Privacy Policy — Mizac
This Privacy Policy explains what information the Mizac mobile app ("the app", "we") collects, how it is used, stored and shared. By using the app you accept this policy.
1. Information We Collect
1.1 Anonymous Identity
When you first open the app, your account is created anonymously with a randomly generated identifier (UUID) on Supabase. No email or other personal information is collected at this stage.
1.2 Optional Account Registration
If you want to access your results from other devices, you can make your account permanent via Settings → Save Account using an email magic link or Sign in with Apple. In that case:
- Email: stored so we can send you the magic link.
- Apple Sign-In: the user identifier (subject) provided by Apple is stored; email is only collected if Apple shares it.
1.3 Test Answers and Results
Answers you give during a test are stored, linked to your account, in the Supabase database over an encrypted connection (TLS). The temperament percentages and texts you see are listed under "My Past Tests".
1.4 Purchase Information
In-app purchases are processed by the Apple App Store and Google Play. We never see your billing details (card number, etc.); we only receive confirmation via RevenueCat that a purchase occurred and grant your account a one-time test entitlement.
1.5 Palm Photo — Ilm-i Kef
If you use the Ilm-i Kef analysis, the palm photo you upload is stored in a private Supabase Storage area linked to your account and shown only to you. To generate the analysis, the photo is processed through our AI provider OpenRouter. Your photo is not used for advertising or model training; when you delete your account, the related photos are deleted too.
1.6 Automatically Collected Data
Device type, OS version and crash reports may be collected to improve performance. This data is not matched to personally identifiable information.
2. How We Use Information
- To keep your results linked to your account and show past tests
- To verify and deliver the test entitlement you purchased
- To let you sign in if you registered an account
- To fix bugs and improve performance
3. Third-Party Services
| Service | Purpose | Data |
|---|---|---|
| Supabase | Database + Storage + Authentication | Anonymous/email user ID, test answers, palm photo |
| RevenueCat | In-app purchase management | Purchase ID, user ID |
| OpenRouter | AI analysis/image generation (Yildizname, Ilm-i Kef) | Analysis inputs, palm photo (anonymized request) |
| Apple / Google | Payment processing | Billing info (not shared with us) |
Each service has its own privacy policy: Supabase, RevenueCat, OpenRouter, Apple, Google.
4. Data Retention and Deletion
You can request deletion from within the app or by email. When an account is deleted, all your test answers, results and identity records are permanently deleted within 30 days. See our Data Deletion page for details.
Anonymous accounts inactive for 12 months may be deleted automatically.
5. Children's Privacy
The app is not designed for children under 13. If we discover a user under 13, we delete the account. In Türkiye, users under 18 are advised to use the app with parental consent.
6. Security
All data transfer happens over HTTPS / TLS. Database access is restricted per user via Supabase Row-Level Security (RLS); a user can only see their own data.
7. Your Rights
Under KVKK and GDPR you have the right to ask what data is held about you, request correction or deletion, and close your account.
8. Changes
This policy may change. For significant changes we will notify within the app and update the dates.
9. Contact
For any privacy questions and data deletion requests: info@mobirithm.com
This is a translation provided for convenience; the Turkish version prevails in case of any discrepancy.