← Selflings

Privacy policy

In short: what you write stays on your phone. Only if you allow it, it is sent to an AI to write your moves and letters; we don’t keep it.

This is the notice required by Article 10 of Türkiye’s Personal Data Protection Law No. 6698 (KVKK); for users in Europe it also contains the information required by Article 13 of the General Data Protection Regulation (GDPR).

Who is responsible

Barış Candar, Nişantepe Mah. Kavaklı Sok. No: 61B, 34794 Çekmeköy, Istanbul, Türkiye. Contact: [email protected]

What stays on your phone

Your name, your “I’m someone who ___” sentence, what you wrote about yourself, your notebook notes, proofs, goals, letters and settings are stored only on your phone (and in your phone’s own backup). You have no account; we can’t see this data. You can export it with Settings > Back up, and delete it, including every copy on the phone, with Settings > Start over. Reminders are scheduled on your phone; no data is sent for them either.

What is sent to the AI (only with your permission)

To name your characters and write your daily moves and weekly letters, the following is sent through our server to the Claude AI of Anthropic PBC (USA): your name, the parts of your sentence and your characters’ levels, what you wrote about yourself, your recent notebook notes, your goals, moves you wrote yourself, your experiment idea, your reply to a letter, on which days you gave how many proofs, and short lines from the week’s summary (goals reached, creatures overcome).

• Our server does not store this content or write it to its logs; it passes the request on and returns the answer.
• Anthropic processes this data only to provide the service and prevent abuse, and does not use it to train its models. It deletes inputs and outputs within 30 days; content flagged as possibly violating its usage policy may be kept for up to 2 years. Details: Anthropic’s retention page.
• Moves and letters are written by an AI, not a person; every letter says so. They can be wrong.
• The AI features are for ages 18 and up; you confirm this when you give permission.
• You can turn the permission off at any time with Settings > AI. While it’s off, nothing is sent; the app works with ready-made moves and no letters come.

Anonymous usage data

To improve the app, which screens are used (e.g. “first proof given”), the app version, the platform and error reports are sent with a random ID to PostHog (EU servers). Your name and nothing you write is ever sent; no location is derived from your IP address and your IP address is not stored. In the European Union, EEA, United Kingdom and Switzerland it is off by default and sent only if you confirm you are 16 or older and turn it on; elsewhere it starts on. You can switch it with Settings > Anonymous data.

Subscription

Payment is taken by Apple (App Store) or Google (Google Play); we never see your card details. Your subscription status is checked with your random ID through RevenueCat (USA).

Technical logs

Our server runs on Render Services, Inc. infrastructure in the Frankfurt (Germany) region. To prevent abuse, it keeps your IP address only for rate limiting, in memory and for at most one day; it records no content.

Cookies

The app and this site use no cookies. The site loads no fonts, analytics or ads from other servers; your visit is not passed on to third parties.

Purposes and legal bases

Data is collected electronically, inside the app.

• Running the app and checking the subscription: entering into and performing a contract (KVKK Art. 5(2)(c); GDPR Art. 6(1)(b)).
• Sending to the AI: your consent (KVKK Art. 5(1); GDPR Art. 6(1)(a)). If what you write contains health information, this too rests on your explicit consent (KVKK Art. 6; GDPR Art. 9(2)(a)).
• Anonymous usage data: your consent in the EU, EEA, UK and Switzerland (GDPR Art. 6(1)(a)); elsewhere, our legitimate interest in improving the app (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)). You can object to this at any time with Settings > Anonymous data.
• Preventing abuse (rate limiting): legitimate interest (KVKK Art. 5(2)(f); GDPR Art. 6(1)(f)).

We recommend not writing sensitive information such as health details in what you tell about yourself or in your notes; if you do, it is sent for the purposes above while the AI permission is on.

Who receives it

Only the processors we work with to provide the service: Anthropic PBC (AI, USA), RevenueCat Inc. (subscription checks, USA), PostHog Inc. (anonymous usage data, EU servers) and our server’s host (Render Services, Inc., a US company; server in Germany). We don’t sell your data, use it for advertising or share it with anyone else. If the law requires it, authorities receive only what is requested.

International transfers

These processors handle data outside Türkiye, and the Turkish Personal Data Protection Board has issued no adequacy decision for these countries. Transfers follow Article 9 of KVKK: we sign the Board’s standard contract with the processors and notify the Board within five business days of signing. For sending to the AI we also ask for your explicit consent, telling you that the data goes to the USA, where protection rules differ from Türkiye’s. For users in the EU, EEA, UK and Switzerland, transfers to the USA rely on the recipient’s EU-US Data Privacy Framework certification or on the European Commission’s standard contractual clauses.

How long it is kept

• Data on your phone: until you delete it (Settings > Start over, or removing the app).
• Text sent to the AI: never on our server; at Anthropic for the periods above.
• Anonymous usage data: at most 1 year.
• Subscription records: while the subscription lasts and for as long as tax law requires.
• IP address (rate limiting): in memory, at most one day.
• Emails you send us: at most 1 year after your request is resolved.

Your rights

Under Article 11 of KVKK you can learn whether your data is processed and ask for information about it, learn the purpose of processing and whether it is used accordingly, know who it is transferred to, have it corrected if incomplete or wrong, have it deleted or destroyed and have those recipients told, object to a result against you that comes solely from automated analysis, and claim compensation if unlawful processing caused you harm. If the GDPR applies to you, you can also ask for processing to be restricted and for your data to be ported, and withdraw your consent at any time.

Write to [email protected]; we answer free of charge within 30 days. Since your data is mostly on your phone, you can manage most of it yourself inside the app. Usage and subscription records are linked only to a random ID; when you write with Settings > Write to us, that ID is already at the bottom of the email, and we use it to find and delete the records. If you are not satisfied with our answer, you can complain to the Turkish Personal Data Protection Board (or the data protection authority where you live).

Children and teens

Selflings is not designed for children under 13. The AI features are for ages 18 and up; younger users use the app without AI, and what they write never leaves the phone.

Because a teenager may misstate their age, we apply these measures for everyone:

• Age confirmation: the AI permission can only be turned on with “I’m 18 or older”.
• Safe content: the AI’s instructions are written to suit teenagers too, for everyone. No romantic or sexual content, diets, alcohol, gambling or risky actions are suggested, and the server also filters out moves on these topics.
• Crisis support: if what you write shows signs of self-harm, the app opens a support card, lets you call the emergency number with one tap, and the AI is told to suggest nothing demanding.
• Transparency: the permission screen and every letter say that an AI wrote it.
• Reporting: with “report” on any letter you can email us a text that seemed wrong. We review reports and fix the instructions accordingly.

Changes

If this policy changes, the current version is published on this page; for an important change we also let you know in the app. Last updated: 12 November 2026.