Privacy Policy
Last updated: 1 September 2026 · Data controller: Temiz Yazilim
This document explains what the Vivalo mobile app collects, why, where it is stored, who it is shared with, and how you can delete it. If anything here is unclear, write to us.
Short version: Vivalo works offline. Everything you enter stays on your phone first. Sending data to our server is optional and only happens if you use syncing. We do not sell your data. We do show ads, and the ad network collects its own data — spelled out below.
1. What we process
1.1 Health and habit data you enter
Records for smoking, alcohol, caffeine, water, food, steps, sleep, exercise, mood and weight; abstinence streaks, goals and craving logs. This counts as special category personal data under GDPR Art. 9, and is handled with that in mind.
1.2 Account data
You can use the app without an account. If you create one, we store your username, an irreversible hash of your password (Argon2id) and an optional display name. Your password itself is never stored in plain text anywhere.
1.3 Device identifier
If you use syncing, the app generates a random identifier (UUID) for your device. It is not your device's hardware ID and it changes if you reinstall the app.
1.4 Health Connect / health data (optional)
With your permission, your step count is read from your phone's health records. If you decline, the app works exactly the same and you enter steps manually. We do not use or share health data for advertising.
1.5 Advertising data
The app shows ads through Google AdMob. To serve them, Google processes your device's advertising identifier, IP address and general device information. Vivalo requests non-personalised ads by default.
Ads are deliberately not shown on the craving screen, on private goals, or during onboarding. We do not share your health or habit data with the ad network.
1.6 What we do not collect
- We do not ask for your name, email address or phone number
- We do not collect location data
- We do not access contacts, photos, microphone or camera
- We use no third-party analytics or tracking tools
2. Why we process it, and the legal basis
| Data | Purpose | Legal basis |
|---|---|---|
| Health and habit records | The core function: daily balance and reports | Explicit consent (GDPR Art. 9(2)(a)) |
| Account details | Access to the same data on more than one device | Performance of a contract |
| Device identifier | Preventing conflicts during sync | Legitimate interest |
| Advertising data | Funding the app so it stays free | Legitimate interest / consent |
3. Where it is stored
Local data sits in an unencrypted SQLite file inside the app's private storage, which other apps cannot read. If you use syncing, data is transferred to our servers hosted in Türkiye, over a TLS-encrypted connection.
An honest limit: the PIN lock on private goals is a screen-privacy measure, not encryption. It keeps a passing glance away; it does not stop someone with determined access to the device's file system. The app states this just as plainly.
4. Who we share it with
We do not sell your data. Sharing happens only here:
- Google AdMob — only the advertising data listed in 1.5. Google Privacy Policy
- Our hosting provider — to operate the server, acting as a data processor
- Legal obligation — on a lawful request from a competent authority
5. How long we keep it
Local data until you erase it or uninstall the app. Server data for as long as your account is active. When you delete your account, all of your records are permanently removed within 30 days at the latest.
6. Your rights
Under GDPR Art. 15–22 (and Türkiye's KVKK Art. 11) you have the right to access, rectify, erase, restrict and port your data, and to object to processing. Where processing relies on consent, you may withdraw it at any time.
You can exercise these rights inside the app under Profile → Data & sync, or by writing to us. We respond within 30 days. Step-by-step deletion: Delete Data.
7. Children
Vivalo is not directed at children under 13 and we do not knowingly collect data from them. Because the app includes alcohol and tobacco tracking, an age rating applies in the stores.
8. Changes
If this policy changes we update the date on this page. For material changes we also notify you inside the app.
9. Contact
Temiz Yazilim
Email: [email protected]
Web: vivalo.temizyazilim.com
You also have the right to lodge a complaint with your national data protection authority (in Türkiye, the Personal Data Protection Authority).