Privacy Policy — Planeta

Effective date: 18 July 2026
Last updated: 28 July 2026

This Privacy Policy explains how Planeta (the "App") handles your information. Planeta is developed and operated by Mert Çelik ("we", "us", "the Developer"), an individual developer.

Contact: celik.mert58@hotmail.com

Planeta is a focus and productivity app in which you complete focus sessions to discover pixel‑art planets, build a personal galaxy, and — optionally — share progress with friends. This policy applies to the Planeta iPhone app, its widgets, its Live Activities, and its Apple Watch companion.

We have built Planeta to be privacy‑first: there are no third‑party SDKs, no analytics, no advertising, and no tracking. We do not operate our own servers. Everything you store either stays on your device or is stored in Apple iCloud/CloudKit under your own Apple Account.

1. Summary (the short version)

• We do not track you and we do not use any advertising or analytics frameworks.
• We do not sell or share your data with third parties for marketing.
• Most of your data (your galaxy, statistics, journal notes, settings) lives on your device and, if iCloud is enabled, in your private iCloud database, which even we cannot read.
• If you choose to use the social features (leaderboard, friends, planet gifts), a limited set of information is written to a public CloudKit database that we can read for the purpose of operating those features.
• Purchases are processed entirely by Apple. We never see your payment or card information.
• You can delete your data at any time from within the App.

2. Who is responsible for your data

The data controller for the information described in this policy is:

Mert Çelik
Email: celik.mert58@hotmail.com

For any privacy question, request, or complaint, contact us by email at celik.mert58@hotmail.com. A postal address is available on request.

3. Information we process, and why

Planeta only processes what it needs to function. We group it by feature so you can see exactly what happens.

3.1 On‑device and private iCloud data (we cannot read this)

The following is stored locally on your device and, when iCloud is available, synced to the private CloudKit database tied to your Apple Account. Apple's private database is not accessible to the Developer:

• Your discovered planets, galaxy map, and codex entries
• Focus‑session statistics (session counts, focus minutes, streaks)
• Journal notes and planet nicknames you write
• App settings and preferences (theme, pixel mode, space color, selected app icon, sound settings)

Purpose: to provide the core app experience and to keep it in sync across your devices.
Legal basis (where GDPR applies): performance of our agreement with you (providing the App).

3.2 Social / leaderboard data (public CloudKit database — Developer‑readable)

The social features are optional. If you use them, the following information is written to the public CloudKit database, which the Developer can read in order to operate leaderboards, friends, and gifting:

• An Explorer record containing: an opaque explorer identifier derived from your iCloud account, a display name (auto‑generated as EXP‑XXXX unless you choose your own), a friend code, your number of discovered worlds, total and weekly focus minutes, the current week key, and cosmetic values (pixel mode, space color). If you share your galaxy, an encoded galaxy map value is also stored.
• FriendLink records (friend requests/links): requester and recipient identifiers, requester display name, status, and timestamp.
• PlanetGift records (when you send or receive a planet gift): sender and recipient identifiers, sender display name, the procedural seed values used to regenerate the gifted planet (seed, color seed, shape seed, planet type, designation, life/life‑form, theme), timestamp, and status.
• ExplorerReport records (if you report another user): the reported user's identifier and name, the reason you provide, your identifier as reporter, and a timestamp.

Purpose: to provide leaderboards, friend connections, planet gifting, and content moderation.
Legal basis (where GDPR applies): performance of our agreement with you and our legitimate interest in keeping the community safe (moderation).

Please note: your display name and any content you choose to make public are visible to other Planeta users. Do not include personal or sensitive information in your display name, nicknames, or shared content.

3.3 Apple Health (write‑only)

If you grant permission, Planeta writes your completed focus sessions to Apple Health as "mindful minutes." Planeta only writes to Health; it never reads any of your Health data. This data stays within Apple Health on your device under Apple's control.

Purpose: to let you keep a record of mindful time in Health.
Legal basis: your consent (you can revoke it any time in iOS Settings › Health).

3.4 Calendar (write‑only)

If you grant permission, Planeta can add a calendar event for each completed focus session. Planeta only creates events; it never reads your existing calendar entries.

Purpose: to optionally record focus sessions in your calendar.
Legal basis: your consent (revocable in iOS Settings › Privacy › Calendars).

3.5 Screen Time / app shielding (Family Controls — stays on device)

Planeta uses Apple's Family Controls / Screen Time framework so it can shield selected apps during a focus session. The apps and categories you select are represented by opaque tokens managed by iOS. These tokens stay on your device, are not human‑readable, and are never transmitted to the Developer or to any server. Planeta cannot see which specific apps you chose in any identifiable form.

Purpose: to help you stay focused by limiting distracting apps.
Legal basis: your consent (Screen Time authorization prompt).

3.6 Notifications

Planeta uses local notifications for focus/break alerts and, where relevant, gift/friend reminders, and may use push notifications (including time‑sensitive alerts) delivered through Apple Push Notification service. Push tokens are handled by Apple. We do not build advertising or marketing profiles from notifications.

3.7 Purchases (handled by Apple)

Planeta offers optional upgrades via in‑app purchase: Style and Planeta+ Lifetime are one‑time unlocks, and Planeta+ is an auto‑renewable subscription (weekly, monthly or yearly). All transactions are processed by Apple through the App Store using StoreKit. We never receive or store your payment card details, and we do not receive your Apple Account name, email or billing address. Your entitlement is validated on your device from your App Store transactions; we do not run a receipt server and we do not build a purchase profile about you. Subscription status, renewals and cancellations are handled by Apple in your App Store account. See the Terms of Use & EULA for purchase and subscription details.

4. Required‑reason API disclosures

In line with Apple's privacy rules, Planeta accesses the following APIs for the stated reasons only, and not for tracking:

• User Defaults (reason CA92.1): to store the App's own settings and preferences.
• System boot time (reason 35F9.1): to measure elapsed time between events so that a device‑clock change cannot forge a completed focus session.

5. What we do NOT do

• We do not use analytics, advertising, or any third‑party tracking SDK.
• We do not track you across apps or websites; no IDFA / App Tracking Transparency prompt is shown because we do not track.
• We do not collect your precise or coarse location.
• We do not read your contacts, photos, microphone, or camera.
• We do not sell your personal data.
• We do not run our own analytics servers or receive telemetry.

The App's privacy manifest (PrivacyInfo.xcprivacy) declares No tracking and matches the disclosures in this policy.

6. How your information is shared

We share information only in these limited ways:

• With other users: the public social information described in Section 3.2 (e.g., your display name, worlds, focus minutes, gifts you send) is visible to other Planeta users through leaderboards, friends, and gifting.
• With Apple: as the infrastructure and payment provider (iCloud/CloudKit, Push, StoreKit, Health, Calendar). Apple processes this data under Apple's own privacy policy.
• For legal reasons: if required by law, or to protect the rights, safety, and security of our users or the public (for example, acting on abuse reports).

We do not share your information with advertisers, data brokers, or analytics providers.

7. Data retention

• On‑device / private iCloud data persists until you delete it or remove the App, and is governed by your iCloud settings.
• Public social records persist while your account is active. When you delete your account/data (Section 8), your Explorer record and related social records are removed from the public database.
• Moderation reports may be retained as long as reasonably necessary to keep the community safe and to prevent repeat abuse.

8. Your choices and rights

You are always in control:

• Delete your data / account: the App provides an in‑app option to erase your cloud data and your local data. Deleting your data removes your public social records.
• Revoke permissions: you can turn off Health, Calendar, Screen Time, and Notifications permissions at any time in iOS Settings; the related features simply stop working.
• Stop using social features: the leaderboard, friends, and gifting are optional and can be avoided entirely.
• Block and report: you can block other users and report objectionable content or behavior directly in the App.

Depending on where you live (e.g., EEA/UK under GDPR, or California under the CCPA/CPRA), you may have rights to access, correct, delete, restrict, or object to the processing of your personal data, and to data portability. Because most data is stored under your own Apple Account (which you already control) or is not readable by us at all, you can exercise most of these rights directly on your device. For anything else, contact us at celik.mert58@hotmail.com and we will respond as required by law. You also have the right to lodge a complaint with your local data protection authority.

We do not "sell" or "share" personal information as those terms are defined under U.S. state privacy laws.

9. International transfers

Your data is stored and processed on Apple's iCloud/CloudKit infrastructure, which may involve storage in data centers outside your country. These transfers are handled by Apple under Apple's own safeguards and privacy commitments.

10. Children's privacy

Planeta is not directed to children under 13 (or the minimum age required in your country). We do not knowingly collect personal information from children. The social features in particular are intended for users who meet the minimum age. If you believe a child has provided information through the App, contact us and we will delete it.

11. Security

Data in transit and at rest is protected by Apple's iCloud/CloudKit and App Store security. Because we do not operate our own servers and do not collect credentials or payment data, the attack surface is intentionally minimal. No method of transmission or storage is 100% secure, but we design the App to hold as little of your data as possible.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide notice in the App or on the App Store listing. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

13. Contact us

Questions, requests, or complaints about privacy:

Mert Çelik
Email: celik.mert58@hotmail.com

This policy describes the Planeta app's actual data behavior as implemented at the effective date above. Apple's handling of iCloud, CloudKit, Health, Calendar, Push, and App Store data is additionally governed by Apple's own privacy policy.