Privacy Policy
This policy explains what data SuperApps handles, why, who receives it and the choices you have. SuperApps is a set of small tools that run on your phone. The files, photos, documents and text you work with are processed on your device and are never sent to us or to anyone else.
1. Who we are
SuperApps is published by İbrahim Kasapoğlu, an independent developer based in İstanbul, Türkiye (“we”, “us”). We are the data controller for the processing this policy describes, under the EU and UK General Data Protection Regulation (GDPR) and Türkiye’s Personal Data Protection Law No. 6698 (KVKK).
For any question or request about your data, write to support@ikasapoglu.com.
2. In short
- Your content stays on your device. We have no servers that receive your files, and we cannot see them.
- There is no account. You never give us your name, email address or phone number to use the app.
- The free version shows ads from Google AdMob. Where the law requires it, we ask for your consent first, and you can change your choice at any time.
- We measure usage and crashes with Google Analytics for Firebase and Firebase Crashlytics, without collecting your content.
- Purchases go through Apple or Google. RevenueCat helps us confirm your subscription. We never see your payment details.
- We do not sell your personal data for money.
3. What stays on your device
Everything you open, create or save with SuperApps is processed on your device and stays there: the files and photos you choose, PDF documents, the text you type or paste, the codes you scan or create, the values you calculate or convert, and every result the tools produce. None of it is sent to us, and none of it is sent to our advertising, analytics, crash reporting or purchase providers.
Files you save go to your device’s own storage: the Documents/Superapps folder on Android, and the app’s folder in the Files app on iPhone. On Android these files stay when you delete the app; on iPhone they are deleted with it. We never receive a copy, so we cannot recover a file for you.
The app also keeps a few records on your device, such as how many free uses you have left, the timing of the ads you have seen and your privacy choices. They stay on the device and are removed when you delete the app.
4. Access to your device
- Camera: only while you scan a QR code or a barcode. The image is read on your device and is never saved or sent.
- Files and photos: the app sees only what you pick in your device’s picker, or a PDF you choose to open with it. It does not browse your storage.
- Contacts: when you add a contact from a scanned code, your device’s own contact screen opens with the details filled in, and you decide whether to save it. The app does not read your contacts.
- Wi-Fi: when you join a network from a scanned code, its name and password are handed to your device to connect. We do not keep or send them.
5. Advertising
The free version of SuperApps shows ads from Google AdMob, a Google service. SuperApps Pro shows no ads at all.
To show ads, measure them and prevent fraud, Google’s advertising software in the app collects information about your device and the app (such as the model, operating system, language and app version), your IP address and the approximate location derived from it, advertising identifiers (on Android, the advertising ID and the app set ID), and how you interact with the ads you see.
Ads never receive your content or anything derived from it, and the ads you see are not chosen based on what you do in a tool.
Your choices:
- In the European Economic Area, the United Kingdom and Switzerland, we ask for your consent through Google’s consent form before ads are personalized. If you do not consent, you may still see ads that are not personalized.
- If you live in a US state with a privacy law, you can opt out of the sale or sharing of your personal information for targeted advertising.
- Where your region requires it, Privacy settings in the app’s Settings tab opens these choices again, so you can make or change them at any time.
- On Android you can reset or delete your advertising ID in your device’s settings.
Google uses this information under its own policies, described in How Google uses information from sites or apps that use its services.
6. Analytics, crash reports and app integrity
We use Google Analytics for Firebase to understand which parts of the app are used, so we know what to improve. It records each screen you see by its name only, such as Home, Search, Settings, a tool or a section of one, when the Pro screen is opened and from which place in the app, and standard events such as the first launch, sessions, app updates and purchases. No text, number, file, code, setting or result from a tool is ever sent. It relies on an identifier for this installation of the app, the advertising ID on Android and Apple’s identifier for vendor on iPhone. In the European Economic Area, the United Kingdom and Switzerland, analytics follows the choice you make in the consent form.
We use Firebase Crashlytics to find and fix crashes. It records when you start using the app, and when the app crashes it sends a report with the technical details of the crash (the type of error and where in the code it happened) and the screens viewed just before it. Both carry the app version, the device model, the operating system and an identifier for this installation of the app. The app leaves error messages out of these reports. On iPhone, a report can still keep a short description of the error written by Apple’s system software, a provider’s component or the app’s own code, which could rarely include something that code was handling, such as a file name.
The app includes Firebase App Check, which lets an online service confirm that a request comes from the genuine app on a genuine device. When the app contacts a service that requires it, App Check asks Google Play Integrity on Android or Apple’s App Attest on iPhone for that confirmation and passes the result to Google. The check carries information about the app and the device, never your content.
7. Purchases
SuperApps Pro is an auto-renewing subscription sold through the App Store or Google Play. Apple or Google processes your payment, and we never see your card or billing details.
To confirm and restore your subscription we use RevenueCat. It receives the purchase information the store provides (such as the product, the purchase and renewal dates, transaction identifiers, the price, the currency and the store country), a random identifier the app creates for your installation, information about your device and the app (on iPhone, including Apple’s identifier for vendor), and your IP address. It does not receive your name or your email address.
8. Who receives data
We share data only with the providers this policy names, each for the purpose described, and with the services that host this website and handle our email:
| Provider | What it does for SuperApps | Its privacy policy |
|---|---|---|
| Google: AdMob and the User Messaging Platform | Ads and the consent form | Google Privacy Policy |
| Google: Analytics for Firebase and Crashlytics | Usage analytics and crash reports | Google Privacy Policy |
| Google: Firebase App Check and Play Integrity, with Apple’s App Attest on iPhone | Confirming that a request comes from the genuine app | Google Privacy Policy and Apple |
| RevenueCat | Subscription status | RevenueCat Privacy Policy |
| Apple and Google as app stores | Distributing the app and taking payments | Apple and Google |
Google and RevenueCat, whose software is part of the app, are bound by their privacy policies and by their data protection terms with us to protect your data at least as well as this policy does.
We may also disclose data when the law requires it, for example to answer a valid request from a court or an authority, and to a successor if SuperApps is ever transferred, in which case this policy keeps protecting your data.
We do not sell your personal data for money. Some US state laws call the use of advertising identifiers for targeted ads a “sale” or “sharing”; section 5 explains how to opt out.
9. Why we process data
Under the GDPR and KVKK we rely on these legal bases:
| Purpose | Legal basis |
|---|---|
| Personalized ads | Your consent (GDPR Art. 6(1)(a); KVKK Art. 5(1)) |
| Ads that are not personalized, ad measurement and fraud prevention | Our legitimate interest in funding the free version (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)), and your consent where the law requires it to store or read information on your device |
| Usage analytics | Your consent where the law requires it, and otherwise our legitimate interest in improving the app (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Crash reports | Our legitimate interest in keeping the app working (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Confirming that a request comes from the genuine app | Our legitimate interest in protecting the app and the services it uses from abuse (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)) |
| Your Pro subscription | Performing our contract with you (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)) |
| Records the law requires us to keep | A legal obligation (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç)) |
10. International transfers
Google and RevenueCat process data in the United States and in other countries. When data leaves the European Economic Area, the United Kingdom or Türkiye, the transfer relies on the safeguards the applicable law provides, such as an adequacy decision, the EU-U.S. Data Privacy Framework or standard contractual clauses in the providers’ data protection terms.
11. How long data is kept
- On your device: until you delete it or delete the app. On Android, files you saved stay until you delete them yourself.
- Analytics: event-level data for no longer than 14 months, after which only aggregated reports remain.
- Crash reports: 90 days.
- App integrity checks: not kept; a confirmation expires within seven days at most.
- Advertising data: as described in Google’s retention policy.
- Purchase records: while your subscription is active, and afterwards for as long as the law requires or as needed to handle a claim.
- Emails you send us: as long as needed to answer you and follow up, then deleted unless the law requires us to keep them.
12. Your rights
Depending on where you live, you have the right to ask us for access to your personal data, to correct it, to delete it or to receive a copy, to restrict or object to its processing, and to withdraw your consent at any time without affecting processing that happened before. Under Article 11 of KVKK you can also ask whether your data is processed, for what purpose and to whom it is transferred, and claim compensation for damage caused by unlawful processing. If you live in a US state with a privacy law, you have the right to know about, access, correct and delete your personal information and to opt out of its sale or sharing, and we will not treat you differently for using these rights.
Because SuperApps has no accounts, we hold almost nothing that identifies you, and most of the data in this policy sits with Google and RevenueCat under random identifiers. Write to support@ikasapoglu.com and we will help. For a purchase, include the order number from your receipt so the record can be found. We answer within one month, and within 30 days for a request under KVKK.
You can also act directly: change your ad and analytics choices with Privacy settings in the app’s Settings tab where your region requires them, reset or delete your advertising identifier in your device’s settings, and remove what the app keeps on your device by deleting the app (on Android, files you saved stay until you delete them).
You have the right to complain to a data protection authority, such as the one where you live or work. In Türkiye this is the Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu).
13. Children
SuperApps is not directed to children under 13, and we do not knowingly collect personal data from them. If you believe we hold data about a child, write to us and we will help remove it.
14. Security
Your content is processed on your device. Data that goes to our providers travels over encrypted connections, and we limit what leaves your device to what this policy describes.
15. Changes to this policy
We will update this policy when the app or the law changes, and the effective date at the top will show the latest version. If a change is significant, we will announce it on this page before it takes effect.
16. Contact
İbrahim Kasapoğlu, İstanbul, Türkiye: support@ikasapoglu.com