Privacy Policy

Privacy Policy

POVL · How we handle your data
Last updated: October 23, 2026

In short

  1. Who we are
  2. Information we collect
  3. People you add
  4. How we use it and why
  5. What other users can see
  6. Service providers
  7. International transfers
  8. How long we keep data
  9. Deleting your account
  10. Your rights
  11. Age limits
  12. Security
  13. Permissions and tracking
  14. Automated reports
  15. This website
  16. Changes
  17. Contact

1. Who we are

POVL ("POVL", "we", "us") is an app made by Barış Altın, an individual developer based in Türkiye. We are the data controller for the personal data described in this policy.

Contact: hello@povl.app

This policy explains what we collect when you use the POVL iOS app and povl.app, why, who we share it with, and the rights you have under the EU and UK GDPR, the Turkish Personal Data Protection Law No. 6698 (KVKK) and other privacy laws that apply to you.

Entertainment, not diagnosis

POVL's analyses, archetypes and scores reflect the subjective ratings people enter. They are for entertainment and conversation. They are not psychological, medical or professional advice.


2. Information we collect

2.1 Account and profile

2.2 People you add, ratings and reports

The name or nickname you give a person, an optional photo, the relationship context you choose (for example friend, family or love), your trait ratings (1–20), your answers to discovery questions, and the reports POVL calculates from them. When you edit a person's details or ratings, we log the change together with the IP address and device information of that request.

2.3 Friends and invites

Your friend connections and requests, the analyses you send to and receive from friends and their status, shared streaks, related notifications, and the invite codes you create or use.

2.4 Credits, subscriptions and purchases

Your credit balance and a record of every credit change (amount, reason, time). For purchases: the store transaction ID, product, purchase and expiry dates, subscription status and refunds, which we receive from Apple through Adapty. We attach your POVL account ID to each App Store purchase so the purchase can be matched to your account. If a purchase or restore can't be confirmed, we record the account, the product, the time and the cause so we can fix it. We never receive your card or bank details.

2.5 Reports and blocks

When you report content or block someone: who reported or blocked whom, the content concerned, the reason and any note you add.

2.6 Notifications

Your in-app notification history and, if you allow notifications, your device's push token.

2.7 Device and app information

2.8 Information from others

2.9 What we don't collect

We don't ask for access to your location, contacts or microphone. We don't read your photo library beyond the photos you pick. We don't collect your advertising identifier (IDFA), health or biometric data, or payment card details, and we don't ask about political, religious or other special categories of data.


3. People you add who may not use POVL

POVL lets you add people you know and rate them. That means we store some information about people who may not use POVL themselves, such as a name or nickname, an optional photo and your ratings.

If you think someone has added you, write to hello@povl.app. We will help where we can, for example by removing a name or photo that is reported to us.


4. How we use information and our legal bases

PurposeLegal basis (GDPR · KVKK)
Providing POVL: accounts, people and reports, Friends, invites, notificationsContract · Art. 6(1)(b) GDPR, Art. 5(2)(c) KVKK
Purchases: credits, POVL Pro, restores and refundsContract; legal obligations where they apply · Art. 6(1)(b)–(c) GDPR, Art. 5(2)(c)–(ç) KVKK
Preventing abuse: repeated welcome credits, spam, account and server securityLegitimate interests · Art. 6(1)(f) GDPR, Art. 5(2)(f) KVKK
Safety: handling reports and blocksLegitimate interests; legal obligations where they apply
Reliability: version information, error and crash reports, push delivery results, connectivity checkLegitimate interests
Push notificationsYour permission in iOS, which you can withdraw at any time in Settings
Information about people who don't use POVL (section 3)Legitimate interests: providing the feature our users ask for, with the safeguards above
Support, legal requests and claimsLegitimate interests; legal obligations; establishing or defending legal claims · Art. 5(2)(e) KVKK

We collect this information electronically, through the app and this website. We don't use your data for advertising and we don't sell or "share" it for cross-context behavioral advertising.


5. What other users can see


6. Service providers

We use these providers to run POVL. Supabase, Adapty, Expo and Cloudflare process data on our behalf under their data processing terms. Apple, Google and DiceBear provide their services under their own privacy policies.

ProviderWhat for, and which dataLocation
Supabase
Privacy
Database, sign-in, file storage and server functions. Holds the app data in section 2.EU (Frankfurt, Germany). Some server functions may run in the region nearest you.
Adapty
Privacy
In-app purchase processing and subscription status: App Store transactions, product and price, store country, device data (such as IDFV, model and iOS version), IP address, and the POVL account ID your purchases are linked to.United States
Apple
Privacy
Sign in with Apple, App Store payments and refunds, push notification delivery, app distribution. We attach your POVL account ID to your App Store purchases (as the app account token), so Apple stores it with each transaction.United States and other countries
Google
Privacy
Sign in with Google, if you choose it. Connectivity check: while the app is open, it sends an empty request to www.google.com about every 30 seconds (every few seconds while you're offline) to tell whether you're online. Google receives your IP address and standard request information such as the user agent, but no account data.United States and other countries
DiceBear
Privacy
Placeholder avatars for people and accounts without a photo. To draw one, the app sends a name or ID: the name you gave a person, your own or a friend's display name, or a random account ID. DiceBear receives it together with your IP address and standard request information.EU (Germany). Images may be delivered through a content delivery network.
Expo (650 Industries)
Privacy
Push notification relay (push token and notification text) and app updates (IP address, device and app version information).United States
Cloudflare
Privacy
Hosting of povl.app, including this policy and invite links: IP address, browser information and the page requested.Global network

We may also disclose information when the law requires it, to protect people's safety, or to a successor if POVL is transferred. In a transfer, this policy keeps applying to your data and we will tell you in advance.


7. International transfers

We are based in Türkiye, and our providers process data in the EU, the United States and other countries.

You can ask us for a copy of the safeguards we use by writing to hello@povl.app.


8. How long we keep data

DataKept
Account, profile, people, ratings, reports, Friends, invites, achievements, streaks, notificationsUntil you delete them or your account
Guest account dataUntil it is deleted. It is linked to a random ID, not to your name or email.
Credit balance, credit history, purchase and subscription recordsUntil you delete your account. Your profile at Adapty is deleted at the same time. Apple keeps its own transaction records (see section 9).
Records of purchases or restores that couldn't be confirmed180 days, or until you delete your account
Device identifier linked to your accountUntil you delete your account. After that, only the device identifier, platform and claim date are kept, with no link to you, to block repeated welcome credits for as long as that offer exists.
Installation and version information180 days after the installation was last seen, or until you delete your account
Error and crash reports (diagnostics)90 days, or until you delete your account
Push delivery results30 days
Push tokenUntil you sign out, delete your account, or the token stops working
Reports about content or usersAs long as needed to review them and keep users safe; deleted when the reporting or reported account is deleted
Change logs with IP addressUntil the person they belong to, or your account, is deleted
Hosting providers' request logsA short period set by each provider
Safety copies made before database maintenanceDeleted within 30 days
Support emailsAs long as needed to handle your request

9. Deleting your account

Open the Profile tab and tap Delete My Account. Deletion happens right away and cannot be undone.

9.1 What is deleted

Your account and profile, profile photo and the photos you added for people, the people you added with their ratings, answers and reports, your Friends connections, requests and drafts, analyses between you and your friends, invites you sent, notifications, achievements, streaks, credit balance and credit history, purchase and subscription records, device identifiers linked to your account, installation and error records, and push delivery records. Your purchase profile at Adapty (purchase history and device data) is deleted automatically as well.

9.2 What remains

Subscriptions: deleting your account does not cancel a subscription. Apple keeps billing you until you cancel it in iPhone Settings → your name → Subscriptions.

If you used Sign in with Apple, you can also remove POVL from your Apple Account in iPhone Settings, under your name, in the Sign in with Apple section. For Google, use myaccount.google.com/connections.


10. Your rights

Depending on where you live, you have the right to:

10.1 How to use them

To protect your account, we may ask you to confirm the request from the email address you sign in with or from inside the app. We answer within 30 days and free of charge. If a request is complex, the GDPR allows us up to two more months; we will tell you if we need them.

10.2 Complaints

We would appreciate the chance to sort things out first, so please write to us.


11. Age limits

POVL is not meant for children under 13, and the App Store rates it 13+. If you are under 18, or under the age of majority where you live, you need permission from a parent or guardian. Where the law of your country sets a higher age for using online services without a parent's consent, that age applies.

If we learn that a child under 13 is using POVL, we delete the account. Parents or guardians can contact hello@povl.app.


12. Security

No system is perfectly secure, but we work to protect your data and review our security regularly.


13. Permissions, notifications and tracking


14. Automated reports

POVL turns ratings and answers into reports (patterns, scores, archetypes) automatically, using our own fixed rules on our servers and in the app. No person reviews them and nothing is sent to third-party AI services. These reports are for entertainment and have no legal or similarly significant effect on anyone.


15. This website

povl.app is hosted by Cloudflare and uses no cookies, analytics or advertising. Your browser may remember your language choice for these pages on your device. The invite page shows Apple's App Store badge, which your browser loads from Apple.


16. Changes to this policy

We will update this policy when our practices change and show the date at the top. If a change materially affects how we use your data, we will let you know in the app or on this website before it takes effect.


17. Contact

Barış Altın (POVL)
Email: hello@povl.app
Türkiye

This policy is available in English and Turkish.