1. Introduction
At FinansBiyotik, we respect your privacy and are committed to protecting your personal data. This privacy policy explains how we process your personal data when you use our mobile app and our website.
2. Information We Collect
2.1 Information You Provide
- Account Information: Email address, username, name, phone number, profession
- Portfolio Data: Your investment portfolio (assets and cash). It is stored on our secure servers to provide cross-device sync and personalized briefings; a local copy is also kept on your device for offline access.
- Price Alerts: The symbol and target price you want to track
- Profile Preferences: Your interests and finance experience level (optional) — used to tailor content to your level
- Assistant Questions: The text you write to the Finans Biyotik Assistant (see section 5.1)
- Support Requests: Information you provide when contacting our support team
- Account Security: Your password (stored as an irreversible hash) and, if you enable it, two-factor authentication data
2.2 Automatically Collected Information
- Usage Data: Which section you visit and how long you spend there — at category level only (e.g. "crypto page"). Amounts you enter, individual assets, searches and form contents are never included. You can turn this off entirely in settings; when off, no records are created at all. Raw records are deleted after approximately 90 days.
- In-App Progress: Your level and scores in Break Room games, your daily visit streak and experience points
- Ad Interaction: Impressions and clicks on our own in-app promotions
- Notification Identifier: If you grant notification permission, the subscription/token needed to deliver notifications to your device
- Last Activity Time: The date and time you last used your account. We keep this for account security (helping you notice access you don't recognise), support, and operating the service. It is a timestamp only — your IP address, device, location and the pages you viewed are not part of this record. The value is overwritten on each update; we do not keep a history. Important: because this is necessary for operating the service securely, it is not affected by the "Usage analytics" setting — turning that off does not stop your last activity time from being recorded. It is deleted when you delete your account.
- Log Data: Server access logs and app version. Your IP address is used only momentarily for abuse-preventing rate limiting and is not stored in our database.
What we do not collect: Your location, contacts, photos, files, health data or calendar. The app contains no third-party crash or diagnostics reporting component.
2.3 Information Received from Third Parties
We obtain financial market data from third-party APIs:
- Yahoo Finance (stock prices)
- CoinGecko (cryptocurrency prices)
- News APIs (financial news)
3. How We Use Information
We use the collected information for the following purposes:
- Providing the Service: Displaying market data, managing your portfolio
- Personalization: Tailoring your experience to your preferences
- Communication: Sending notifications, alerts, and updates
- Analytics: Improving app performance
- Security: Protecting against fraud and unauthorized access
- Legal Compliance: Complying with applicable laws
4. Data Storage and Security
4.1 Local Storage
- For fast and offline access, the app also keeps some data (e.g., a copy of your portfolio, your preferences) locally on your device
- We use encryption for sensitive data
4.2 Server Storage
- Account information and — for cross-device sync — your portfolio are stored on secure servers
- Your password is never stored in plain text; it is hashed irreversibly
- We use industry-standard encryption (SSL/TLS)
- Regular security audits are performed
4.3 Data Retention
- Account data: As long as your account is active
- Usage data: 24 months
- You may request deletion of your data at any time
5. Data Sharing
We may share data in the following cases:
5.1 Service Providers
The following providers process your data only on our behalf and under our instructions; they do not use it for their own purposes or sell it:
- Cloud hosting services (for backend infrastructure)
- AI provider (Google Gemini / DeepSeek): To be clear — when preparing your daily briefing, your name and your portfolio's composition (the symbol and percentage of your largest position, your cash/crypto ratio, your progress toward your goal) are sent to the provider. When you ask the assistant a question, the text you write is sent verbatim. The monetary value of your portfolio is not sent. This data is processed solely to generate a response for you and is not used for advertising. The providers' servers are located abroad (see section 9).
- Notification infrastructure: If you grant notification permission, a subscription is used to deliver notifications to your device. Web notifications are sent from our own server; when mobile push goes live, your device token will be delivered via Google Firebase Cloud Messaging.
- Email service providers (for verification and notification emails)
Our usage analytics never leave us: The usage data described in section 2.2 is stored only on our own server; we do not use any external analytics service such as Google Analytics.
5.2 Legal Requirements
- When required by law or legal process
- To protect our rights, privacy, and security
- In connection with a merger, acquisition, or asset sale
6. Your Rights
You have the following rights regarding your personal data:
- Access: Request a copy of your personal data
- Rectification: Update or correct your information
- Deletion: Request deletion of your account and data
- Objection: Opt out of analytics and marketing communications
- Data Portability: Export your data in a readable format
To exercise your other rights, write to privacy@finansbiyotik.com.
7. Third-Party Services
Our app integrates with third-party services:
- Google Gemini / DeepSeek: AI assistant and daily-briefing responses (section 5.1 lists exactly what is sent)
- Google Firebase Cloud Messaging: Mobile push notifications (once live)
- Google AdMob / AdSense: Advertising infrastructure. No real ads are currently served; we only show our own promotions and your advertising identifier is not read. When real ads are enabled, this policy and our store disclosures will be updated and you will be asked for permission separately on iOS.
Market data sources — none of your data is sent to them. Our server fetches price and indicator data from publicly available sources on its own behalf, not yours: Yahoo Finance, CoinGecko, TCMB EVDS, FRED, Eurostat, the World Bank, TEFAS, Frankfurter/ECB and news sites. These organizations do not see who you are, what you search for, or your portfolio.
Each service has its own privacy policy. We recommend reviewing them.
8. Children's Privacy
Our app is not directed to users under the age of 18. We do not knowingly collect data from children. If you believe we have collected data from a child, please notify us immediately.
9. International Data Transfers
Your data may be transferred to and processed in countries other than your own. We ensure that appropriate safeguards are in place to protect your data.
10. Cookies and Tracking
Web and Mobile App:
- We do not use cookies. No tracking cookie is placed in either the web or the mobile app.
- Instead we use your browser's/device's local storage: the sign-in key that keeps your session open, your preferences (language, theme), and a copy of your portfolio for offline access. These stay on your device.
- We do not track you for ad networks. The app does not follow you across other companies' apps and websites.
About Usage Analytics:
- These records are not anonymous — they are linked to your account. However, they only record which section you used and for how long, at category level (see section 2.2).
- They are stored only on our own server and are never sent to a third party.
- You can turn them off from Settings → Notification Settings → "Kullanım analizi" (Usage analytics); when off, no records are created at all. Raw records are deleted automatically after approximately 90 days.
11. Policy Changes
We may update this privacy policy from time to time. We will notify you of significant changes through:
- In-app notification
- Email (if you provided one)
- An updated "Last Updated" date
12. Contact
For questions about this privacy policy:
- Email: privacy@finansbiyotik.com
- Web: finansbiyotik.com/iletisim
- Address: [Your Business Address]
13. Consent
By using FinansBiyotik, you accept this privacy policy and agree to its terms.