Privacy Policy
Last updated: 2026-10-12
1. Introduction
BudgieBreedingTracker ("App") is a breeding tracker application developed for budgerigar breeders. This privacy policy explains how your personal data is collected, used, stored, and protected when you use the application. By using the App, you agree to this policy.
2. Data We Collect
2.1 Account Information
- Email address (for registration and login)
- Username and profile information
- Profile photo (optional)
2.2 App Data
- Bird records (name, gender, color mutation, ring number, etc.)
- Breeding pair, egg and offspring information
- Incubation tracking data
- Health records and growth measurements
- Genetic computing history
- Calendar events and reminders
- Photos of birds, eggs and chicks
2.3 Automatically Collected Data
- Application crash reports and error logs (via Sentry)
- Device type and operating system version
- App usage statistics (screen navigation data)
3. How We Use Your Data
- User account creation and authentication
- Saving and synchronizing your bird breeding data
- Genetic calculations and family tree creation
- Send hatching reminders and notifications
- Data backup and restore
- Detecting and fixing application errors
- Improve application performance
4. Data Storage and Security
Your data is stored in a two-layer architecture:
- Local storage: App data is stored in an SQLite database on your device. Sensitive bird fields such as ring number, genotype information, and notes are protected with AES-256-CBC and HMAC.
- Cloud storage: Supabase (PostgreSQL) infrastructure is used for synchronization. Access is restricted through account- and role-based Row Level Security (RLS) policies.
- Photos: Photos are stored in cloud storage. Access is restricted through account- and role-based storage policies.
- Backups: Optional backups can be protected with AES-256-CBC and HMAC using the device key.
All data communication is encrypted via HTTPS/TLS protocol.
5. Data Sharing
We do not sell or rent your personal data to third parties. Your data may only be shared in the following cases:
- Service providers: Supabase (database and authentication), Sentry (error reporting) — only data necessary to operate the service is shared.
- Payment management: RevenueCat (subscription and purchases) — only subscription status and transaction data is shared.
- Image safety scanning: OpenAI (content moderation) — profile photos, message photos, listing photos, community photos and feedback screenshots are sent to OpenAI through our server (a Supabase Edge Function) to check for inappropriate content before they are uploaded. Only the image is sent; your name, email address or bird records are not. Bird, egg and chick record photos are not sent for this scan.
- Advertising service: Google AdMob (ad display) — device identifiers and ad preferences are shared. Tracking permission is also requested for personalized advertising display.
- Legal obligation: When required by legal regulations or court orders.
6. User Rights
You have the following rights:
- Right of access: You can access your stored personal data from within the application.
- Right to correction: You can update your profile and bird data at any time.
- Right of deletion: You can delete your data from within the app or close your account completely.
- Export right: You can export your data in PDF or Excel format.
- Backup right: You can create and download an encrypted backup.
7. Children's Privacy
Our app is not intended for children under 13 years of age. We do not knowingly collect personal data from children under 13. If you become aware that a child under 13 has provided us with personal data, please contact us. We will delete such data immediately.
8. Cookies and Tracking
The App does not use cookies. Sentry SDK is used for error reporting purposes, and this service only collects anonymous technical data to detect app crashes and performance issues. Google AdMob SDK is used for ad serving; personalized ad tracking is only enabled with explicit user consent (ATT approval).
On this website, Google Analytics loads only after your explicit consent. Optional measurement includes the page path, language, allowlisted campaign tags, whether a calculation occurred, and store-link clicks. Calculator inputs and results are never sent. You can withdraw consent using the Privacy settings button.
9. Data Retention
- Account data: Stored as long as your account is active.
- App data: Stored until you delete it.
- Error reports: Automatically deleted after 90 days.
- Account deletion: When you delete your account, all your data will be permanently removed within 30 days.
10. Policy Changes
We may update this privacy policy from time to time. When significant changes are made, we will notify you via in-app notification or email. The updated policy takes effect as soon as it is published on this page.
Community Data
The following data is processed when you use community features:
- Profile information: Username, avatar, bio, and public visibility preferences.
- Shares: Post contents (text, images), comments, likes and notification interactions.
- Friendship/following relationships: Follower and following lists.
- Moderation data: Reported content history, moderation notes (access only by authorized personnel).
You can delete your posts from your account settings. When you close your profile, your posts will also be removed.
Marketplace Data
The following data is processed when you use the Marketplace feature:
- Ad information: Bird species, price, description, location (by city), photos.
- Seller/buyer match: Postings of interest, conversations started.
- Reviews: Seller ratings and reviews (public).
We do not collect payment or personal contact information for Marketplace transactions; the parties agree among themselves. You can remove your ad at any time.
Messaging Data
When you use the private messaging feature:
- Message contents: It is stored on the server, visible to the parties; messaging is not end-to-end encrypted but the transport layer is protected by TLS.
- Moderation: When abuse reports are reviewed, authorized personnel can view the reported messages.
- Right of deletion: You can delete your own messages; It is up to the parties to completely remove the chat.
Local AI Analysis
While the genetic prediction AI analyzes your bird photo:
- Ollama (local model): The photo is sent only to the Ollama endpoint you configure on your local network; it is not sent to the BudgieBreedingTracker cloud.
- OpenRouter (optional): When explicitly selected, the photo is sent to the OpenRouter API over HTTPS; provider-side processing and retention are governed by OpenRouter policies.
- Storage and size: Analysis results are stored on your device and/or in account sync; scanned images have a 2 MiB raw-file limit.
Premium Delay (Grace Period)
When your Premium subscription expires or renewal fails:
- A 3-day deferral window is offered; During this period, access to premium features continues.
- Once the deferment period is up, your account will automatically revert to the free plan; Your data will not be deleted, only free plan limits will be applied.
- The deferral status is cached on your device and verified against RevenueCat entitlements on the server.
Legal Compliance (KVKK & GDPR)
BudgieBreedingTracker operates within the framework of KVKK (Personal Data Protection Law No. 6698) in Türkiye and GDPR (General Data Protection Regulation) in the European Union. Your rights:
- The right to access, rectify, delete and move your data.
- Right to object to processing (Article 21 GDPR).
- The right to be informed about automated decision-making and profiling.
Send requests to privacy@budgiebreedingtracker.online. Data Controller: Bekir Efeoğlu.
11. Contact
If you have any questions or requests regarding our privacy policy, you can contact us: