Privacy Policy

1. Introduction

TrackMyAligners ("we," "our," or "us") is an app for tracking clear aligner treatment. This Privacy Policy explains what information the app handles, where it is stored, who processes it, and the choices you have.

In short:

• Most of your data stays on your device.
• Cloud backup happens only if you sign in with Apple.
• Analytics, crash reports and ad measurement happen only if you agree, and you can turn them off at any time in Settings.
• Your photos never leave your device through our app.
• We do not sell your data, we do not ask for tracking permission, and we do not access your device's advertising identifier (IDFA).

2. Data Stored on Your Device

The following is stored in the app's storage on your iPhone:

• Treatment data: aligner numbers, change schedule, daily wear goal, wear sessions (when aligners were removed and put back in), daily wear totals
• Pain logs: pain levels and the areas you mark
• Profile details you enter: name, doctor's name, aligner brand. Earlier versions also asked for age, gender and a contact email; the app no longer asks for them, and any you entered before are removed when you use Restart Setup or delete your account.
• Progress photos and their details (date, aligner number, angle)
• App settings, such as language, reminders, and your privacy choices

Wear sessions older than 365 days are removed from your device automatically.

Photos: progress photos are stored in the app's storage and are also saved to an album named "TrackMyAligners" in your Photos app. Photo images are never uploaded by our app. Copies in your Photos app are managed by you and are not removed when you delete data in the app.

Local backup file: you can export a backup file from the app. You decide where that file is saved or shared.

Reminders are scheduled as local notifications on your device. No reminder content is sent to a server.

3. Your Account

When you first open the app, an anonymous account is created automatically with Firebase Authentication (Google). It has a random user ID and no name or email.

For every account, we keep a small account record in Google Cloud Firestore containing: the user ID, whether the account is anonymous, when it was created and last signed in, whether onboarding is finished, and technical fields (such as a data format version and a subscription status placeholder).

For anonymous accounts, your profile and treatment details stay on your device and are not added to this record.

4. Sign in with Apple and Cloud Backup (Optional)

You can choose to sign in with Apple to back up your data. When you do:

From Apple: on your first sign-in, Apple may share your name and email address. If you choose "Hide My Email," we receive an Apple private relay address instead of your real email. We use these to fill in your profile, which you can edit.

Backed up to Google Cloud Firestore, linked to your account:

• Daily records, wear sessions, pain logs, aligner change history, and your treatment plan
• Your app preferences, including your profile (name, plus age, gender and contact email if you entered them in an earlier version) and your privacy choices
• Profile and treatment details on your account record: email, doctor's name, aligner brand, aligner counts, language, and app version (and age and gender, if you entered them in an earlier version)
• Photo details only (date, aligner number, angle, and internal IDs). The photo images themselves are not uploaded.

We use this backup to restore your data on a new device or after reinstalling the app.

Data is encrypted in transit and at rest by Google. Access rules allow only your signed-in account to read, change, or delete your data.

5. Analytics and Crash Reports (Only With Your Consent)

The app asks for your permission before sending any analytics or crash reports. If you say no, nothing is sent. You can change your choice at any time in Settings.

Analytics (PostHog)

If you agree, the app sends usage events to PostHog, hosted in the European Union. These events describe how the app is used, for example:

• Which screens and features you use, and when the app is opened, closed, installed, or updated
• Wear time and session durations, daily goal, number of removals, and whether you met your goal
• When you log pain: the highest and average pain level and the number of areas marked
• Your aligner brand, if you chose one
• Device model and iOS version

Events never include your name, email, or photos. If you are signed in with Apple, events are linked to your account's user ID. If you use an anonymous account, events are linked to a random identifier created by PostHog.

Crash Reports (Sentry)

If you agree, the app sends crash and error reports to Sentry, hosted in the European Union, so we can fix problems. Reports include technical information such as the error, the app version, and device and iOS version. We turn off Sentry's collection of personal information, do not attach your account to reports, and remove sensitive details from them. We do not collect performance data.

6. Advertising and Ad Measurement

Ads in the app (free plan only)

Users on the free plan see ads from Google AdMob. We request non-personalized ads only. The app does not ask for tracking permission and does not access the Identifier for Advertisers (IDFA).

To show and measure ads, Google still processes information such as your IP address, device type, general location (country or region), and ad interactions. See Google's privacy policy: https://policies.google.com/privacy

Premium subscribers do not see ads.

Measuring our own ads (Meta, only with your consent)

We advertise TrackMyAligners on Instagram and Facebook. From app version 1.7.1, if you agree on the same consent screen as analytics, the app uses the Meta SDK to tell Meta Platforms when the app is installed or opened and when a subscription or other in-app purchase is made. This lets us see how many installs and subscriptions our ads bring.

Meta receives these app events together with technical information such as your IP address, device model, iOS version and app version. The app does not send your name, email, wear data, pain logs or photos to Meta, does not ask for tracking permission, and has the SDK's advertising-identifier collection turned off. On iOS, Meta attributes installs to ads through Apple's privacy-preserving SKAdNetwork and its own aggregated measurement.

If you say no, the Meta SDK is never started. If you turn consent off later in Settings, it stops sending events. See Meta's privacy policy: https://www.facebook.com/privacy/policy/

7. Purchases and Subscriptions

Payments are processed by Apple. We never see your payment card details.

We use RevenueCat to manage subscriptions. RevenueCat receives your account's user ID and your purchase history (such as which subscription you have, receipts, and renewal status) from the App Store.

Purchase records are kept by Apple and RevenueCat under their own policies, including after you delete your account. Deleting your account does not cancel a subscription. To cancel, go to iOS Settings > [your name] > Subscriptions.

8. Service Providers

We use the following providers to run the app. They process data on our behalf and under their own privacy policies:

9. What We Don't Do

• We do not sell, rent, or trade your personal information.
• We do not ask for tracking permission or access your device's advertising identifier (IDFA).
• We do not access your contacts, location, microphone, or browsing history.
• We do not read from or write to Apple Health (HealthKit).

We may disclose information if required by law, or to protect our rights, safety, or property.

10. Data Retention

• On your device: kept until you delete it, use Restart Setup, delete your account, or delete the app. Wear sessions older than 365 days are removed automatically.
• Cloud backup: kept until you use Restart Setup or delete your account. The 365-day limit does not apply to the cloud backup.
• Account record: kept until you delete your account.
• Analytics and crash reports: kept by PostHog and Sentry for a limited period under their retention settings.
• Ad measurement events: kept by Meta under Meta's own policies.
• Purchase records: kept by Apple and RevenueCat (see Section 7).

11. Your Choices and Rights

• Withdraw consent: turn analytics, crash reports and ad measurement off at any time in Settings.
• Edit your profile: change your details in the app at any time.
• Restart Setup: clears your treatment data on your device, deletes your cloud backup, and removes the personal details from your account record. Your account and subscription are kept.
• Delete your account: in Settings, you can delete your account at any time. This immediately deletes your cloud backup and account record, deletes your sign-in account, revokes Sign in with Apple, clears the app's data on your device, and resets the analytics identifier. It does not cancel subscriptions or remove photos from your Photos app.
• Notifications: turn reminders off in the app or in iOS Settings.

Depending on where you live (for example, under the GDPR in the EU/UK, KVKK in Turkey, or the CCPA in California), you may also have the right to access, correct, delete, or receive a copy of your data, and to object to or restrict its processing. To make a request, contact us at the email below. You may also complain to your local data protection authority.

12. Legal Basis (EEA, UK, and Turkey)

• Providing the app and cloud backup: to perform our agreement with you.
• Analytics, crash reports and ad measurement: your consent, which you can withdraw at any time.
• Non-personalized ads on the free plan: our legitimate interest in funding the free version.
• Legal obligations: where required by law.

13. International Data Transfers

We are based in Turkey. Our providers may process your data in other countries, including the United States and the European Union. Where required, these transfers rely on safeguards such as the providers' standard contractual clauses.

14. Children's Privacy

The app is not intended for children under 13, and we do not knowingly collect personal information from children under 13. If you are under 18, please use the app with a parent's or guardian's permission. If you believe a child under 13 has given us personal information, contact us and we will delete it.

15. Changes to This Policy

We may update this Privacy Policy from time to time. We will change the "Last updated" date above, and for significant changes we will notify you in the app.

16. Contact Us

If you have questions about this Privacy Policy or want to exercise your rights:

Email: dev.uguryuce@gmail.com
Location: Istanbul, Turkey