Privacy Policy

Privacy Policy

Last Updated: July 28, 2026

This Privacy Policy describes how AppVibezz ("we", "us", or "our") collects, uses, processes, and protects information when you use our website, SaaS platform, and our mobile analytics software development kit (the "SDK"). It also outlines the privacy rights of our Customers (developers/publishers) and their End Users.

1. Introduction and Definitions

AppVibezz is owned and operated by Aloha Dijital Bilişim Eğitim ve Danışmanlık A.Ş., located at Marmara University Teknopark, Istanbul, Turkey.

In this policy, the following terms have specific meanings:

  • "Customer" refers to the mobile application developer or publisher who integrates the AppVibezz SDK into their mobile application and uses our analytics dashboard.
  • "End User" refers to the individual who downloads, installs, or interacts with a Customer's mobile application containing the AppVibezz SDK.
  • "SaaS Platform" refers to the web-based analytics dashboard, portal, and API services provided to Customers at appvibezz.com.

2. Roles under GDPR and Turkish KVKK

Depending on the relationship, AppVibezz acts as either a Data Controller or a Data Processor:

  • Data Controller (Veri Sorumlusu): We act as the Data Controller for the personal data of our direct Customers (e.g., account registration details, email communications, billing address, payment details).
  • Data Processor (Veri İşleyen): We act as a Data Processor for any personal data collected from End Users through the AppVibezz SDK embedded in our Customers' mobile applications. Our Customers act as the Data Controllers for their End Users' data, and we process this data solely on their behalf and in accordance with their documented instructions.

3. Information Collected via our SaaS Platform (Customers)

When you register for an AppVibezz account, use our dashboard, or communicate with us, we collect:

  • Account Data: Name, email address, password, company name, and website.
  • Billing and Transaction Data: Billing address, credit card tokenized tokens (via third-party payment processors), subscription choices, and transaction history.
  • Communication Data: Inquiries, tickets, or correspondence sent to info@appvibezz.com or via support channels.

4. Information Collected via the SDK (End Users)

Our SDK is designed to help developers track mobile app performance, subscriptions, revenue, and detect fraud. When integrated into a Customer's app, the SDK automatically collects and transmits the following pseudonymized data types:

  • Device Identifiers: Advertising IDs (Apple IDFA, Google GAID/GAID), Vendor ID (IDFV), or other custom installation tokens.
  • Device & Network Specs: Device model, operating system version, screen resolution, locale/language settings, country (derived from IP address), and network connection type.
  • Transaction & Purchase Data: In-app purchase receipts, subscription states, product IDs, currency, price, transaction time, and subscription lifecycle events (e.g., renewals, trial start, churn, failed charges).
  • App Usage & Custom Events: App launches, user registrations, custom events defined by the developer (e.g., custom actions, levels completed), and session durations.
  • Fraud & Signal Data: Device velocity parameters, IP address ranges, and signals indicating potential emulator usage or refund abuse.

5. Developer Store Compliance (App Store & Google Play)

If you are a Developer using AppVibezz, you must update your app's privacy policies to disclose the use of third-party analytics SDKs and the processing of End User data.

To satisfy the **Apple App Store Privacy Details (Nutrition Labels)** and **Google Play Data Safety Forms**, you should declare that your app collects the following categories of data for "Analytics" and "Developer Communications":

  • Purchases: Purchase history (to verify and track subscriptions).
  • Identifiers: Device ID, User ID (if mapped), and Advertising IDs (IDFA/GAID).
  • Usage Data: Product interaction (custom events and navigation).
  • Diagnostics: Performance data.

6. Purposes and Legal Basis of Processing

We process personal data based on the following legal grounds under GDPR and KVKK:

  • Performance of a Contract: To set up, operate, and maintain Customer accounts and billing.
  • Legitimate Interest: To monitor system health, optimize our SDK performance, prevent fraud (such as refund abuse), and improve our product.
  • Consent: When the End User consents to tracking within the Customer's app, or when a Customer signs up for marketing communications.

7. Data Sharing and Transfers

We do not sell, rent, or trade your personal data. We only share information with:

  • Service Providers: Sub-processors who host our database, process credit cards, or manage support tickets (e.g., cloud hosts, billing services).
  • Legal Requirements: Competent judicial or administrative authorities in response to a lawful request or warrant.

Our services are hosted on secure servers, and we implement Standard Contractual Clauses (SCCs) and data processing agreements where cross-border transfers occur.

8. User Rights

Depending on your residency (GDPR, CCPA, or KVKK), you have rights regarding your personal data:

  • Access: The right to request copies of your personal data.
  • Rectification: The right to correct inaccurate or incomplete data.
  • Erasure (Right to be Forgotten): The right to request deletion of your personal data.
  • Data Portability: The right to receive your data in a structured, machine-readable format.
  • Objection: The right to object to the processing of your data under specific conditions.

If you are an End User, please note that we process your data on behalf of our Customers. To exercise your rights, please submit your request directly to the publisher of the app you are using. We will assist the Customer in responding to your request.

9. Data Security and Retention

We employ industry-standard technical and organizational security measures to protect your data, including end-to-end TLS encryption in transit and AES-256 encryption at rest.

We retain Customer account data as long as the account remains active, and End User analytics data for up to 24 months, after which it is aggregated or permanently deleted, unless a longer retention period is instructed by the Customer.

10. Contact Information

If you have any questions or wish to exercise your rights, please contact our Data Protection Office:

Aloha Dijital Bilişim Eğitim ve Danışmanlık A.Ş.
Marmara University Teknopark, Başıbüyük Dist.
Süreyya Paşa Başıbüyük St. 4/1 No:1
Maltepe, Istanbul 34854, Turkey
Phone: 0850-757-9427
Email: info@appvibezz.com