1. Scope and contact
This Privacy Policy applies to the Catly, AuraPen, ParAI, Scoryum, Talemoon, Prayer Focus, Bitkify, Almost: Countdown & Widgets, GymOver: Fitness Workout Tracker and Lilya: Home Pilates & Yoga mobile apps published by Berkay Öçgüder. Read the common sections together with the relevant app-specific entry in Appendix A. The app entry controls if it differs from a common section.
The person responsible for processing personal data is Berkay Öçgüder. Appsium is a Google Play publisher name, not a separate legal entity. Contact and privacy requests: support@appsium.co. This policy covers the mobile apps; visitor data and cookies on appsium.co should be addressed in a separate website policy where applicable.
2. Categories of information we process
Depending on the app and features you use, we may process:
- Account and authentication information: In most apps, an anonymous user ID created by Firebase Authentication and account data required to provide the service. In Talemoon, authentication information and account details shared through your chosen email, Google or Apple sign-in method. An anonymous account does not mean that no personal data is processed.
- Content you save: Notes, records, preferences, images, programs, stories, financial entries, scores and other content you create or upload. Appendix A describes the app-specific content. Depending on the app, it may be stored in Firebase Firestore or Cloud Storage and processed through Cloud Functions.
- Inputs for AI features: Text, selected options, audio or images needed when you choose to use a relevant feature. Appendix A identifies the types for each app. Only data needed for the feature is sent to the OpenAI API. AI responses are not kept as a separate AI-response history; content you expressly save may be stored as an app record.
- Technical and usage information: Technical records needed to operate and protect the service and resolve issues. AuraPen, ParAI, GymOver and Lilya process usage events through Firebase Analytics, as described in Appendix A.
- Purchase information: Product, transaction-verification and entitlement details supplied by Apple or Google as needed to enable purchases or subscriptions. We do not receive or store your payment card number or payment method details.
- Communications: Your email address, message and any information you provide when contacting support.
Access to the camera, microphone, photo library, calendar or health data is requested through operating-system permissions only when the feature needs it. Granting a device permission does not by itself mean that all accessible data is uploaded; the relevant app appendix and in-app notice describe what is processed.
3. Sources, purposes and legal bases
We receive information from you, your device and the sign-in or purchase providers you choose. We use it to create accounts, provide requested features, save and delete content, verify purchases, provide support, protect the service and resolve technical issues. In apps with Analytics, we assess usage trends to improve the product. We do not collect data for advertising targeting or sell personal data to advertisers.
Depending on the law that applies to you, our legal bases may include performance of a contract for requested services; legitimate interests in security, troubleshooting and proportionate improvement, balanced against your rights; legal obligations for required records and requests; and separate consent or explicit consent where required for permissions, particular analytics activities or sensitive information. You may withdraw consent where processing relies on it. Reading this policy or using an app does not replace a separate consent request. Additional rules apply to sensitive information such as religious beliefs or health data.
4. AI processing and service providers
- Google Firebase supplies authentication, Firestore, Cloud Storage and Cloud Functions, and Analytics only for apps identified in Appendix A.
- OpenAI processes the inputs sent to it to provide a requested AI feature. Sending occurs when you start that feature. Depending on the app, the input may be free text, predefined options, audio or an image. The relevant transfer is explained in the app before the feature is used and any consent required by law or store rules is obtained.
- Apple and Google provide app-store, purchase and selected sign-in services. They process payment information under their own policies.
We may disclose information to these providers as needed to deliver and secure the service and verify purchases. We do not claim that there is no third-party processing. Our decision not to maintain a separate AI-response history does not determine a provider's own security or operational retention. Provider input retention and model-training terms may depend on the API product and account settings; we do not make an unverified promise of zero retention or zero training. We may disclose necessary information to authorities where legally required or pursuant to a valid legal request.
5. International transfers
The apps are available worldwide. Google Firebase, OpenAI, and store or sign-in providers may process information outside your country. We assess the legal bases, agreements and safeguards required by applicable Turkish, European and other local transfer rules. This policy does not itself replace any separate consent or agreement required for a transfer.
6. Retention and deletion
We keep your app content while needed to provide the service, until you delete it or your account. In most apps you can delete content and your account within the app; where an app does not offer this, Appendix A explains how to request deletion. Account deletion removes the related Firebase Authentication account and associated content in Firestore and Cloud Storage. In apps that keep your content only on your device, such as Almost, we hold no copy of it: deleting it in the app or uninstalling the app removes it. Uninstalling the app does not automatically remove a cloud account or cancel an app-store subscription. Store purchase records and legally required records may be subject to separate retention rules.
Technical logs, Analytics events, security records and backups may have different retention periods under the relevant system settings and legal requirements. We handle deletion requests subject to applicable rights and obligations. Aggregated information that can no longer be linked to you may be used outside the scope of personal data.
7. Security
We seek to protect information through access controls, secure connections, restricted permissions and appropriate technical and organizational measures. No electronic storage or transmission method can be guaranteed absolutely secure. We respond to security incidents under applicable notification requirements.
8. Your rights
Depending on where you live, you may have rights to access, information, correction, deletion, restriction, portability, objection, withdrawal of consent and complaint to a data protection authority. Rights under Article 11 of Türkiye's Personal Data Protection Law apply where their conditions are met. Email support@appsium.co to exercise your rights. You can also delete app content and your account in the app. We may need to verify your connection to the account before acting to protect your information. Local law determines the process and response time. Rights may be subject to lawful exceptions and retention duties.
9. Children
Talemoon is a story app intended for children and managed by an adult; its practices are explained in Appendix A. Store age ratings and local age/consent rules apply if another app is used by a child. In Talemoon's flow, which does not request children's personal details, please do not send us children's information through free-form support channels. If we become aware of such information, we will assess appropriate deletion and protection steps. Children's privacy requests: support@appsium.co.
10. Changes
We may update this policy when our apps or applicable requirements change. We will show the revised date here and communicate material changes appropriately. An update to this policy does not retroactively replace consent for a new processing purpose.
Appendix A — App-specific information
Catly Panic & Stress Relief
Stress/panic sessions, preferences and content you save may be stored in Firebase. If you use an AI feature, the relevant text input is sent to OpenAI. Free text about mental wellbeing may contain sensitive information; the feature notice and required permission should address this. AI responses are not kept in a separate response history.
AuraPen AI Voice Notes
Your audio recordings, transcripts, notes and tags may be stored in Firebase depending on the feature used. Selected note or transcript text is sent to OpenAI for AI functions; the app obtains separate explicit permission for this transfer. Firebase Analytics is used. If another cloud provider transcribes audio, its name and the data it receives must also be disclosed here.
ParAI Income & Expense Tracker
Your income, expenses, accounts, card, debt/receivable and other financial tracking records and uploaded images may be stored in Firebase. AI entry may process audio, images or text and send the necessary input to the AI provider. Any separate transcription or OCR provider must also be disclosed. Firebase Analytics is used. AI responses are not separately stored; financial records you approve and save are stored in your account.
Scoryum Sports Score Tracker
Matches, scores, sport preferences and related performance data you save may be stored in Firebase. If heart rate, calories, steps, distance or workout data is read from or written to Apple Watch or Apple Health, this entry must specify exactly what stays on the device and what is transferred to Firebase. Health and activity data is not used for ad targeting.
Talemoon Kids Bedtime Stories
Talemoon is a children's story app managed by a parent or other adult. The adult may sign in with email, Google or Apple; we process the account details shared by the selected provider. For story generation, only adult-selected standard options such as story type, character/theme and language are sent to the AI service. The app does not request a child's name, age, photo, voice or child-specific free text. AI responses are not separately stored; stories the adult chooses to save may be stored in Firebase as account content. Purchases and external links are behind a parental gate. We have not identified ad-data collection or Analytics use in Talemoon. The actual SDK/device-identifier transfers and any required parental permissions must still be verified for Kids category and child-privacy rules; publishing this policy alone does not meet those obligations.
Prayer Focus Daily Prayer
Your religion or belief selection, preferences and saved prayer content may be stored in Firebase and may be sensitive. The text input needed for an AI feature is sent to OpenAI. The app should separately explain whether belief selection or personal prayer text is included in an AI request and obtain separate explicit consent where required. AI responses are not separately stored.
Bitkify Plant & Flower Care
Plant records, care preferences and plant photos you add may be stored in Firebase. A selected image is sent to OpenAI for analysis; the AI response is not separately stored. Images may incidentally show people, homes or location clues. The app must clearly explain this transfer and obtain required permission before submission.
Almost Countdown & Widgets
Almost counts down to future dates you add, such as a trip or an anniversary, and shows them in the app and in home-screen widgets. Your countdowns, dates, titles and preferences are stored only on your device; widgets read them from the app's on-device storage. The app does not require an account and does not use Firebase Analytics or any other analytics or advertising SDKs.
Calendar: If you allow calendar access, the app reads events from your device calendar to show how busy your days are and so you can turn them into countdowns. It does not add to or change your calendar. Calendar data is processed only on your device and is never sent to us or to an AI provider. You can withdraw access at any time in your device settings.
AI motivation (Almost+): If you have an Almost+ subscription, the app creates personalised motivational messages. For each message, the countdown's title, the number of days and workdays left, your chosen message style, the day of the week and the app language are sent through Google Firebase Cloud Functions to the OpenAI API. No name, account, device identifier or calendar data is sent. We do not store these requests or the generated messages on our servers; generated messages are kept only on your device. OpenAI may retain API inputs for a limited period for abuse monitoring under its own terms. Without Almost+, the app shows built-in messages and sends no countdown data. As with any network request, the delivering service may process technical information such as your IP address.
Purchases: Almost+ subscriptions are processed by Apple. The app checks your subscription status on your device through Apple's StoreKit; we do not receive your payment details.
GymOver Fitness Workout Tracker
GymOver creates training programs and records your workouts, progress, meals and body measurements. The app uses an anonymous Firebase account; no name, email or password is required. Your profile (optional display name, goal, experience, training days and session length, equipment, age, height, weight, biological sex, focus muscles and excluded exercises), programs, workout sessions, exercise progress, custom exercises, body measurements, food entries, daily challenges and nutrition plans are stored in Google Firebase (Firestore) under that account, with an offline copy on your device. Exercise videos are downloaded from Firebase Storage. Firebase App Check helps protect the service from abuse.
Apple Health: If you allow it, the iPhone app reads sleep, steps, active and resting energy, walking and running distance, exercise and stand time, and heart rate and resting heart rate from Apple Health. To show your activity and recovery history, daily totals for completed days (steps, energy, exercise and stand minutes, distance, and sleep start, end, duration and stages) are stored in your Firestore account; individual Health samples are not uploaded. A workout's average, minimum and maximum heart rate may be saved with that workout. The Apple Watch app reads heart rate and energy while a workout is running and saves the workout to Apple Health. Health data is never used for advertising and is not sent to an AI provider except as described below. You can change Health permissions at any time in the Health app or device settings.
AI meal estimates and nutrition plan (Pro): When you estimate a meal, the text you type or dictate (or a meal photo you take or choose) and the app language are sent through Google Firebase Cloud Functions to the OpenAI API to estimate calories and macronutrients. The photo is reduced in size before sending and is not stored by us; only the entry you accept is saved to your food log. Dictation uses Apple's speech recognition, on your device where your language supports it and otherwise through Apple's servers; only the resulting text is sent, never audio. To create a daily nutrition target, your age, height, weight, biological sex, goal, experience, training days per week and average daily steps and active energy are sent the same way, and the resulting plan is saved in your account. No name, email or account identifier is sent to OpenAI. OpenAI may retain API inputs for a limited period for abuse monitoring under its own terms.
Widgets, Watch and Live Activities: Home-screen widgets and Live Activities show summaries such as your activity streak, today's calories and macros and the current exercise and rest timer; they read them from storage shared on your device. The Apple Watch app exchanges workout data with your iPhone over a direct connection.
Analytics, music and feedback: GymOver uses Firebase Analytics to understand onboarding, paywall and purchase steps and exercise-video plays; your workout, health and meal details are not sent as analytics events, and no advertising or tracking SDKs are used. If you connect Spotify, the app only controls playback in the Spotify app and the access token is kept in memory. If you send feedback, we receive your rating and message, any name or email you add, and the app and iOS version.
Purchases and deletion: Pro subscriptions and the lifetime purchase are processed by Apple and checked on your device through StoreKit; we do not receive your payment details. "Delete data" in Profile deletes your Firestore records and Firebase account and clears the widgets. Feedback you have sent is kept separately; email us to have it removed. Data in Apple Health stays there and is managed in the Health app. GymOver is intended for users aged 13 and over.
Lilya Home Pilates & Yoga
Lilya recommends a Pilates and yoga program based on your answers and records the sessions you complete. The app uses an anonymous Firebase account; no email or password is required. Your onboarding answers are stored in Google Firebase (Firestore) under that account: your name, age group, goals and focus areas, health situation (for example injury or recovery, pregnancy or trying to conceive, postpartum or menopause), areas to avoid, activity level, optional weight, fitness level and experience, and workout preferences. Your program progress, favourites and completed sessions are stored there too. Health-related answers are sensitive information; they are used only to tailor your program, are not sent to analytics or an AI provider, and are never used for advertising. Weight is used only to estimate calories burned.
Photo, camera and notifications: You can add a profile photo by taking a selfie or choosing a photo; it is uploaded to Firebase Cloud Storage and is accessible only to your account. If you turn on reminders, the app schedules a daily local notification on your device that may include your name. Exercise videos are downloaded from Firebase Storage and cached on your device; you can clear them in the app.
Analytics and purchases: Lilya uses Firebase Analytics to understand onboarding, paywall and purchase steps, including subscription transaction details such as product, price, currency and trial status; your answers are not included. No advertising or tracking SDKs are used, and the app has no AI features. Lilya Premium subscriptions and the lifetime purchase are processed by Apple and checked on your device through StoreKit; we do not receive your payment details.
Deletion: You can leave a program in the app. To delete your account, answers, workout history and profile photos, email support@appsium.co.