Privacy Policy

1. Scope & who is responsible

1.1 Services covered

This policy covers the StoryMahzeni mobile application, this informational website, and our support channels. It explains our data practices; it is not a request for blanket consent to every processing activity.

1.2 Data controller

StoryMahzeni is operated by Yusuf Yılmaz in Türkiye. For privacy enquiries and requests, contact destek@storymahzeni.com. We may request proportionate information to verify that you are entitled to access or change the account concerned.

1.3 Related policies

Read this policy alongside our Terms of Use / EULA and Child Safety Standards. Third-party services explain their own processing in their privacy notices.

2. Information we process

2.1 Account and profile

Depending on how you sign in, we process:

• Your email address, authentication identifiers, session information, and sign-in provider details needed to maintain your account.
• Your chosen display name, prepared avatar, optional biography, and account settings.
• Your acceptance of the community terms, including the terms version and acceptance time.

2.2 Content and interactions

We process the information you create or use in community features:

• Stories, drafts, comments, reactions, saves, follows, and reading activity.
• Private messages, conversation information, blocks, reports, and moderation records.
• The content of a support request and the contact details you provide.

2.3 Technical and purchase information

We process information needed to operate the service:

• IP addresses and security or hosting logs, app version, device-related diagnostics, and session records.
• Push-notification tokens when notifications are enabled.
• Purchase identifiers, transaction status, and subscription entitlements. App stores handle your full payment-card details.

2.4 Optional AI requests

When you request AI-assisted writing, your submitted prompt or text is processed to produce a response. Do not put identity documents, passwords, financial information, or other sensitive personal data in a prompt.

3. Purposes & legal bases

3.1 Providing the service

Account authentication, publishing, reading, private communication, subscriptions, and requested support rely on processing necessary to provide the service and perform our agreement with you.

3.2 Safety and reliability

We process reports, security information, and relevant content to prevent abuse, enforce our rules, investigate incidents, and protect legal rights. Where applicable, this relies on legal obligations or legitimate interests that must not override your fundamental rights.

3.3 Separate choices

Where consent is required for an optional activity, it must be requested separately. Accepting the EULA is not blanket consent to advertising, tracking, or unrelated personal-data processing. You can withdraw consent for consent-based processing without affecting earlier lawful processing.

4. Public content, anonymity & messages

4.1 What other users can see

Published stories, comments, your chosen display name and avatar, and relevant public interactions can be visible to other users. Your account email is not displayed as public profile information. Information you put in your own content can identify you.

4.2 What anonymity means

Using a pseudonym does not make activity untraceable to StoryMahzeni or exempt it from moderation. Account, security, and activity records are processed to run the service and respond to valid legal requests.

4.3 Private communications

Private messages are not end-to-end encrypted. Relevant messages and associated records may be accessed for support, safety investigations, enforcement, or legal obligations. Do not send secrets or sensitive records through messages.

5. Sharing & service providers

5.1 Operational providers

We do not sell your personal data. Providers process information relevant to the features they support:

• Supabase: account authentication, database, and infrastructure.
• OpenRouter and the selected model providers: processing the AI requests you choose to submit.
• Apple, Google, and RevenueCat: supported sign-in, app-store purchases, and subscription entitlements.
• Expo and Firebase: notification and delivery infrastructure.
• Google AdMob: advertising in the free mobile app, subject to applicable permissions and choices.
• Resend: service email delivery. Netlify: hosting this website.

5.2 Safety and lawful disclosure

We may disclose relevant records when necessary to investigate abuse, protect people, exercise or defend legal rights, or comply with applicable law and valid legal process. Disclosure is limited to information relevant to the purpose.

5.3 International processing

Some providers operate outside Türkiye. International transfers must use a lawful basis and the safeguards required by the applicable data-protection rules. Acceptance of these terms alone does not replace a legally required transfer mechanism.

6. AI writing & your text

6.1 What is sent

The prompt or text you submit is sent through our AI infrastructure to produce or edit the requested output. StoryMahzeni does not automatically add your email address or display name to your prompt. Anything you type into a prompt is included in the text sent.

6.2 Use and retention

StoryMahzeni does not use AI requests to train its own AI model. Provider handling and retention depend on the provider and model used. We do not promise that every provider immediately deletes a request or has identical policies. Text you publish is handled as community content.

6.3 Your choices

AI writing is optional. Review the output before publishing and avoid including confidential or third-party personal information. Contact support if you need information about a particular request.

7. Website storage, ads & notifications

7.1 This website

The public site provides information and links to the app. Its hosting provider processes technical request information needed to deliver and secure pages. Following an app-store link does not create an account or record acceptance of the app’s terms. This website does not add an advertising or analytics tracker through these policy pages.

7.2 Mobile app storage and advertising

The app uses local storage for sessions, preferences, and feature data. Advertising SDKs in the free app may process advertising identifiers and related device information according to your platform permissions and applicable consent choices. Website browsing does not grant mobile tracking permission.

7.3 Notification choices

You can control notification permissions in device settings. Push tokens are used for delivery; disabling permission may stop notifications without deleting your account.

8. Retention, account deletion & backups

8.1 How long information is kept

We retain data for the service purpose it supports, taking account of account status, safety investigations, legal duties, disputes, and technical needs. Different categories have different retention needs; we do not claim a single fixed period for all data.

8.2 Deleting your account

Use Settings → Delete Account in the app, or contact destek@storymahzeni.com if you cannot access it. Account deletion is permanent. It removes the account and associated content through the deletion process; limited records may remain where required for law, security, or unresolved claims.

8.3 Copies outside your control

Backups, store transaction records, legal records, and copies saved by other people may not disappear at the same time as live account data. Deleting the app does not delete your account. Deleting an account does not cancel an app-store subscription.

9. Your rights & how to request them

9.1 Rights under applicable law

Depending on the law that applies, you may request:

• Confirmation of processing, information about its purpose, and information about recipients.
• Access to your information and correction of inaccurate or incomplete records.
• Deletion or destruction where the legal conditions are met, and notification of relevant corrections or deletion to recipients.
• An objection to an adverse result produced solely through automated analysis, and other objections or restrictions available under applicable law.
• Compensation where statutory conditions are met; withdrawal of consent for consent-based processing. Additional rights, such as portability, may apply in your jurisdiction.

9.2 Making a request

Email destek@storymahzeni.com with the account concerned and a clear description of your request. Do not send a password or unnecessary identity documents. We may verify identity proportionately and respond within the time required by applicable law. You may complain to the competent data-protection authority where permitted.

10. Security, children & policy updates

10.1 Security

We use measures such as encrypted connections, authentication, and access restrictions to protect information. No system is completely secure. Keep your credentials private and report suspected compromise promptly.

10.2 Adults only

StoryMahzeni is for people aged 18 and over. We do not knowingly offer accounts to children. If you believe an underage person has an account, contact us so we can investigate and take appropriate action. See our Child Safety Standards.

10.3 Changes and contact

We update this page when practices change and revise its date. Material changes may require additional notice or consent where applicable. Privacy questions can be sent to destek@storymahzeni.com.