Who we are (data controller)
Mustafa Baykal (Individual Developer), jurisdiction: Republic of Türkiye.
For all privacy-related questions: mustafabaykal91@gmail.com
What we collect
- Nothing personal. ProjePulse does not require an account or collect identifying information about you.
Data processors and international transfers
We use the following processors. All have signed Data Processing Agreements (DPAs); transfers to the United States are additionally protected by Standard Contractual Clauses (SCCs) per GDPR Articles 44–49 (post-Schrems II).
| Processor | Purpose | Location | DPA | SCC |
|---|---|---|---|---|
| Apple, Inc. | App Store distribution, TestFlight beta distribution and the optional Face ID / passcode lock, which is handled entirely by iOS. We never receive biometric data. | Global | ✓ | N/A |
Data retention
We keep data only as long as necessary for the purpose collected, or as required by law (GDPR Art. 5(1)(e); KVKK Art. 7).
| Data type | Retention period | Reason |
|---|---|---|
| Program data you create or import (components, work steps, blockers, actions, decisions, change log, snapshots, members and roles, settings) | until-deletion | Stored only in a local database on your device so the app can work. It never leaves your device unless you export or share it yourself. Deleted when you delete the program or uninstall the app. |
| Copies of Excel files you import | until-deletion | Kept on your device so you can review import history, roll back an import and export back into your team's own template. Removed when you delete the program or uninstall the app. |
Local-first: your data stays on your device
ProjePulse has no backend, no account and no cloud sync in this version. The app makes no network requests while you use it. Everything you import or enter — project names, people's names in the Sorumlu (owner) column, notes, blockers, decisions — is stored in a local database on your iPhone or iPad. We (the developer) never receive, see or store any of it.
Data leaves your device only when you choose
The only ways data leaves ProjePulse are actions you start yourself: exporting an Excel, CSV, PDF, PNG or JSON backup and sharing it through the iOS share sheet (Mail, Files, Teams and so on). From that point the receiving app's or service's own privacy policy applies.
Work data you import
The Excel trackers you import may contain the names of colleagues (for example in the owner column) and internal project information. You are responsible for importing only data you are allowed to process. Because ProjePulse never transmits this data to us, we cannot access, analyze or share it. Use the optional Face ID / passcode lock and per-member PIN codes to restrict access on a shared device.
Users and permissions
ProjePulse lets you define members and roles (program owner, PMO, team lead, contributor, viewer) on your device. Member names, roles, component scopes and hashed PIN codes are stored locally and are used only to control what each person can do in the app on that device. They are never transmitted to us.
We do NOT collect
We do not collect or use: your name, email address, phone number, location, contacts, photos, microphone, camera, health data, advertising identifier (IDFA), browsing history or biometrics. There are no third-party analytics, crash-reporting or advertising SDKs in ProjePulse.
Notifications
Optional reminders (such as the weekly update reminder or the overdue-blockers digest) are scheduled locally on your device with iOS local notifications. No push-notification server is involved and no device token is sent anywhere.
Children's privacy
ProjePulse is a business productivity tool intended for working professionals and is not directed at children. It collects no personal data from anyone.
Automated decision-making (GDPR Art. 22)
Health labels such as Yolunda (on track), Riskli (at risk) and Kritik (critical) are calculated on your device from the data you enter, using the same transparent formulas as your Excel tracker. They are project status indicators, not decisions about people, and they produce no legal or similarly significant effects.
We do not sell or share your data
We do not sell, rent, trade or share any personal information — we never receive it in the first place.
Your rights
- Access — request a copy of any data we hold about you.
- Rectification — request correction of inaccurate data.
- Erasure — request deletion (see Delete account).
- Portability — receive your data in a machine-readable format.
- Restriction — restrict processing in certain circumstances.
- Objection — object to processing based on legitimate interests.
- Object to automated decisions — the app does not make consequential automated decisions; you may still email us per GDPR Art. 22.
- Withdraw consent — for any processing based on consent.
- Lodge a complaint — with your local supervisory authority (in Türkiye: KVKK; in EU: your national DPA).
Legal bases for processing (GDPR Art. 6)
- Performance of a contract — processing payment receipts via Apple/RevenueCat to provide your subscription.
- Legitimate interests — anonymized analytics + crash reporting to improve the app.
- Consent — health permissions, push notifications, ATT tracking (you can withdraw at any time in iOS Settings).
- Legal obligation — retaining payment records per applicable tax law.
Children
ProjePulse is not directed at children under 13. We do not knowingly collect data from children under that age. If you believe a child has provided us data, contact mustafabaykal91@gmail.com and we will delete it within 30 days.
Security
We implement industry-standard security measures: TLS 1.3 for all network traffic, encrypted at rest where stored on third-party services, no plaintext credentials, principle of least privilege for data access. No system is 100% secure; if a breach impacts you, we will notify per GDPR Art. 33–34 (within 72 hours of discovery).
California / CCPA
California residents have the right to: (i) know what personal info we collect; (ii) delete personal info; (iii) opt out of sale (we do not sell); (iv) non-discrimination. To exercise: email mustafabaykal91@gmail.com with subject "CCPA request".
Changes
If this policy changes materially, the "Last updated" date will be revised. Significant changes will be flagged in-app and we will provide a 30-day notice period for objection where required by law.
Contact
Privacy questions: mustafabaykal91@gmail.com · Data subject requests: same email, subject "Data subject request".