Your inner life
stays yours.

Summary

• We collect only what's needed to make Serenova work for you.
• We do not sell your data, ever.
• We do not track you across other apps or websites — Serenova never asks for App Tracking Transparency permission.
• We do not use your data to train AI models.
• You can export or delete everything from inside the app at any time.

1. Data We Collect

We collect only what's necessary to operate the Service.

Account data

• Email address and a unique account identifier (when you sign in with email or with Apple).
• Optional profile data: display name, language preference, time zone.

Content you create in the app

• Affirmations you favourite or activate.
• Mood entries and notes you log.
• Breathing sessions you complete.
• Psychological test answers and results.
• Reminder times and notification preferences.
• Theme, font, and ambient sound preferences.

Subscription data

• Whether you are on Free or Plus, the plan type, renewal date, and the platform (Apple).
• We do not receive your card number, billing address, or banking information — Apple processes and stores all payment data.

Diagnostic data

• App version, OS version, device model, locale.
• Anonymous usage events (e.g. "opened breathing screen", "completed activation") — used only to understand which features matter and to fix bugs.
• Crash reports — automatically generated stack traces with no personal data attached.

2. Data We Do Not Collect

• Contacts, photos, microphone, or camera data.
• Precise or coarse location.
• Keystrokes, browsing history, or content from other apps.
• Health Kit data — Serenova does not integrate with HealthKit.
• Biometric data, voice recordings, or facial features.
• Advertising identifiers (IDFA, IDFV for tracking purposes).

3. How We Use Data

• Provide the Service. Show your affirmations, save your favourites, sync your mood log across devices, deliver reminders, run breathing timers and tests.
• Sync. Keep your data consistent across the devices where you sign in.
• Subscriptions. Apply your Plus benefits and respect free trial periods.
• Stability. Diagnose crashes and improve performance.
• Service messages. Password resets, important updates to these terms, security notices. We do not send marketing emails unless you have explicitly opted in.

We do not use your personal data to build advertising profiles, sell to third parties, or train machine-learning models.

4. Tracking & Advertising

Serenova does not display third-party advertisements and does not embed any advertising SDKs. Because we do not track you across apps and websites owned by other companies, the iOS App Tracking Transparency (ATT) prompt is not shown.

Apple's Privacy Nutrition Labels for our app declare: "Data Not Linked to You" for diagnostics, and "Data Linked to You" only for the account data and content you create — used solely to operate the Service, never for tracking.

5. Sharing & Third-Party Processors

We share data only with the following sub-processors, strictly to operate the Service:

• Apple Inc. — Sign in with Apple, In-App Purchases, push delivery, App Store distribution.
• Supabase Inc. — Database, authentication, file storage. Hosted on AWS infrastructure.
• RevenueCat Inc. — Subscription state management. Receives anonymous user identifier and subscription status.
• Functional Software, Inc. (Sentry) — Anonymous crash reporting.

Each processor is contractually bound to use your data only as instructed by us, with security and confidentiality obligations equivalent to those described in this policy. We do not share your data with advertisers, data brokers, social platforms, or analytics resellers.

6. Storage & Security

Your data is stored in Supabase databases hosted on AWS in the European Union and United States regions. Data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Access is restricted to a small number of authorised engineers on a need-to-know basis and is logged.

Authentication uses signed JSON Web Tokens with short lifetimes and rotation of refresh tokens. Passwords (where applicable) are stored hashed with bcrypt or Argon2. We perform regular dependency and security reviews.

7. Retention & Deletion

• Active accounts. Your data is retained for as long as your account exists.
• Account deletion. When you delete your account, your personal data and content are permanently erased from production systems within 30 days. Encrypted backups are rotated out within 90 days.
• Inactive accounts. Accounts with no sign-in for 24 consecutive months may be deleted after we send a notice email and a 30-day grace period.
• Crash diagnostics. Sentry retains anonymous crash data for up to 90 days.
• Legal holds. We may retain limited records longer if required by law (e.g., tax, fraud prevention).

8. Your Rights

You can do all of this from within the app, or by emailing us:

• Access. Request a copy of all your data — we provide a JSON export.
• Correct. Edit any entry inside the app, or ask us.
• Delete. Profile → Account → Delete Account (or email us). Permanent.
• Restrict. Withdraw consent for analytics: Profile → Privacy → Diagnostics.
• Object / Opt-out. Stop receiving service emails by replying or in Profile → Notifications.
• Portability. Your JSON export is in a portable, machine-readable format.
• Lodge a complaint. You may complain to your local data-protection authority.

9. Children's Privacy

Serenova is rated 9+ on the App Store and is not directed to children under 13. We do not knowingly collect personal data from children under 13 (or under 16 in the EEA, where local law applies a higher age). If you are a parent or guardian and believe your child has provided us with personal data, please write to support@getserenova.app and we will delete it promptly.

10. International Transfers

Serenova is operated from Türkiye. Your data may be transferred to and processed in the European Union, the United Kingdom, Türkiye, and the United States. Where required by law, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and equivalent UK addenda for transfers outside the EEA / UK.

11. Regional Rights (EEA, UK, California)

European Economic Area & United Kingdom

If you are in the EEA or UK, our legal bases for processing are: (a) performance of a contract (operating the app for you), (b) legitimate interests (security, stability, fraud prevention), and (c) consent (analytics opt-in). You have the GDPR rights listed in section 8.

California (CCPA / CPRA)

California residents have the right to know, delete, correct, and limit the use of sensitive personal information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise your rights, write to support@getserenova.app.

Türkiye (KVKK)

Veri sorumlusu Serenova'dır. Kişisel verilerinizle ilgili haklarınızı kullanmak için support@getserenova.app adresine yazabilirsiniz.

12. Health Disclaimer

Serenova provides general wellness content (affirmations, breathing, mood logging, self-assessments). It is not a medical device and does not diagnose, treat, cure, or prevent any disease. The Service is not a substitute for advice from a qualified healthcare provider. If you are experiencing a mental-health crisis, please contact a qualified professional or local emergency services.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where reasonable, notify you in the app or by email at least 14 days before the change takes effect.

14. Contact

For privacy questions, requests, or complaints:

Email: support@getserenova.app
Postal: Serenova, Istanbul, Türkiye
We respond to verified privacy requests within 30 days.