Primal

Privacy Policy

Effective date: 3 November 2026
Last updated: 3 November 2026

This Privacy Policy explains how Yavuz Gültekin Kuş ("Primal", "we", "us") collects, uses and protects your information when you use the Primal mobile application and the website at getprimalapp.com (together, the "Service").

We built Primal to collect only what it needs to work. We do not sell your personal data, and we do not use it for advertising.

If you have any questions, contact us at [email protected].


1. Who is responsible for your data

The data controller for the Service is:

Yavuz Gültekin Kuş
İstanbul, Türkiye
Email: [email protected]


2. Information we collect

2.1 Information you give us

2.2 Information created when you use the app

Your progress is kept on your device and, while you are signed in, saved to your account (cloud save) so it can be restored on another phone.

2.3 Information collected automatically

2.4 Purchases

If you buy a subscription, the payment is handled entirely by Apple (App Store) or Google (Google Play). We never see or store your card details. We receive information about your subscription status (for example: active, trial, expired; monthly or yearly), linked to your account's random ID, so we can unlock the right features. Purchases and subscription status are managed through RevenueCat (Section 4).

2.5 Information we do not collect

We do not collect your precise location, contacts, photos, microphone or camera data, or any data from Apple Health or Google Health Connect. We do not verify tasks with your camera or sensors — completion is self-reported.

We do not ask about your health and do not collect health data or any other special category of personal data (GDPR Article 9; KVKK Article 6). Onboarding questions such as how often you exercise are general habit information. Please do not send us detailed health information in messages.

2.6 Journal entries

Some challenges ask you to write a few lines a day. These entries are personal: they are kept on your device and stored with your account so they can be restored, and are used only to show them back to you. We do not read them, analyse them, use them for analytics or share them, except with the hosting provider that stores your account. They are deleted when you delete your account.


3. How we use your information

PurposeData usedLegal basis (GDPR)
Create and run your account, sign you in, keep your progress in syncAccount, profile, progressPerformance of a contract
Set up your starting plan and suggest tasksOnboarding answers, progressPerformance of a contract
Count streaks, unlock relics, run challenges and PathsProgress, challenge data, journal entriesPerformance of a contract
Send reminders (scheduled on your device)Progress, challenge data, preferencesConsent (you can turn notifications off at any time)
Learn which reminder texts are usefulReminder recordsLegitimate interest
Answer your messages and suggestionsMessages, accountLegitimate interest
Unlock paid featuresSubscription statusPerformance of a contract
Keep the Service secure, prevent abuse, fix bugsTechnical data, diagnosticsLegitimate interest
Understand which features work and improve the appUsage analyticsLegitimate interest / consent where required
Comply with the lawAny data requiredLegal obligation

We do not use your data for advertising, and we do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.


4. How we share your information

We do not sell or rent your personal data. We share it only with service providers that help us run the Service, under contracts that require them to protect it:

ProviderWhat they doLocation
SupabaseDatabase, authentication and file storage (our backend)European Union (Ireland)
AppleSign in with Apple, App Store purchasesGlobal
GoogleSign in with Google, Google Play purchases, and our support inbox (Gmail)Global
RevenueCatManaging subscriptions and purchase statusUnited States
SentryCrash and error reportingUnited States
PostHogProduct analyticsEuropean Union
ResendDelivering the messages you send us to our inbox by emailUnited States
Expo (650 Industries)Delivering app updatesUnited States
FramerHosting our websiteEuropean Union / United States

We may also disclose information if required by law, to protect our rights or the safety of users, or as part of a merger or acquisition (in which case this Policy will continue to apply).


5. International transfers

Our main database is hosted in the European Union. Some providers listed above may process data outside your country, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and, for users in Türkiye, the transfer mechanisms set out in the Personal Data Protection Law No. 6698 (KVKK).


6. How long we keep your data

When you delete your account (Profile → Delete Account), your account and everything stored with it in our database — your cloud save, progress history, challenge records, reminder records and messages — are deleted right away. Primal's access to your Apple ID is revoked, and Primal is removed from your Google account's connected apps. Database backups are overwritten within 30 days. Usage analytics and diagnostics already sent stay linked only to the deleted account's random ID until their retention period above ends. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.


7. Your rights and choices

Depending on where you live, you have the right to:

To exercise any of these rights, email [email protected]. We will respond within 30 days. We may need to verify your identity first.

Users in the European Economic Area and the United Kingdom

You have the rights listed above under the GDPR / UK GDPR. You may complain to the supervisory authority in the country where you live or work.

Users in Türkiye (KVKK)

Under Article 11 of the Personal Data Protection Law No. 6698, you have the right to learn whether your data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to, request correction or deletion, object to results arising from automated analysis, and claim compensation for damages caused by unlawful processing. You can send requests to [email protected]. You may also complain to the Personal Data Protection Authority (KVKK).

Users in California

We do not sell or share personal information for cross-context behavioral advertising. You may request access to or deletion of your personal information by emailing us, and we will not discriminate against you for exercising your rights.


8. Security

We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), access controls that let each user read only their own data, and restricted access for our team. No system is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.


9. Children

Primal is not intended for children under 13. If you are under the age required to consent to data processing in your country (for example, 16 in some EU countries), you may only use Primal with the consent of a parent or guardian. If we learn that we collected data from a child without the required consent, we will delete it. If you believe this has happened, contact us at [email protected].


10. Changes to this Policy

We may update this Policy from time to time. We will change the "Last updated" date above and, for material changes, notify you in the app or by email before they take effect.


11. Contact

Yavuz Gültekin Kuş
İstanbul, Türkiye
[email protected]