Privacy Policy

Effective date: 22 September 2026 · Applies to the Strapplai Android app; iOS will follow later

1. Who we are

Strapplai (the "app") is developed and operated by Strapplai (Şafak Türk), an independent developer based in Türkiye ("we", "us"). We are the data controller for the personal data described here. You can reach us at admin@strapplai.com.

Data controller: Strapplai (Şafak Türk), admin@strapplai.com.

The app is a private communication assistant for adults. It is not a dating, matchmaking or social networking service, and it is only for people aged 18 or older.

2. What we collect

2.1 Account data

Your email address; an identifier from your sign-in provider (Apple, Google or email and password); your name if you provide it or your sign-in provider shares it (Sign in with Apple lets you hide your email and share a relay address instead); the language you use in the app; and the time your account was created. Sign-in and session handling is provided by Supabase.

2.2 Content you choose to share

• Screenshots of conversations you select from your gallery, and optional voice notes.
• Optional context you add, such as your goal, preferred reply tone, a short note or how long a conversation has been silent.
• If you turn on Relationship Memory (off by default), a nickname you choose for a person so that analyses can be linked over time.
• If you create a Voice Profile, a short structured description of your writing style. It is derived from sample messages you provide; the samples themselves are never stored.

2.3 Analysis results

The structured output of an analysis: interest and tone readings, insights, safety notes, suggested replies and, for voice notes, a short summary ("gist"). We do not store a transcript of the messages the model read.

2.4 Purchases

Your subscription and credit status. Payments are processed through Google Play Billing; RevenueCat manages subscriptions. We never receive your card details. Purchases are linked to your account identifier, not to an anonymous device ID.

2.5 Diagnostics and usage data

• Crash and error reports (via Sentry, only if enabled) with personal-data collection disabled and request bodies removed.
• Product usage events (via PostHog, only if enabled, hosted in the EU) limited to categorical or numeric metadata, for example "analysis completed" or a score band. Message content is never included.
• Server logs that contain a request ID and your user ID, with sensitive fields masked.
• AI usage records (model used, cost and latency) without any content.

We do not collect precise location, your contacts, or your photo library beyond the images you select. If you enable the optional "recent screenshot suggestion", the app reads only your most recent screenshot on your device to offer it; it is not uploaded unless you choose it.

3. How we use it

• To run the analysis you request and generate reply suggestions.
• To keep your history so you can revisit results and, if enabled, see trends per person.
• To manage credits and subscriptions, prevent abuse and apply fair-use limits.
• To keep the service secure, diagnose bugs and improve reliability.
• To comply with legal obligations.

Where the GDPR applies, our legal bases are performance of a contract (providing the service you asked for), our legitimate interests (security, diagnostics and abuse prevention) and your consent for optional features, which you can withdraw at any time in the app.

4. AI processing

To produce an analysis, the attachment and context you shared are sent to an AI provider. We use the paid tier of Google's Gemini API. In this tier, Google does not use your content to train its models. OpenAI's API is used only if enabled as an alternative provider. Providers process the content to return a result and handle it under their API terms. We do not use your content to train AI models. The model is instructed not to identify the people in a conversation, and every result is an estimate based only on the messages shown.

5. How long we keep it

6. Who processes your data

We use the following service providers ("processors") to run the app. We do not sell personal data and we do not show ads.

We may disclose data if required by law, or to protect the rights, safety or property of users or the public.

7. International transfers

Your data is stored in the European Union. Some providers listed above process data in the United States or other countries. Where that happens, transfers rely on safeguards such as standard contractual clauses or the provider's own recognised mechanisms.

8. Your controls and rights

Inside the app you can:

• Delete a single analysis, a saved person or your Voice Profile.
• Keep Relationship Memory and the recent-screenshot suggestion off; both are off by default.
• Delete your account from Settings → Account → Delete account, then enter the confirmation word shown in the app.

Deleting your account

Account deletion removes your profile and preferences, analyses and reply suggestions, saved people, writing-style profile (Voice Profile), credit and subscription records held by us, uploaded image and audio files, and your authentication account (Supabase Auth). Raw images and audio are already deleted immediately after analysis, within at most 30 minutes.

Anonymous aggregate usage statistics remain, as do purchase records that Google Play and RevenueCat must retain to meet their legal retention obligations. Deleting your account does not cancel your Google Play subscription; cancel it separately through Google Play.

For the steps and an email alternative, see Delete your Strapplai account. You can send an account deletion request from your registered email address to admin@strapplai.com; we process it within 30 days and send a confirmation email.

Depending on where you live, including under the GDPR and Türkiye's Personal Data Protection Law (KVKK), you also have the right to access, correct, delete or export your data, to restrict or object to processing, and to withdraw consent. Email us at admin@strapplai.com; we answer within 30 days. You can also complain to your data protection authority.

9. Security

Data travels over encrypted connections. Uploaded files go straight into a private storage bucket using short-lived, signed upload permissions and never pass through public URLs. Session tokens are kept in your device's secure storage (iOS Keychain or Android Keystore). All authorization decisions are made on our servers, and no secret keys ship inside the app.

10. Other people's messages

A conversation screenshot contains messages written by someone else. Share only what you have the right to share, and do not upload content involving anyone under 18. We use such content only to provide the analysis to you, we do not try to identify those people, and we delete the raw content as described in section 5.

11. Age limit

The app is for people aged 18 or older and asks you to confirm this. We do not knowingly collect data from anyone under 18. If you believe we have, contact us and we will delete it.

12. Changes to this policy

When we change this policy we update the effective date above. If a change is significant we will let you know in the app before it takes effect.

13. Contact

Strapplai (Şafak Türk) · admin@strapplai.com