Privacy policy

Who is responsible

maglo is made by Doğukan Önder, an independent developer in Türkiye. In this policy "I" means Doğukan Önder, and I am the data controller for the data described here. You can reach me at support@maglo.app.

This policy covers the maglo app and the website maglo.app.

The app

What stays on your phone

maglo has no server of its own and no accounts. All of this is stored in the app, on your device, and is not sent to me or to any third party:

• the countries and cities you stamp, and your dream list;
• the magnets on your fridge and where you put them;
• your kitchen: its colours, its furniture and the size of the fridge;
• what you add to a magnet: the date, one photo and one line of text;
• your settings (language, sound, and the diagnostics switch).

Because there is no account, the app never asks for your name, your email address or a password. I cannot see your fridge, your photos or your notes, and I could not hand them to anyone.

Your phone's own backup (iCloud, for example) may include the app's data, as it does for other apps. That backup is between you and its provider; maglo does not send it anywhere itself.

Photos

When you add a photo to a magnet, you choose it in the system photo picker. The app receives only that one photo and copies it into its own storage on your phone; it does not read the rest of your library and the photo is never uploaded. When you save the story image of your fridge, the app asks for permission to add that image to your Photos, and does nothing else with the permission.

maglo does not use your location, your contacts, your camera or your microphone.

Purchases: Apple and RevenueCat

maglo Plus is bought through Apple's in-app purchase system with your Apple ID. Apple handles the payment; I never see your card or your Apple ID.

To check that a purchase is valid, to unlock Plus and to restore it on a new phone, the app uses RevenueCat. RevenueCat receives:

• a random, anonymous app user ID that it generates for your install;
• your purchase history for maglo (the product, dates and Apple's transaction details);
• technical details of the request, such as the app version, your locale and your currency.

The app does not send RevenueCat your name, your email address or anything else that identifies you, and it does not use purchases for advertising.

Anonymous diagnostics: Expo

To find crashes and slow screens, the app sends anonymous diagnostics through Expo (the "EAS Observe" service). They contain:

• crash and error reports;
• how long the app takes to start and how long each screen takes to open, by the screen's name;
• five counts that say a step happened: the first stamp, the fifth magnet on the fridge, the Plus screen being opened, a purchase being completed, and the 3D kitchen failing to start;
• your device model, operating system version, app version and language;
• a random ID for the install, which is replaced when you reinstall the app.

They do not contain your countries, your photos, your notes, your name, your email address or your location. Screens that are opened for a particular country or magnet are reported by their name only; the country and the magnet are filtered out before anything is sent.

You can turn all of this off at any time: Profile, then Settings, then "Anonymous usage data".

Sharing

When you share your fridge, the image goes to the app you pick in your phone's share sheet. What that app does with it is covered by its own privacy policy.

The widget

The home-screen widget shows your number of countries. It is drawn on your phone from the app's own data; nothing is sent anywhere for it.

The website maglo.app

• Hosting. The site is served by Cloudflare. Like every web server, it processes your IP address, your browser type and the page you ask for in order to deliver the page and to keep the site safe.
• Visitor counts. The site uses Cloudflare Web Analytics to count visits. It sets no cookies, does not fingerprint you and does not follow you to other sites. I see totals only: how many visits a page had, which site they came from, and the country and browser type.
• Cookies. The site sets none.
• The countries visited map. The list you tick is kept in your browser's local storage, on your device, and is not sent to a server. If you press Share, the link itself carries the country codes; anyone you give that link to sees the same map.
• Email. If you write to support@maglo.app, I receive your address and your message and use them only to answer you. The message is forwarded by Cloudflare Email Routing to my mailbox, which is hosted by Google.

Why this data is used

• Purchase data is used to give you what you bought and to restore it (performance of the contract with you).
• Diagnostics are used to fix crashes and slow screens (my legitimate interest in an app that works). You can switch them off.
• Server and visit data for the website is used to deliver the site, protect it and see which pages are read (legitimate interest).
• Support emails are used to answer you.

I do not sell data, I do not show ads, and I do not build profiles of anyone.

How long it is kept

• Data on your phone stays until you delete it. Deleting the app deletes its data from the phone.
• Diagnostics are kept in my Expo account for as long as they are useful for fixing the app. They carry no name and no contact detail, so I cannot look up or delete the entries of one particular person; reinstalling the app gives you a new random ID.
• Purchase records are kept by Apple with your Apple ID, and by RevenueCat under the anonymous ID, for as long as they are needed to keep Plus unlocked and restorable.
• Support emails are kept for as long as they are needed to help you, and deleted when you ask.

Where it is processed

Apple, RevenueCat, Expo, Cloudflare and Google are based in the United States and process data there and in other countries. Each of them describes its safeguards in its own privacy policy: Apple, RevenueCat, Expo, Cloudflare, Google.

Your rights

Depending on where you live (for example under the GDPR in the European Union, or the KVKK, Law No. 6698, in Türkiye), you have the right to ask what data is held about you, to have it corrected or deleted, to object to its use, and to complain to your data protection authority. Write to support@maglo.app and I will answer within 30 days.

In practice almost everything maglo knows about you is on your own phone, where you can change or delete it yourself, and the diagnostics cannot be traced back to a person.

Children

maglo is suitable for all ages. It has no accounts, no chat and no ads, and it does not knowingly collect personal information from anyone, children included.

Changes to this policy

If the app or the site starts to handle data differently, this page changes first and the date at the top changes with it.

Contact

Doğukan Önder, Türkiye. Email: support@maglo.app.