Privacy Policy and Notice
Last updated: 23 October 2026
1. Data controller
The data controller for personal data processed in the Özdisiplin app is Sercan Özsoy. This notice is provided under Turkish Personal Data Protection Law No. 6698 (KVKK). Contact: destek@ozdisiplin.com.
2. Data we process
Account and contact: name, email address; your password is stored only as an encrypted hash.
Profile: birth year, gender, height, target weight, activity level.
Health and body data: weight, body fat and other scale values, body measurements, health pre-assessment answers, fasting, nutrition, water, sleep, mood, breathing, step and workout records.
Women's health: if you turn on cycle tracking, period dates, flow, daily symptoms and pregnancy status.
Skin and makeup: skin type, skin concerns, answers about pregnancy, breastfeeding and skin medication; your product cabinet and makeup bag.
Dream journal: if you turn on the dream module, your dream notes, feeling, clarity and theme tags, and your lucid dream settings.
Smartwatch: if you allow Health Connect, the step, distance, exercise, sleep, weight, body fat, heart rate and calorie data you choose.
Location: GPS route and distance while recording a walk or run. So that a run keeps recording with the screen off, location is collected in the background only while a recording is in progress.
Screen time: on Android, if you grant usage access, daily total screen time and unlock count are saved. Per-app usage is only shown on your phone and is not saved. Your put-the-phone-down sessions are also stored.
Alarm: the time of your phone's next alarm is read only on the phone; if you turn on syncing, only your wake target is saved.
Images: progress photos, photo of the day, and the scale, skin care and makeup product photos you choose to read.
Notes and plans: evening journal, goals, habits, reviews, travel plans and expense records.
Kept on device: notification, alarm and time zone preferences, appearance settings and recently scanned products are stored only on your phone.
Membership: your trial start, plan, renewal date and the transaction ID from the store. We never see your card details; Google Play or the App Store handles payment.
3. Purposes
We use your data to create and manage your account, give you a personal fasting, nutrition, activity and habit plan, show your progress, set reminders, keep the app secure and meet legal obligations. We do not sell or rent your data for advertising.
4. Legal bases
Account and profile data are processed to perform our service agreement (KVKK art. 5/2-c) and for our legitimate interest in security (art. 5/2-f). Health and body data are special category data and are processed only with your explicit consent (art. 6). You can withdraw consent at any time; features that need health data will then stop working.
5. Sharing and providers
Your data is shared with the following providers so that we can deliver the service:
Supabase: database, authentication and file storage. Servers may be located abroad.
Anthropic: only when you use photo reading (scale, skin care and makeup products), the photo you choose is sent to read its values. If the weekly coach letter is on, your weekly summary is sent to write it; if you ask for a weekly reflection in the dream module, that week's dream notes are sent only to write it; if you ask for an evening summary, that day's item names, results and how the day was rearranged are sent only to write it; cycle data is never sent.
Open Food Facts: only the barcode number is sent when you scan a barcode; no personal data is sent.
Apple and Google: notifications, the step sensor, Health Connect, alarms and usage data work through your phone's operating system.
Transfers to providers abroad are based on your explicit consent. Data may be shared with authorized public authorities when legally required. For payments and subscriptions, only the information needed to verify your membership is shared with Google Play, the App Store and our subscription management provider.
6. Retention
We keep your data while your account is open. When you delete your account in Settings, your records and photos are permanently deleted; backup copies are cleared within a reasonable time. Records subject to legal retention are kept for that period.
7. Your rights
Under KVKK art. 11 you may learn whether your data is processed, request information, learn the purpose, know the recipients, ask for correction, deletion or destruction, object, and claim compensation. Download a copy with "Download my data" in Settings and delete your account there. For other requests write to destek@ozdisiplin.com; we reply within 30 days.
8. Security
Data is sent over encrypted connections. Each record is protected by row-level security so only its owner can access it. Photos are kept in private folders and shown through expiring links.
9. Age limit
Özdisiplin is not designed for people under 18. If you are under 18, do not use the app.
10. Changes
We may update this notice and will announce important changes in the app. The last update date is shown at the top.