Privacy Policy
This policy explains how the Romi app ("the app") and the romatizmam.com website handle your information. The app is developed by Can Bulgay ("we", "us"), who is the data controller under Turkish Personal Data Protection Law No. 6698 ("KVKK") and, where applicable, the EU General Data Protection Regulation ("GDPR").
1. Data you enter
Pain scores, affected body regions, morning stiffness, sleep quality, flare days, medications, doses and reminder times, notes, and your profile name and condition. This includes health data, which is a special category of personal data under KVKK Article 6 and GDPR Article 9.
2. Where your data is stored
All data is stored locally on your device. It may also be included in your device or iCloud backup, depending on your Apple settings. We do not run servers that receive or store your entries.
3. How the data is used
Only to provide the app's features: showing your history, sending medication reminders and generating reports. We do not use your data for advertising or profiling, and we never sell it. Medication reminders are scheduled locally on your phone; we do not use a server to send notifications and we do not collect a notification identifier for your device.
4. Sharing
We do not share your health records with anyone. When you export a PDF report, you choose the recipient through the iOS share menu; that transfer is under your control. Our only service provider is Sentry, for the optional error reports described in section 5.
5. Error reports and third parties
The app contains no third-party analytics or advertising SDKs. Error reports are optional: they stay off unless you turn on “Send error reports” on the app’s “Data & privacy” screen. If you turn it on, the following is sent when the app crashes or something goes wrong: the app version; device details such as phone model, operating system version, language, region and time zone; where the error happened; the technical names of the last actions before the error (for example, the name of the button that was tapped); and a random identifier specific to this installation. That identifier is not matched with your name or any other information; it only lets us see reports from the same installation together. Your entries, notes, medications and name are not sent, and your IP address is not stored. Reports are stored by our service provider Sentry (Functional Software, Inc., USA) on servers in the European Union (Germany). This means the data is transferred outside Turkey; no transfer takes place unless you turn the setting on. If you have chosen to share analytics with app developers in iOS settings, Apple may also provide us with anonymised crash reports. The romatizmam.com website has no analytics or advertising tools. The site may use a single cookie, valid for one year, to remember your language choice. Vercel, which hosts the site, may keep standard server logs, such as IP addresses, for a short time for security and operations.
6. Legal basis
Health data is processed on the basis of your explicit consent (KVKK Article 6(2); GDPR Article 9(2)(a)), given when you start entering data. You can withdraw consent at any time by deleting your entries or the app. Error reports are based on the consent you give by turning the setting on; you can withdraw it at any time by turning the setting off. Once it is off, no reports are sent.
7. Retention and deletion
Your data stays on your device until you delete individual entries, use “Delete my data” in the app, or remove the app. “Delete my data” and deleting the app permanently remove all of its data from the device. Error reports are deleted automatically after 30 days. Because the reports are not matched with your name, we cannot tell which ones are yours and delete them earlier.
8. Your rights
Under KVKK Article 11 and GDPR Articles 15–22 you have the right to access, correct, delete and port your data, to object to processing, and to complain to the Turkish Personal Data Protection Authority or your local supervisory authority. Because your data is held only on your device, most of these rights can be exercised directly in the app. You can also send requests to canbulgay@outlook.com; we will reply within 30 days at the latest.
9. Children
The app is not intended for children under 16 without the consent of a parent or guardian.
10. Changes to this policy
If we change this policy, we will update the date above. We will tell you in the app about any significant change.
11. Contact
Can Bulgay canbulgay@outlook.com canbulgay.com