Privacy Policy

In short

Pamuk has no accounts. Your data stays on your phone. If you never invite anyone into your home, nothing reaches our server. If you do, changes travel through the server so both phones can see the same home.

Data that stays on your phone

The following is stored only on your device and we have no access to it:

• Your rooms, chores, and when you did them
• The name you gave the creature and your own display name
• Your app settings
• Your device identifier and secret key (in your phone's secure keychain)

Data that reaches the server

Only when you join a home or invite someone, the following is sent:

• A randomly generated device identifier (UUID). Not your name, email, or phone number.
• A cryptographic hash of your secret key. The key itself is never stored on the server.
• A home identifier and invite code.
• Change records — your rooms, chores, grocery list items and when you did them. To the server software these are meaningless byte strings; the server never opens them, it only carries them. But there is NO end-to-end encryption today — someone with physical access to the server could technically read the contents. We keep the server from touching the contents so this option stays open for the future.

Notifications

If you allow notifications, your phone's push token and time-zone offset are stored on the server — to reach the right phone at a reasonable hour rather than in the middle of the night. If you decline, this data never exists.

Optional email

The app asks for no account and works fully without an email. We offer it at just two moments: when you invite your partner, and when you subscribe. If you link it, it does exactly one thing — lets you bring your home back on a new device if you lose your phone. We send a 6-digit code to verify the address; we store an irreversible digest of that code, never the code itself. No password, no session. If you never link an email, none of this section touches you.

• Your email is tied to your home, and as such it is personal data.
• A code is valid for 10 minutes and burns after 5 wrong attempts.
• When you tap "delete my data" in the app, your email goes too — actually deleted, not flagged.
• Unless you separately and explicitly tick the box, we do not send you promotional email.

Anonymous counters

To understand which parts of the app get used we keep anonymous tallies: only the day, an event name and a bucket label (for example "7-13 days after install"). No device identifier is sent or stored; these tallies cannot be traced back to any person — we cannot even count how many unique users there are. You can turn them off in Settings → Anonymous counters; anything waiting to be sent is deleted when you do.

Home screen widget

If you use the widget, that day's view of your home is stored in an area shared between the app and the widget inside your phone. This data never leaves the device and is never sent to us.

What we don't do

• We show no advertising.
• We use no third-party tracking tools.
• We do not sell, rent, or share your data.
• We do not ask for your location, contacts, or photos.
• We do not collect an advertising identifier (IDFA).

Retention and deletion

Deleting the app removes the data on your phone — with one exception: on iPhone your device identity stays in the phone's secure key store (Keychain). This is deliberate, so you can get your home back even after resetting the phone. To erase everything, use Settings → Delete my data — this removes the data on the phone, the device identity, and your record on the server; if nobody else is left in the home, the whole home is removed from the server. Change records on the server are also deleted automatically once every device in the home has received them and thirty days have passed.

Children

Pamuk is not directed at children under thirteen, and we do not knowingly collect data from them.

Your rights

Under GDPR and Turkish data protection law you have the right to access, correct and delete your data. Because we keep no accounts, most of your data is only ever on your device. Export and deletion live inside the app, under Settings → My data; you do not need our permission or need to write to us. If you still have a question, write to the support address.

Contact

destek@pamukapp.com