Privacy Policy

01Who we are

PackSmart is made and provided by Yağmur Günaydın Öney, an independent developer based in Türkiye ("we", "us"). We are the data controller for the personal data described here.

This policy covers the PackSmart app for iPhone and Android and this website. Questions? Write to cagatayoney0@gmail.com. We don't take requests by post; email is the way to reach us.

02What stays on your phone

Everything you create in PackSmart (trips, packing lists, notes, travelers, templates and your settings) is saved in a file inside the app on your phone, and the app works without an internet connection.

Some things are only ever stored on your phone and are never sent to us:

• your emergency contact (name and phone number);
• the consulate or embassy phone number you save in the travel guide;
• the templates you save from your own lists.

When you export your lists, the app copies them as text to your phone's clipboard. Where you paste them is up to you. When you call an emergency or consulate number from the app, your phone makes the call; we don't see it.

If you uninstall the app, the copy on your phone is deleted.

03What we keep on our servers

When the app is online, it keeps a backup of your trips and a few settings in our database (Google Cloud Firestore), under your anonymous account:

• Anonymous account (Firebase Authentication)A random user ID created when you first open the app. You don't give us a name, email address or phone number.
• ProfileApp language, time zone and UTC offset, home country and passport country, whether packing and Before Leaving Home reminders are on, platform (iOS or Android), app version, how many trips you've created on this account, your edited Before Leaving Home list, and when the profile was last updated.
• TripsTrip name, destination city and country, transport (plane, bus, train or car), start and end dates, departure time, the template used, packing items (name, category, note, quantity, whether it's essential and whether it's packed), Before Leaving Home tasks, travelers (the name you enter, whether they're an adult, child or baby, and which one is you), reminder setting and times, item and task counts, when the trip was created and updated, and which reminders we've already sent.

We use this backup to:

• send your trip reminders at the times the app works out from your departure (see Trip reminders);
• bring back your trips, your Before Leaving Home list and your free-plan trip count if you reinstall the app. Because accounts are anonymous, this doesn't work in every case, for example on a new phone, so please don't rely on it as your only copy.

Deleting a trip in the app also deletes its backup from our servers.

Item names and notes are whatever you type. Please don't put sensitive information, such as passport, ID or card numbers, into them.

04Trip reminders

If you turn on reminders and allow notifications, your phone registers with Firebase Cloud Messaging and the app saves its Firebase installation ID with your account.

Every 15 minutes, our server (Google Cloud Functions) looks for trips with a reminder due and sends:

• a packing reminder a day before you set off (19:00 the evening before, if the trip has no departure time);
• a Before Leaving Home reminder 2.5 hours before departure (07:00 on the day, if the trip has no departure time).

If your phone hasn't finished registering for notifications when a reminder is due, the reminder waits until it has. Nothing is sent after your departure time.

Notification texts include the trip name and how many items or tasks are left. On iPhone, Apple's push notification service delivers them to your device.

You can turn reminders off for a single trip, in the app's settings, or for PackSmart in your phone's notification settings. Installation IDs that stop working are removed from your account automatically.

05Premium purchases

PackSmart Premium is a one-time in-app purchase. Apple (App Store) or Google (Google Play) handles the payment, so we never see your card details.

RevenueCat manages purchases for us. It receives your purchase details and your anonymous user ID, so it can check the purchase, let you restore it and tell the app whether Premium is active. Our own servers don't receive or keep your purchase details.

06Analytics

We use Google Analytics for Firebase to understand how PackSmart is used, so we can see what works and fix what doesn't. It collects:

• which screens and features are used, for example creating or duplicating a trip, finishing a list, opening the travel guide or the Premium screen, starting or completing a purchase;
• simple details about those actions, such as the transport type, the template, the number of items or travelers, the item category and whether a trip is abroad;
• your home country, app language, measurement units and whether Premium is active;
• app version, device model, operating system, approximate location (country or city, worked out from your IP address) and an app instance ID.

Analytics never receives trip names, destinations, item names, notes, traveler names or your emergency contact.

07No ads, no tracking

• PackSmart shows no ads and has no advertising partners.
• We don't track you across other companies' apps or websites, and we never sell or rent your personal data.
• On iPhone, the app never asks for tracking permission, so it can't read your device's advertising identifier (IDFA).
• On Android, Google Analytics may collect your device's advertising ID by default. We don't use it for advertising. You can reset or delete it in your phone's Google settings.

If we ever add ads in a later version, we'll update this policy and tell you in the app before they appear.

08Why we're allowed to use data

Under the EU General Data Protection Regulation (GDPR) and Türkiye's Personal Data Protection Law No. 6698 (KVKK), every use of personal data needs a legal basis. Ours are:

• Providing the service you asked forYour account, the trip backup, the reminders you turn on and Premium purchases. (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c))
• Our legitimate interestsUnderstanding how the app is used, fixing problems, keeping our systems secure and preventing abuse, including the server logs described below. You can object to this processing (see Your rights). (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f))
• Legal obligationsMeeting legal duties, for example keeping purchase records or answering a lawful request from the authorities. (GDPR Art. 6(1)(c); KVKK Art. 5(2)(ç))

Notifications are only sent if you allow them in your phone's permission prompt, and you can turn them off at any time.

09Who we share data with

We share data only with the service providers that run PackSmart for us, and only what each one needs.

• Google (Firebase, Google Cloud)Anonymous account, database, server functions, Cloud Messaging, analytics and hosting for this website. United States and other countries. Google's privacy policy
• RevenueCat, Inc.Manages in-app purchases. United States. RevenueCat's privacy policy
• Apple and Google as app storesHandle payments, and on iPhone Apple delivers push notifications, under their own privacy policies.

We may also disclose data when the law requires it (for example a valid court order), to protect our rights or someone's safety, or as part of a merger or sale of the business, in which case this policy keeps applying to your data.

We don't sell your personal data.

10International transfers

Our database is stored in Google Cloud's United States multi-region (nam5), our server functions run in the us-central1 region in the United States, and RevenueCat is a US company. So your data is processed outside Türkiye and outside the EU.

Where the law requires it, we protect these transfers with appropriate safeguards, such as the standard contracts provided for in Article 9 of the KVKK and the European Commission's Standard Contractual Clauses.

11How long we keep data

• Lists, settings, emergency contact and consulate number on your phoneUntil you delete them or uninstall the app.
• Trip backupsUntil you delete the trip in the app, which removes it from our servers right away, or ask us to delete your data.
• Account ID and profileUntil you ask us to delete your data. Uninstalling the app doesn't delete them.
• Notification installation IDsUntil they stop working or your data is deleted.
• Purchase recordsWe don't keep them on our servers. Apple, Google and RevenueCat keep their own purchase records for as long as the law requires.
• Analytics dataUp to 14 months.
• Server logsUp to 30 days. They contain technical details such as the time, your user ID and trip ID when a reminder fails, and errors.
• Support emailsUntil your request is resolved, then up to 2 years in case you follow up.

When a retention period ends, we delete or anonymize the data.

12Your rights

Depending on where you live, the KVKK (Article 11), the GDPR and similar laws give you the right to:

• find out whether we process your data, why, and who we've shared it with (in your country or abroad), and get a copy;
• have wrong or incomplete data corrected;
• have your data deleted;
• ask us to tell the parties we shared your data with about a correction or deletion;
• restrict or object to processing, including processing based on our legitimate interests;
• object to a result that goes against you and comes only from automated analysis;
• get your data in a portable format;
• ask for compensation if you're harmed by unlawful processing;
• complain to a data protection authority: in Türkiye the Personal Data Protection Authority (KVKK), in the EU/EEA your local authority, in the UK the ICO.

How to use them

• Delete a trip: delete it in the app. Its backup on our servers is deleted too.
• Delete everything, or anything else: email cagatayoney0@gmail.com.

PackSmart accounts are anonymous, so we can't find yours from your email address alone. Please tell us the name, destination and dates of one of your trips and whether you use an iPhone or an Android phone, so we can identify your account. We may ask for a little more information to confirm it's yours. We reply free of charge within 30 days.

13Children and family trips

PackSmart is meant for people planning trips. It isn't directed at children under 13, or under the minimum age for digital consent where you live, and we don't knowingly collect data from them.

If you add family members, including children, as travelers on a trip, the names you enter are saved with that trip and used only to show your lists. First names or nicknames work just as well.

If you think a child is using PackSmart on their own, write to us and we'll delete the account data.

14Security

Data is encrypted in transit (HTTPS/TLS) and stored encrypted by Google. Our database rules let only your app's anonymous account read and change your data. Only people who need it can access our systems.

Our best protection is collecting less, which is why your lists live on your phone and we never ask who you are. No system is perfectly secure; if a breach ever affects you, we'll tell you and the authorities as the law requires.

15This website

This website has no cookies, no analytics and no JavaScript, and it loads nothing from other websites. It's hosted on Firebase Hosting (Google), which processes your IP address to deliver the pages and keep them secure.

Our download link (/indir) sends you to the right app store for your phone. It counts how many times it's opened each day, by phone type (iPhone, Android or other) and by where it was opened from (for example Instagram, or a tag in the link). Only these daily totals are stored, with no IP address, device details or identifier. Like any web request, Google Cloud's technical logs see your IP address and browser details and keep them for up to 30 days. On Android, Google Play receives the source (for example "instagram") so it can count installs.

16Changes to this policy

If we change this policy, we'll update the date at the top. If a change matters, for example a new kind of data or a new purpose, we'll tell you in the app before it takes effect.

17Contact

We don't take requests by post, so please write to us by email. If your message is about your data, include the details in Your rights so we can find your account.