Skip to content

Privacy Notice

Version 1.0 · Effective: 4 October 2026

  • Version: 1.0
  • Effective date: 4 October 2026
  • App: Sarıl: Kişisel Bakım Arkadaşın (iOS and Android)
  • Controller: Emre Yalçın, an individual developer (listed in the app stores as Emre Yalçın)

This notice explains what information Sarıl handles, why, and what choices you have. It is for information only; reading it does not mean you consent to anything. The optional explicit consent for your mood entries and written answers is a separate text (Explicit Consent).

1. The short version

  • No account, no servers. What you enter in Sarıl is stored only on your device. It is never sent to us, and we cannot access it.
  • No tracking. No ads, no analytics, no tracking tools. We do not sell or share your personal information.
  • Your entries and writing (mood entries and answers to the question of the day) may reveal health information. We store them only with your explicit consent. Consent is optional; without it, everything else in Sarıl works as usual.
  • We never see your payment details. Apple or Google handles purchases.
  • You're in control. You can export or delete your data and withdraw your consent at any time.
  • One exception: if your phone's backup feature (such as iCloud Backup) is on, your data may be included in a backup in your own cloud account (see Section 8).
  • Together (optional): if you turn on Together, where you share steps with friends, some information for that feature goes to a server in Europe (Google Firebase). What goes there, who sees it and how to delete it is in the Privacy Annex for Together and Profile Photos. If you never turn on Together, it doesn't apply to you and the "no account, no servers" approach above stays exactly as it is.

2. Who is responsible

Controller · Emre Yalçın (individual developer)

Developer name in the app stores · Emre Yalçın

Postal address · Yalı Caddesi No: 8, Atakum, Samsun, Türkiye

Email (including privacy requests) · support@saril.app

EU representative · Not appointed

Sarıl is offered by an individual developer, not a company. Even though your data stays on your device and we never access it, we designed what Sarıl stores and how, so we treat ourselves as the controller and wrote this notice accordingly.

3. How Sarıl handles data

  • All of Sarıl's records are kept in a single data file on your device, in the app's private storage, which other apps cannot access.
  • There is no account. We don't ask for your name, email, phone number, or date of birth.
  • We have no servers. The app does not send your records anywhere.
  • The app contains no third-party software development kits (SDKs) for advertising, analytics, crash reporting, or tracking.
  • The only time the app goes online is to get your subscription status and prices from the store (Apple or Google). That information flows from the store to your device; nothing flows from your device to us.

4. What information is processed, and why

All of the following is stored only on your device.

Information · Examples · Why · Legal basis (EU/UK)

Companion details · the animal you chose, its name, the day you adopted it · to show and grow your companion · performance of contract (Art. 6(1)(b) GDPR)

Steps and points · steps you chose, which steps you completed on which day, hug moments, breathing breaks, focus sessions, points and level · to show your daily steps, points and level · performance of contract

Companion and room items · unlocked and worn items, room layout · to show the wardrobe and room · performance of contract

Weekly letter · when each letter was opened and which templates it was built from (not the text itself) · to show the letter again · performance of contract

Settings · language, night-time hours, special-day preference, question theme, notification preferences · to run the app the way you like · performance of contract

App state · last opened time, markers for animations and cards shown once · to avoid showing the same thing again and again · performance of contract

Subscription status · type (none, trial, active), plan, end and renewal date, whether you cancelled, which reminders were shown · to unlock Premium and remind you before renewals · performance of contract

Consent records · which version of the Terms you accepted and when; the status, date and text version of your explicit consent · to show what you agreed to · legal obligation and legitimate interest (Art. 6(1)(c), (f))

Your entries and writing · mood entries (the level you chose, factors, time) and your answers to the question of the day · to show your mood history and weekly strip, keep your answers under "My writing", and personalize the weekly letter · explicit consent (Art. 9(2)(a) and 6(1)(a))

What we don't keep: your name, email address, phone number, location, contacts, photos, device or advertising identifiers, IP address, payment method, card details, invoices, store account, or purchase transaction ID.

Read on your device but not stored: your phone's language (to choose the app language), region (to show special days) and time zone (to work out when your day starts). These are read on the device and never sent to us.

5. Your entries and writing: sensitive data and explicit consent

5.1. Your mood entries and your answers to the question of the day may contain information about your mental health or other sensitive topics. Under many privacy laws, this can be sensitive data or health data (for example, "special category data" under the GDPR, and "consumer health data" under some US state laws). That's why we process it only with your explicit consent.

5.2. Consent is optional and separate from accepting the Terms of Use. You're asked with a separate checkbox on the last screen of the welcome flow. The box is never pre-checked.

5.3. If you don't consent: mood check-ins and saving written answers to the question of the day are turned off; these two features don't keep records. The question of the day is still shown, but you can't write an answer; an "Allow" card appears instead. Everything else (your companion, steps, points, breathing, focus, the letter, and more) works as usual.

5.4. You can give or withdraw consent at any time: Settings → Privacy → My entries and writing. When you withdraw consent:

  • your mood entries and written answers are deleted from your device;
  • the points you earned up to then (including question-of-the-day points), your level and your companion stay;
  • weekly letters are rebuilt from your records, so deleted records no longer appear in them;
  • withdrawal does not affect the lawfulness of processing before it.

5.5. The full scope of the consent is in the Explicit Consent text.

6. How information is collected

Information comes from what you enter while using the app and from records the app creates automatically on your device (for example, the time you completed a step). Your subscription status comes from the store when you buy or restore a purchase and when the app starts. If you email us, we receive the information in your email (see Section 11).

7. How long data is kept, and how to delete it

  • Your data stays on your device until you delete it or uninstall the app. We keep no copy.
  • Settings → Privacy → Delete my data permanently deletes all of it. This cannot be undone, and the app returns to its first-launch state.
  • You can delete a single mood entry or written answer on the relevant screen.
  • Withdrawing consent deletes your entries and writing (5.4).
  • Uninstalling the app deletes the data on the device. For copies in operating system backups, see Section 8.
  • Deleting your data does not cancel your subscription; it continues in the store and can be reactivated with "Restore purchases".
  • Retention for emails you send us is in Section 11.

8. Phone backups and changing devices

We want to be honest: the one exception to "your data stays on your device" is your own backups.

  • iPhone: if iCloud Backup is on, Sarıl's data file may be included in the device backup in your Apple account. Backups you make to your computer may include it too. These backups go to your account and your computer, not to us, and are subject to Apple's own privacy terms. You can manage iCloud Backup under Settings → [your name] → iCloud → iCloud Backup.
  • Android: Sarıl is excluded from automatic cloud backup to your Google account. However, on some devices, a direct cable or device-to-device transfer from your old phone to a new one may carry app data over.
  • If you create an export file, it's wherever you saved it (for example, in files, a cloud drive, or an email). Keeping that file safe is up to you.

9. Who we share information with

  • No one. The records on your device are not disclosed to any person, company or authority, and we don't receive them ourselves.
  • We do not sell your personal information, do not share it for cross-context behavioral advertising, and do not use it for ads.
  • International transfers: we don't transfer personal information from the app to other countries. For emails, see Section 11.
  • Government requests: since we have no access to the data on your device, we cannot hand it over.

10. The role of Apple and Google

  • When you download Sarıl, buy Premium, or manage your subscription, Apple (App Store) or Google (Google Play) processes your store account, payment details and purchase history for their own services and under their own responsibility, according to their privacy policies.
  • The store only tells the app, on your device, about the status of a subscription (for example, whether it is in a trial and when it renews). It does not give us your name, email or payment details.
  • The stores show developers aggregated, non-identifying statistics (such as download counts, country breakdowns and crash counts). If you turned on an option such as "Share with app developers" in your phone's settings, the store may also pass crash reports to us. These are technical data (such as device model, system version and where in the code an error happened) and do not include your entries or writing. You can turn this sharing off in your phone's privacy settings.

11. If you email us

  • If you write to us, we use your email address, your name (if you include it) and the content of your message only to respond to you.
  • Legal basis (EU/UK): taking steps at your request and our legitimate interest in answering you (Art. 6(1)(b), (f) GDPR); for privacy requests, our legal obligation (Art. 6(1)(c)).
  • Emails are stored by our email provider, Google (Gmail; mail to saril.app addresses is forwarded through Cloudflare), whose servers may be located in the United States. Google processes them under its own privacy terms.
  • We keep correspondence for up to 2 years after your request is resolved, then delete it, unless we need to keep it longer by law (for example, for a legal claim).
  • Please don't include health or other sensitive information in emails; we don't need it to help you.

12. No tracking, analytics or ads

  • There are no ads in Sarıl.
  • There are no analytics or tracking tools that measure your use. We don't track you across other apps or websites, and we don't let anyone else do so.
  • The app doesn't ask for access to your advertising identifier or for tracking permission.

Our website (saril.app)

  • The saril.app website has no cookies, ads, trackers, forms or JavaScript, and you don't need an account.
  • The site is delivered through Cloudflare, Inc. (USA). When you open a page, your browser connects to Cloudflare, which processes technical connection data such as your IP address on our behalf to deliver the page and protect the site against attacks; its servers may be located in the United States and other countries. Cloudflare may also ask your browser for network error reports (Network Error Logging); these contain only technical information about connection errors.
  • Our own server records only what we need to count page views: the time, the page, the response code, the size, whether the visit came from another website and whether the request came from a known bot. Your IP address, browser details and the address you came from are not recorded, so these records cannot tell us who you are. If something goes wrong on the server, the error log may contain technical details and Cloudflare's connection address.
  • Page-view and error logs are kept on the server for at most 14 days and then deleted automatically.
  • Legal basis (where the GDPR applies): our legitimate interest in running the site securely (Art. 6(1)(f) GDPR).

13. Notifications and permissions

  • Sarıl may only ask for notification permission. If you say no, the app still works; reminders just won't arrive as notifications.
  • Notifications are generated on your device, never sent from a server, and never contain ads.
  • Sarıl does not ask for access to your location, camera, microphone, contacts or photos.

14. Your rights

Wherever you live, you can use these tools in the app right away:

  • See your data: in the relevant screens of the app.
  • Correct it: edit or delete an entry.
  • Get a copy (portability): Settings → Privacy → Download my data.
  • Delete it: Settings → Privacy → Delete my data.
  • Withdraw consent: Settings → Privacy → My entries and writing.

For anything else, email us at support@saril.app. We respond within 30 days at the latest (within one month under the GDPR, within 45 days under US state laws where applicable). Because we can't see the data on your device, we will usually answer requests about it by explaining how to do what you want with the app's own tools. We will not discriminate against you for using your rights. Region-specific rights are described in the annexes.

15. Security

  • Your data is kept in the app's private storage, protected by the operating system and accessible only to Sarıl. Modern phones protect this storage with device encryption.
  • Since your data lives on your device, your phone's security matters too: we recommend using a screen lock (passcode, PIN, face or fingerprint) and keeping your system up to date.
  • We have no servers, so there is no risk of a server-side breach. If a breach ever affects emails you sent us, we will notify you and the authorities as required by law.

16. Children and age

Sarıl is not designed for anyone under 16 and is not directed at children under 13. We do not knowingly collect personal information from children under 13; in fact, we don't collect personal information through the app at all. If you are between 16 and 18, we encourage you to use Sarıl with a parent's or guardian's knowledge.

17. If things change

Today, Sarıl has no cloud sync, account, analytics, crash-reporting SDK, or third-party subscription service. If we ever add one:

  • we will update this notice beforehand;
  • we will inform you again in the app;
  • where required, we will ask for new consent, and if you say no, that new feature stays off.

18. Changes to this notice

When we change this notice, we update the version number and effective date. We announce material changes in the app in advance. The current version is always available under Settings → Privacy and at https://saril.app/en/.

Annex A: Users in the European Union, EEA and UK (GDPR)

A.1. Controller. The controller under the General Data Protection Regulation (GDPR) is the person named in Section 2. We are not established in the EU. We have not appointed an EU representative under Art. 27 GDPR at this time.

A.2. Legal bases are listed in Sections 4 and 11.

A.3. Storage on your device. We only store information on your device that is strictly necessary for the service you asked for (in Germany, Section 25(2) no. 2 TDDDG). There is no tracking.

A.4. Your rights. You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20), and objection (Art. 21), and you can withdraw consent at any time (Art. 7(3)). We do not make automated decisions or create profiles (Art. 22).

A.5. Complaints. You can lodge a complaint with a data protection supervisory authority, in particular in the country where you live or work or where you believe an infringement occurred (Art. 77).

A.6. Transfers. We do not transfer data from the app outside the EU. If you email us directly, your email reaches the controller in Türkiye and our email provider (Section 11).

A.7. Age. Under Art. 8 GDPR, the age of consent is 16 in Germany (it may be lower in other EU countries). Sarıl is only for users aged 16 and over.

Annex B: Users in the United States

B.1. California (CCPA/CPRA).

  • We do not sell or share your personal information, and we have not done so in the past 12 months. We do not use or disclose sensitive personal information for purposes other than providing the app you asked for.
  • Categories collected in the past 12 months: through the app, none; the app stores data only on your device. If you email us: identifiers (email address, name if provided) and the content of your message, used only to respond to you and not disclosed to third parties except our email provider acting as a service provider.
  • Your rights: to know, access, correct and delete personal information, to limit the use of sensitive personal information, and to opt out of sale or sharing (which we don't do). You won't be treated differently for using these rights. You can use an authorized agent. To make a request, email support@saril.app; since we hold almost no information about you, verification is usually simple.
  • Some of these laws may not apply to us because of their size thresholds; we honor these commitments anyway.

B.2. California Online Privacy Protection Act (CalOPPA).

  • The categories of personally identifiable information we collect and the third parties we share it with are described in Sections 4, 9, 10, 11 and B.1.
  • You can review and change the information in the app at any time (Section 14).
  • We will notify you of material changes in the app, and this notice shows its effective date at the top.
  • Do Not Track: Sarıl uses no tracking technologies, so there is nothing for "Do Not Track" signals to switch off: we simply don't track you. We don't allow third parties to collect personally identifiable information about your online activities over time and across different apps or websites when you use Sarıl.

B.3. Children (COPPA). Sarıl is not directed at children under 13, and we do not knowingly collect personal information from them.

B.4. California "Shine the Light". We do not disclose personal information to third parties for their direct marketing purposes.

Annex C: Consumer Health Data Privacy Policy (Washington, Nevada, Connecticut and other states)

This annex is our Consumer Health Data Privacy Policy under the Washington My Health My Data Act (RCW 19.373), Nevada SB 370 and similar state laws. It is part of this notice and is published at https://saril.app/en/gizlilik/ (Annex C).

C.1. What consumer health data may be involved. Your mood entries (the level you chose, factors such as sleep or health, and the time) and your answers to the question of the day may reveal information about your past, present or future physical or mental health. These may be "consumer health data" under these laws.

C.2. How it is handled. This data is:

  • created by you and stored only on your device;
  • used only to show you your mood history, weekly strip and written answers, and to personalize your weekly letter on your device;
  • stored only with your consent, which you give separately from the Terms and can withdraw at any time under Settings → Privacy → My entries and writing.

C.3. What we don't do. We do not collect, receive, access, share or sell your consumer health data. It is never sent to our servers (we don't have any), and no third party receives it from us. We do not use it for advertising or geofencing.

C.4. Sources. The only source is you, when you enter it in the app.

C.5. Third parties and affiliates. None. We have no affiliates, and we do not share consumer health data with any third party.

C.6. Your rights. You have the right to confirm whether we collect, share or sell consumer health data (we don't), to access it, to delete it, and to withdraw consent. In the app, you can see, export and delete this data and withdraw consent at any time (Section 14). If you withdraw consent, your entries and writing are deleted from your device. For any request or appeal, email support@saril.app. We respond within 45 days. If we deny your request, you can appeal by replying to our answer, and, if you are unhappy with the result of your appeal, contact the Attorney General of your state.

C.7. Changes. If we ever start collecting consumer health data off your device, we will update this policy first and ask for your separate consent before doing so.

Annexes