MİAT Global Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how MİAT ("Application", "Service", "We", "Us") collects, processes, and protects your personal data when you use the website (miat.app) and our iOS/Android mobile applications.

1. Categories of Data Processed

• Account Information: Account ID (Firebase UID), name, email, sign-in provider, account creation date and optional profile photo. Profile photos may be synced using Firebase.
• Support Content: Messages, optional images and account/app information submitted with your support request.
• User Generated Content: User-entered reminder titles, expiration dates, custom notes, category tags, and country selection.
• Device and Technical Telemetry: Push notification tokens (Apple APNs / Google FCM), operating system version, device model, language setting, and crash diagnosis logs.
• Subscription Verification Data: RevenueCat verifies purchases and subscriptions linked to your MİAT account ID; these data are not described as anonymous. The new client version does not send name/email customer attributes. Attributes submitted by previous versions may remain subject to the provider's retention and deletion processes. MİAT does not directly store payment card or bank account credentials.

2. Strict Zero-Credential Architecture

MİAT does not request government or bank passwords, CVVs, biometric data or identity-document scans. Do not upload these in notes, profile photos or support attachments. Official links only redirect you to the relevant institution.

3. Legal Bases and Processing Purposes

Under GDPR Article 6 and equivalent international frameworks, personal data is processed on the following grounds:

• Performance of a Contract: To manage user accounts, deliver reminder alerts, and maintain encrypted cloud sync.
• Legitimate Interests: To detect crashes, safeguard network security, and prevent abusive bot behavior.
• Compliance with Legal Obligations: To adhere to accounting, consumer protection, and statutory data subject requirements.

4. Third-Party Infrastructure & Data Transfers

The following providers help deliver the service. Data may be processed in countries where they operate. For privacy or transfer inquiries, contact kvkk@miat.app. This notice is not an independent certification or a guarantee of compliance in every country.

• Database & Authentication: Google Cloud / Firebase (Firestore).
• Subscription Management: RevenueCat Inc.
• CDN & Security: Cloudflare Inc.
• Storefront & Delivery: Apple Inc. and Google LLC.

5. Regional Privacy Rights (Country Addenda)

6. Data Retention & Deletion

Account data are retained as needed to provide the service. Start deletion via Profile > Account Details > Delete account permanently. A successfully completed deletion removes app account and record data. Provider backups, support records and legally required store transactions may follow separate retention periods. Exported copies on other devices are not automatically deleted. Deleting your account does not cancel an active subscription; cancel it separately in your store account.

7. Contact Us

For data protection inquiries, email kvkk@miat.app.