01Who we are
DeferLabs (“DeferLabs”, “we”, “us” or “our”) is an independent studio that designs and develops mobile applications for iOS and Android. This Privacy Policy describes how we handle information when you use any of our mobile applications (the “Apps”), visit our website at deferlabs.com (the “Site”), or contact us for support — together, the “Services”.
DeferLabs is the developer and publisher of the Apps and is responsible for the personal data processed through the Services. You can reach us at any time at support@deferlabs.com.
02Scope
This policy applies to every App published by DeferLabs on the Apple App Store and Google Play, unless an App shows you its own privacy notice — in that case, the App-specific notice supplements this policy and takes precedence where the two differ.
Each App's store listing also summarises its data practices (Apple's “App Privacy” details and Google Play's “Data safety” section). This policy does not cover third-party websites or services that our Apps may link to; their own privacy policies apply.
03Information we collect
We follow a simple rule: collect as little as possible, and only for a clear purpose. Depending on which App you use and which features you choose, we may process the following.
Information you give us
- Account details — if an App offers accounts: your email address, display name and login credentials (passwords are stored in hashed form), or an identifier provided by Sign in with Apple or Google Sign-In.
- Content you create — anything you enter, save or upload inside an App, processed only to provide the feature you are using.
- Support messages — your email address and whatever you choose to include when you contact us.
- Feedback and survey answers — if you choose to share them.
Information collected automatically
- Device and app information — device model, operating system version, app version, language, region or time zone, and an app-specific installation identifier.
- Usage information — which features are used, session length and similar interaction data, which we use in aggregated or pseudonymised form.
- Diagnostics — crash logs, error reports and performance data that help us find and fix problems.
We do not access your contacts, photos, microphone, camera, precise location or health data unless an App clearly asks for your permission to power a specific feature. You can change these permissions at any time in your device settings.
Purchase information
In-app purchases and subscriptions are processed by Apple (App Store) or Google (Google Play). We never receive your full payment card details. We do receive limited transaction information — such as the product purchased, price, currency, transaction identifier, purchase date and subscription status — so we can unlock features, restore purchases and help you with billing questions.
When you visit this website
The Site does not use advertising or tracking cookies. Our hosting provider may process standard server logs (such as IP address, browser type and pages requested) to keep the Site secure and reliable. The Site loads web fonts from Google Fonts; when it does, your browser connects to Google's servers, which receive your IP address.
04How we use information
We use information to:
- provide, operate and maintain the Apps and the features you ask for;
- process and verify purchases, restore purchases and manage subscriptions;
- respond to your questions and support requests;
- diagnose crashes, fix bugs and improve performance;
- understand, in aggregate, how the Apps are used so we can improve them and build new features;
- keep the Services safe, and prevent fraud, abuse and security incidents;
- send you service messages, such as account or security notices; and
- comply with our legal obligations.
We will only send you marketing messages if you have agreed to receive them, and you can opt out at any time.
05Legal bases for processing
If you are in the European Economic Area, the United Kingdom, Türkiye or another region with similar laws, we rely on the following legal bases under the GDPR, UK GDPR and Turkish Personal Data Protection Law No. 6698 (“KVKK”):
- Contract
- To provide the Apps and features you request, including accounts and purchases.
- Legitimate interests
- To keep the Services secure, fix problems and improve our Apps — balanced against your rights and expectations.
- Consent
- For optional features such as device permissions, marketing messages or tracking. You can withdraw consent at any time.
- Legal obligation
- Where we must keep or disclose information to comply with the law.
07Advertising & tracking
Some Apps may be free and supported by advertising. If an App shows ads or uses data to track you across other companies' apps and websites, this will be disclosed on its store listing. On iOS, we will ask for your permission through Apple's App Tracking Transparency prompt before any such tracking happens.
You can limit personalised advertising at any time:
- iOS: Settings → Privacy & Security → Tracking.
- Android: Settings → Google → Ads (or Settings → Privacy → Ads), where you can delete your advertising ID.
08Data retention
We keep personal data only for as long as we need it for the purposes described in this policy:
- Account data is kept while your account is active and deleted within 30 days after you delete your account or ask us to delete it.
- Support messages are kept for as long as needed to resolve your request and handle any follow-up, then deleted.
- Diagnostics and analytics are kept in aggregated or pseudonymised form for a limited period set by the relevant provider.
- Backups containing deleted data are overwritten on a rolling basis, within 90 days.
We may keep certain information for longer where the law requires it (for example, for tax or accounting purposes) or to resolve disputes and enforce our agreements.
09Security
We protect information with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encryption at rest where supported by our providers, access controls and the principle of least privilege. No method of transmission or storage is completely secure, but we work hard to protect your data and will notify you and the relevant authorities of a data breach where the law requires it.
10International transfers
Our service providers may process information in countries other than the one you live in, including the United States and member states of the European Union. When we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions, or the transfer mechanisms provided for under KVKK.
11Your rights & choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct inaccurate or incomplete data;
- delete your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing that happened before; and
- lodge a complaint with your local data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK).
California residents have the right to know what personal information we collect and how we use it, to delete and correct it, and to opt out of its “sale” or “sharing”. We do not sell or share personal information as those terms are defined under California law, and we will never discriminate against you for exercising your rights.
To exercise any of these rights, email support@deferlabs.com. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.
12Account & data deletion
You can ask us to delete your account and associated personal data at any time — from inside an App where accounts are offered, or by emailing us from the address linked to your account. Step-by-step instructions, including what we delete and what we may need to keep, are on our account deletion page.
Uninstalling an App does not delete data stored on our servers, and deleting your account does not cancel an active subscription. Please cancel subscriptions through the App Store or Google Play.
13Children's privacy
Our Apps are not directed to children under 13, or under the minimum age of digital consent in your country (up to 16 in some parts of the EU), and we do not knowingly collect personal data from them. If an App is ever designed specifically for children, it will include its own notice and follow applicable rules such as COPPA and Google Play's Families Policy.
If you believe a child has provided us with personal data, please contact us and we will delete it.
14Changes to this policy
We may update this policy from time to time, for example when we launch new Apps or features or when the law changes. We will update the “Last updated” date at the top of this page, and if the changes are material, we will let you know in the App or on this Site before they take effect.
15Contact us
If you have any questions about this policy or how we handle your data, we'd love to hear from you:
DeferLabs
Email: support@deferlabs.com
Support: deferlabs.com/support.html