Privacy Policy — Prufiva

Prufiva helps you document your home by filming it, and turns that footage into sealed, verifiable reports. Doing that job requires handling some personal data. This policy explains exactly what we collect, why, where it lives, and what your rights are. We keep it in plain language on purpose.

The service is operated by Berkay Kırmızıoğlu (Istanbul, Türkiye) ("Prufiva", "we"). For anything in this policy, you can reach us at support@prufiva.app.

The short version

We collect only what the app needs to work. There is no advertising, no tracking across other apps or websites, and we never sell data.
Your videos, photos, and reports are private to your account, stored encrypted in the European Union.
You can start anonymously. You can delete your account and its data from inside the app at any time.

What we collect and why

Data	Why we need it
Videos and photos of your rooms and belongings	This is the product: the footage is analyzed to build your inventory and is sealed as evidence for your reports.
Account identifiers (a user ID; email if you create an account)	To keep your data yours and let you sign in on a new device. You can use Prufiva without an account — an anonymous ID is created on first launch.
Name and property address (optional)	Printed on official reports as "prepared by" and the property being documented — only if you enter them.
Signer email addresses used in countersigning	To send the one-time code that verifies a signer. The full address exists only for as long as it takes to send that code — it is never written to our database. We keep two derived forms instead: a masked version, which is what the report prints (e.g. b***@gmail.com), and a salted cryptographic hash, which lets us recognize the same signer again without keeping their address. Verification codes are deleted within 48 hours. When a signature is placed we also record the signer's IP address and browser type as part of the signature's evidence trail.
Purchase history (Report Credits)	To credit your purchase and show your balance. Payment itself is handled entirely by Apple — we never see card details.
Usage analytics	With your consent, pseudonymous events about how the app is used (screens visited, features completed, device model and OS version) via Google Analytics for Firebase — configured without the advertising identifier. Used only to improve the product; never for ads or cross-app tracking.

Everything above is used solely for app functionality. We do not use your data for advertising or profiling, and we do not track you across other companies' apps or websites.

Why we are allowed to process it

Each purpose below has a legal basis under the GDPR and, for users in Türkiye, under the KVKK.

Running your account, storing and sealing your videos, building your reports — because we cannot provide the service you asked for without it (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
Analyzing a video you filmed — same basis: the inventory is the product you came for (GDPR Art. 6(1)(b); KVKK Art. 5(2)(c)).
Emailing a one-time code to a counterparty you invited — to perform the countersigning you started, and because verifying who signed is a legitimate interest of both parties (GDPR Art. 6(1)(b) and (f); KVKK Art. 5(2)(c) and (f)).
Purchases and receipts — to complete the purchase and to meet record-keeping duties (GDPR Art. 6(1)(b) and (c); KVKK Art. 5(2)(a) and (c)).
Usage analytics — only with your consent, which you can withdraw at any time in Settings (GDPR Art. 6(1)(a); KVKK Art. 5(1)).
Keeping a sealed record intact after you delete other data — the proof we issued would be worthless if it could be quietly withdrawn (GDPR Art. 6(1)(f); KVKK Art. 5(2)(f)).

How we collect it

Directly from you: what you type into the app, and the rooms you film. From the service itself, automatically: the SHA-256 fingerprint and upload timestamp we generate the moment a video arrives, the report numbers we issue, and — only if you allowed analytics — pseudonymous usage events. And from a counterparty you invited to countersign a report: when they sign, we receive their email address, which we keep in the masked and hashed forms described above, together with the IP address and browser type recorded as part of the signature's evidence trail. We do not buy data about you and we do not receive it from data brokers.

Where your data lives

Data is stored with Supabase in the European Union (Frankfurt, Germany), encrypted at rest and in transit. Media lives in private storage buckets accessible only to your account. Row-level security rules enforce that isolation at the database itself.

Service providers

We share data only with the processors required to run the service, each bound by their own data-protection terms:

Supabase — database, storage, and authentication (EU region).
Google (Gemini API) — analyzes your video to detect items. Footage is sent for analysis and is not used to train Google's models under the paid API terms.
Apple — processes in-app purchases.
RevenueCat — validates purchases and manages credit entitlements (receives your user ID and purchase events, nothing else).
Google Analytics for Firebase — pseudonymous usage analytics, only with your in-app consent (which screens and features are used, on what device model and OS version). Configured without the advertising identifier (IDFA): no ads, no cross-app tracking, no audience sharing.
Resend — delivers our transactional email (countersign verification codes, account emails), processing the recipient address for delivery (EU region).
ImprovMX — forwards email you send to our @prufiva.app addresses (such as support) to our inbox, processing the message and your sender address in transit.

We never sell personal data, and we don't share it with data brokers or advertisers.

Data that leaves Türkiye and the EEA

Your account, videos and reports are stored in Supabase's EU (Frankfurt) region. These processors operate outside Türkiye and the EEA, so sending data to them is a cross-border transfer:

Google (Gemini API), United States — the video you filmed is sent for analysis and is not used to train Google's models under the paid API terms.
Apple (United States, Ireland) — sign-in and purchases.
RevenueCat, United States — purchase validation.
Google Analytics for Firebase, United States — only if you allowed analytics.

For users in the EEA these transfers rely on the providers' Standard Contractual Clauses. For users in Türkiye they are made so that the service you requested can be delivered; using Prufiva means these transfers happen, and if you would rather they did not, the service cannot work for you.

How long we keep it

Your inventory, videos, and reports are kept for as long as you keep your account — that permanence is the point of sealed evidence. Housekeeping removes only what never became part of your records: uploads whose analysis permanently failed are deleted within about a week, and stray files left behind by interrupted uploads within a day. Countersign verification codes are purged within 48 hours. Deleting a room or an item inside the app removes it from your inventory but does not destroy the sealed record it already belongs to — a report that could be quietly emptied afterwards would not be proof. Deleting your account deletes the account and its data from our live systems; encrypted backups still holding copies expire on their own rolling schedule.

Your rights

Under the GDPR and Türkiye's KVKK you can access, correct, export, or delete your personal data, object to or restrict processing, and lodge a complaint with your supervisory authority (in Türkiye, the KVKK Board; in the EU, your local DPA).

The fastest path for deletion is built in: Settings → Account → Delete account removes your account and its data. For anything else, email support@prufiva.app and we'll respond within 30 days.

Children

Prufiva is not directed at children and is intended for users aged 13 and over.

Changes

When we make a material change to this policy, we ask you to accept the new version inside the app before you carry on using it, and we record when you did. Minor corrections that do not affect your rights are published here with a new effective date.