Crash logs: Technical performance reports collected via Firebase Crashlytics to fix errors.

2. USE OF DATA

Your data is processed strictly for the following purposes:

• To deliver, maintain, and improve core application features.
• To offer personalized spiritual insights, reminders, and recommendations.
• To optimize application stability, resolve technical issues, and improve UI/UX.
• To send transactional and scheduled notifications (strictly based on your settings and consent).
• We NEVER use your personal data for advertising or third-party marketing campaigns.
• We NEVER sell, lease, or share your personal identity data with third-party advertisers or brokers. However, to provide free usage credits via rewarded videos, third-party advertising networks (e.g., Google AdMob) may collect and process anonymous advertising identifiers and IP addresses to serve ads.

3. DATA STORAGE

3.1 Cloud Storage

Your personal data is securely saved in the Supabase (PostgreSQL) secure cloud database. Our servers are hosted in high-security European data centers. Data access is protected by strict authorization rules and secure encrypted channels.

3.2 On-Device Storage

For offline compatibility, essential tracking values (such as zikir counts, vibration/haptic preferences, last read surah, and current level progress) are cached locally on your device. This local storage is sandbox-isolated and cannot be accessed by other applications.

3.3 Data Retention

Your data is kept in our systems as long as your account is active. However, if your account remains completely inactive for a continuous period of 2 years, your personal data may be automatically anonymized or permanently deleted in accordance with security and data minimization principles.

3.4 International Data Transfers

To provide the app, your data is processed on servers of our service providers located outside Turkey: Supabase (European data centers), Google (Firebase, Gemini API, Google Sign-In, AdMob), RevenueCat and the Apple App Store / Google Play payment systems. These providers' servers may be located abroad, mainly in European Union countries and the United States.

These transfers are carried out under Article 9 of the Turkish Personal Data Protection Law (KVKK No. 6698) and applicable data protection laws, based on appropriate safeguards such as standard contractual clauses with service providers or on your explicit consent, only for the purposes described in this policy and with the necessary security measures.

You may withdraw your explicit consent at any time by writing to nuansapp.official@gmail.com; in that case some parts of the service may not be available.

4. THIRD-PARTY SERVICES

4.1 Firebase (Google)

• Analytics: Anonymous usage analytics and behavioral events.
• Crashlytics: Technical reports on app crashes and internal errors.
• Google Privacy Policy: https://policies.google.com/privacy

4.2 Google Authentication

Used to provide secure and instant sign-in. Access is strictly limited to email and basic public profile details.

4.3 RevenueCat

Used to handle premium entitlements and in-app subscription status. Your actual billing and financial transactions are securely processed directly by Apple App Store or Google Play Store. We never see or store your credit card or payment information.

4.4 Background Jobs & Notifications (Hangfire & Firebase FCM)

We utilize server-side scheduled tasks (Hangfire) to send you automated reminders, such as Holy Day surprises, Weekly Summaries, or retention messages, even when the app is closed. Firebase Cloud Messaging (FCM) is utilized to securely and swiftly deliver these push notifications to your device.

4.5 Artificial Intelligence Provider (Google Gemini API)

To power features like the Spiritual Counselor chatbot, Divine Word (Quran Chat), dream interpretations, Prayer Book recommendations, Ahval-i Ruhiye (Mood Check) and Friday Sermon summaries, the relevant text is securely and momentarily transmitted to Google's Gemini API service (Google LLC). We use the Gemini API under its paid (billed) service terms. Under these terms, Google DOES NOT use the submitted data to train its artificial intelligence models. Your data is processed only to generate a response for you and to keep the service secure. Gemini API Terms

4.6 Mapping & Location Services (CARTO, OpenStreetMap & Overpass API)

For the "Nearest Mosques" and "Live Noor Map" features, licensed raster map tiles and geographical places of worship data are provided via CARTO (CartoDB), OpenStreetMap, and Overpass API. No personal identity data is transmitted to map providers; requests are processed strictly to render anonymized map tiles. Your location coordinates are never stored on our servers and are used solely in real-time to display nearby mosques and city-level indicators on the map.

5. USER RIGHTS (GDPR / KVKK Compliance)

Under applicable data protection laws (such as GDPR in Europe), you hold the following rights:

• Right to Access: You can request details of the personal data we process.
• Right to Rectification: You can ask us to correct incomplete or inaccurate data.
• Right to Erasure (Right to be Forgotten): You can request the permanent removal of your data.
• Right to Portability: You can request to export your personal data in a structured format.
• Right to Object: You can object to processing based on specific legitimate grounds.

To exercise these rights or request immediate account deletion, contact us at: nuansapp.official@gmail.com

6. DATA SECURITY

We employ industry-standard protocols to protect your data, including:

• End-to-end SSL/TLS encryption for all network requests.
• Secure, permissioned database security rules.
• Cryptographically hashed password storage using bcrypt.
• Continuous security updates and system monitoring.

7. CHILDREN'S PRIVACY

Our application is not intentionally directed towards children under the age of 13. Users under 13 must operate the app only under parental supervision and consent.

8. ACCOUNT DELETION

You can delete your account and all associated records permanently at any time by navigating to:

Settings → Danger Zone → Delete My Account

This action is permanent and irreversible. The following data will be immediately and completely wiped from our Supabase servers:

• All Dhikr tracking logs and custom Dhikr definitions.
• AI chat histories and dream interpretation logs.
• Points, levels, rankings, and earned badges.
• Personal profile information.
• Intention Journey logs, daily steps, and personal Journey Notebook entries.

9. CHANGES TO THIS POLICY

• We will notify you via an in-app prompt or email when updates are made to this policy.
• Continued use of the application following updates constitutes acceptance of the revised policy.

10. CONTACT INFO

For questions, requests, or privacy concerns, please contact:

• 📧 Email: nuansapp.official@gmail.com
• 📱 In-App Support: Profile → Contact Us

Data Controller:
Nüans App Team
Istanbul, Turkey