Privacy Policy

Effective date: 8 November 2026

This policy explains what data is processed when you use the Awakened mobile app, why, and what rights you have. If you are in Türkiye, the KVKK notice (in Turkish) also applies.

1. Who is responsible

Awakened Studio (Mehmet Özçınar)
Address: Tunalı Hilmi Cad. No: 44/10, Çankaya, Ankara, Türkiye
Email: destek@awakenedstudio.app

2. What we process

Account

• Your email address and password. Your password is stored one-way hashed by Firebase Authentication; we cannot see it.

Profile and settings

• Your hero name, avatar (a letter or emoji), and the badges in your showcase.
• Your time zone and the hour your day starts (so days and streaks are counted correctly), the app language, your theme and your reminder settings.

What you create in the app

• Your stats, quests, quest completions and the notes you add to them, the EXP you earn and daily summaries.
• Your plans, badges, streak freezes, the items and chests you design, and your inventory.

Notes are free text. We suggest you do not write sensitive data such as health information in them; if you do, it is stored only to show it back to you.

Premium

• Whether your account has premium. When premium is bought, Google Play or the App Store handles the payment; we never see your card details. The store manages the subscription: cancellations and refund requests go through the store's subscriptions page and follow the store's own rules.

Technical data

• When the app connects, the Firebase services we use may process technical data such as your IP address and device and app version, to run the service and prevent abuse.

Crash reports

• If the app crashes, Firebase Crashlytics sends a crash report: what went wrong (the stack trace), the device model, operating system and app version, memory and disk state, whether the device is rooted, and a randomly generated installation ID. The report is never linked to your account, your email or your content in the app.
• You can turn crash reports off in Profile → Send crash reports; turning them off also deletes reports not yet sent.

What we do not process

• We do not access your location, contacts, photos or advertising ID.
• There are no ads or ad tracking in the app, and we use no analytics tools.
• We do not sell your data or share it with anyone for advertising.

3. Why we process it

• To provide the service (performance of a contract): creating your account, signing you in, syncing your data across devices, working out levels, streaks, badges and reports, and unlocking premium features.
• Security (legitimate interest): protecting your account and the service from abuse.
• Fixing bugs (legitimate interest): finding and fixing what makes the app crash.
• Legal obligations: answering lawful requests from authorities.

Reminder notifications are scheduled on your phone, with your permission and settings; nothing is sent to a server for them.

4. Where your data is stored and who receives it

We run on Google's Firebase services (Google Cloud). Google acts as our processor.

• Your app data (profile and what you create) is stored in the European Union, on servers in Frankfurt, Germany.
• Your account details (email, password hash) are handled by Firebase Authentication, which may process them on Google servers in other countries, including the United States.
• Crash reports are handled by Firebase Crashlytics, which may process them on Google servers anywhere in the world and keeps them for 90 days.
• Transfers outside the European Economic Area and Türkiye rely on legal safeguards such as Google's data processing terms and standard contractual clauses.

Apart from this, we do not share your data with third parties unless the law requires it.

5. How long we keep it

We keep your data while your account exists. When you delete your account in the app, your data and your premium record are deleted at once; deletions asked for by email, and any records left on the server side, are removed from our systems within 30 days at the latest. Deleting the account does not cancel a store subscription. Information we must keep by law (for example records of purchases) is kept only for as long as required.

6. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to receive it in a portable format. You can do most of this in the app:

• Correct: change your name, avatar and settings in Profile, and your content in Quests.
• Get a copy: write to us from the e-mail address registered in the app and we send all your data to you as one file.
• Delete: Profile → Delete account. If you cannot use the app, see the account deletion page.

For anything else, write to destek@awakenedstudio.app; we answer within 30 days. You may also complain to your data protection authority (in the EU, the one in your country; in Türkiye, the Personal Data Protection Board).

7. Security

The connection between the app and the server is encrypted. Only you, signed in to your own account, can reach your data on the server; access rules keep every other user out of it.

8. Children

Awakened is not meant for children under 13, and we do not knowingly collect their data.

9. Changes

If we change this policy, we publish the new version on this page and update the effective date; we also tell you about important changes in the app.