HERAZUR LLC / İKİMİZ

İkimiz privacy policy

Effective October 2, 2026

This policy explains how Herazur LLC (“we”, “us”) handles information in İkimiz, an app for couples: you send your partner a photo with a doodle and a short note, and it appears on the home-screen widget of their phone. İkimiz is published on Google Play (package com.herazur.ikimiz). Bu politikanın Türkçesi ve KVKK aydınlatma metni.

Summary

• You do not need an email address, phone number, or password. The app creates an anonymous account for you.
• Your cards can be opened only by you and the one partner you pair with.
• There are no ads. We do not sell your personal information or use it to track you across other companies’ apps or websites.
• You can delete your account, your cards, and your pairing at any time from inside the app.

Information we collect

Account

When you first open the app, Firebase Authentication creates an anonymous account identified by a random user ID. We do not ask for your email address, phone number, or a password.

Profile and pairing

The name or nickname you enter, which your partner sees; the six-character pairing code while it is waiting to be used; the link between you and your partner; the date you got together and any special days you add; and your app language, so that notifications reach you in your language.

Cards

Each card you send contains one image (the photo or background you chose, combined with your drawing), your note, the time you sent it or scheduled it to appear, when it was delivered to and seen on your partner’s phone, and any reaction, such as a ❤️. You choose photos with the Android photo picker or the system camera; the app does not request access to your photo library or camera, and only the finished card image is uploaded.

Notifications

To tell your partner that a card has arrived, we store a push token for your device. Notifications are delivered by Firebase Cloud Messaging and show the sender’s name and the card’s note.

Purchases

İkimiz is free to use. If you buy İkimiz+, Google Play processes the payment and we never see your card details. RevenueCat tells us whether your purchase is active, linked to your random user ID. We store that status on your account and on your pairing, because one purchase unlocks İkimiz+ for both of you.

Crash reports

If the app crashes, Firebase Crashlytics sends us the device model, Android version, a random installation identifier, and technical details of the error. Your cards and notes are not included.

What we do not collect

We do not collect your location, contacts, microphone audio, or advertising ID, and we do not use analytics or advertising tools.

Information that stays on your phone

Copies of card images, the content shown in your widgets, and your settings are kept on your device. If you choose to use a card as your lock screen, the app sets it as your wallpaper on your phone. The optional app lock uses Android’s fingerprint, face, or screen-lock check; we never receive biometric information.

Permissions

Notifications: asked for after you pair, to tell you when a card or a ❤️ arrives. Set wallpaper: used only when you choose to make a card your lock screen. You can change these in your device settings at any time.

How we use information

We use information to create your anonymous account and pair you with your partner; deliver cards, reactions, and widget updates; send the notifications described above, including a reminder two days before a free trial ends; provide and restore İkimiz+ for both of you; keep the service secure and prevent abuse; fix crashes; respond to your requests; and meet legal obligations.

Who can see your cards

Only the two members of a pairing can read its cards. Our database security rules enforce this, and the app’s premium status can be changed only by our server. We do not look through your cards; access to stored data is limited to what is needed to run the service, respond to your requests, investigate abuse reports, or comply with the law.

Service providers

We share information only with providers that process it on our behalf to run the app:

• Google Firebase (Authentication, Cloud Firestore, Cloud Functions, Cloud Messaging, Crashlytics): accounts, card storage, server functions, notifications, and crash reports.
• RevenueCat: purchase status for İkimiz+.
• Google Play: app distribution and in-app purchases.

We may also disclose information if required by law or to protect the rights, safety, or security of our users or others. We do not sell personal information or share it for cross-context behavioral advertising.

Where data is processed

Accounts, cards, and server functions are hosted by Google Firebase in the European Union (Belgium, europe-west1). Crash reports, notification delivery, and purchase records may be processed by Google and RevenueCat in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the providers’ standard contractual clauses.

Retention

• Your profile is kept while your account exists.
• A card is kept until its sender deletes it or deletes their account.
• When either of you ends the pairing, neither of you can open that pairing’s cards any more.
• Unused pairing codes are deleted within about a day.
• Crash reports are kept for Crashlytics’ standard retention period of 90 days. Purchase records held by Google Play or RevenueCat may be retained as the law requires.

Deleting your account

In the app, open Settings → Account → Delete my account and confirm. This permanently deletes your profile, every card you have sent, its images, and your pending pairing code, ends your pairing, and deletes your account. It cannot be undone. Cards your partner sent you belong to their account: after your deletion, neither of you can open them, and they are deleted when your partner deletes their account or asks us to.

Uninstalling the app does not delete your account. Deleting your account does not cancel an İkimiz+ subscription: cancel it in Google Play under Payments & subscriptions → Subscriptions.

If you can no longer use the app, email support@herazur.us with the subject “İkimiz account deletion”, the name you used in the app, your partner’s name, and roughly when you paired. Because accounts are anonymous, we use these details to find yours, and we will confirm when it has been deleted.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, to object to or restrict certain processing, and to withdraw consent. You can change your name and dates in the app and delete your data as described above. For other requests, email support@herazur.us. We aim to respond within 30 days and will not discriminate against you for exercising your rights. You may also complain to your local data protection authority.

Security

Data is encrypted in transit. Each pairing’s cards can be read only by its two members, and premium status can be written only by our server. No method of transmission or storage is completely secure.

Children

İkimiz is intended for people aged 16 and over and is not directed to children. We do not knowingly collect personal information from children under 16. If you believe a child is using the app, contact us and we will delete their account.

Changes to this policy

If we change how we handle information, we will update this page and its effective date and, for significant changes, tell you in the app.

Contact

Questions or requests about this policy: support@herazur.us.