Prufiva
Privacy Policy
Effective 1 September 2026
Prufiva helps you document your home by filming it, and turns that footage into sealed, verifiable reports. Doing that job requires handling some personal data. This policy explains exactly what we collect, why, where it lives, and what your rights are. We keep it in plain language on purpose.
The service is operated by Berkay Kırmızıoğlu (Istanbul, Türkiye) ("Prufiva", "we"). For anything in this policy, you can reach us at support@prufiva.app.
The short version
- We collect only what the app needs to work. There is no advertising, no tracking across other apps or websites, and we never sell data.
- Your videos, photos, and reports are private to your account, stored encrypted in the European Union.
- You can start anonymously. You can delete your account and its data from inside the app at any time.
What we collect and why
| Data | Why we need it |
|---|---|
| Videos and photos of your rooms and belongings | This is the product: the footage is analyzed to build your inventory and is sealed as evidence for your reports. |
| Account identifiers (a user ID; email if you create an account) | To keep your data yours and let you sign in on a new device. You can use Prufiva without an account — an anonymous ID is created on first launch. |
| Name and property address (optional) | Printed on official reports as "prepared by" and the property being documented — only if you enter them. |
| Phone numbers used in countersigning | To send the one-time code that verifies a signer. Stored only as a salted cryptographic hash; reports show a masked form (e.g. +90*******10). Verification codes are deleted within 24 hours. |
| Purchase history (Report Credits) | To credit your purchase and show your balance. Payment itself is handled entirely by Apple — we never see card details. |
Everything above is used solely for app functionality. We do not use your data for advertising or profiling, and we do not track you across other companies' apps or websites.
Where your data lives
Data is stored with Supabase in the European Union (Frankfurt, Germany), encrypted at rest and in transit. Media lives in private storage buckets accessible only to your account. Row-level security rules enforce that isolation at the database itself.
Service providers
We share data only with the processors required to run the service, each bound by their own data-protection terms:
- Supabase — database, storage, and authentication (EU region).
- Google (Gemini API) — analyzes your video to detect items. Footage is sent for analysis and is not used to train Google's models under the paid API terms.
- Apple — processes in-app purchases.
- RevenueCat — validates purchases and manages credit entitlements (receives your user ID and purchase events, nothing else).
- Twilio — delivers countersigning SMS codes.
We never sell personal data, and we don't share it with data brokers or advertisers.
How long we keep it
Your inventory, videos, and reports are kept for as long as you keep your account — that permanence is the point of sealed evidence. Countersign verification codes are purged within 24 hours. If you delete your account, your data is deleted from the live systems and expires from encrypted backups on their rolling schedule.
Your rights
Under the GDPR and Türkiye's KVKK you can access, correct, export, or delete your personal data, object to or restrict processing, and lodge a complaint with your supervisory authority (in Türkiye, the KVKK Board; in the EU, your local DPA).
The fastest path for deletion is built in: Settings → Account → Delete account removes your account and its data. For anything else, email support@prufiva.app and we'll respond within 30 days.
Children
Prufiva is not directed at children and is intended for users aged 13 and over.
Changes
If this policy changes in a way that matters, we'll update the date at the top and note the change in the app. Continued use after a change means the updated policy applies.