Privacy Policy

1. Who is responsible

SkyFeel (the “App”) and the website skyfeelapp.com are provided by Noveria Dijital Teknolojiler Limited Şirketi (Noveria Apps), a limited liability company registered in Türkiye (“we”, “us”):

Istanbul Trade Registry no. 1151424 · MERSİS no. 0632159200900001

We are the controller for the personal data described in this policy, and the data controller (“veri sorumlusu”) under Turkish Law No. 6698 on the Protection of Personal Data (KVKK).

2. What this policy covers

This policy explains what happens to personal data when you use the SkyFeel app on iPhone, iPad or Android and when you visit skyfeelapp.com. Services of other companies that you reach through SkyFeel, such as the App Store, Google Play, Facebook or Instagram, have their own privacy policies.

3. What stays on your phone

SkyFeel is built so that your personal diary stays with you. The following is stored only on your device, in the App’s own storage:

• your first name, if you give one;
• the place you picked, with its name and coordinates;
• your daily check-ins (for example good, moderate or bad days);
• symptoms, medication and notes you add;
• the answers you give in the welcome questions, such as which symptoms you notice and how often;
• your settings, such as units and the App’s language. If you turn on notifications, our server also stores your heads-up settings (see 4.2);
• the patterns SkyFeel calculates from your entries, and the doctor summary (PDF) when you create one.

We do not operate a server that receives or stores this information, and we cannot read it. The comparison between your days and the air pressure is calculated on your phone.

Some of this information concerns your health. Because it stays on your device and under your control, we do not receive it. If you export the doctor summary or share it, you decide who receives it.

Device backups: on iPhone, if you use iCloud Backup, your iPhone may include the App’s data in that backup. Apple stores it under its own terms, and you can manage or delete it in your iPhone’s settings. On Android, the App’s data is not included in Google’s device backup. Android may still copy it when you transfer data directly from an old phone to a new one.

4. What we process, and why

4.1 Location and the pressure forecast

To show the pressure forecast, heads-ups and the pressure history for your days, SkyFeel needs to know roughly where you are. With your permission, the App uses your phone’s location. You can also choose a place yourself.

The App does not send your coordinates to us or to anyone else for the forecast. On your phone, it rounds the place to an area of about 20 by 20 km (0.2° latitude by 0.3° longitude) and sends only the code of that area to our server (see 4.2). Our server asks Open-Meteo (open-meteo.com), our weather data provider, for the forecast and past pressure values for the centre of that area, and keeps the result for everyone in the same area. Open-Meteo receives only the centre of the area from our server, not your IP address and no identifier of your device.

If you search for a place by name, the text you type goes to our server, which passes it to Open-Meteo’s place search together with your phone’s language and returns the results. We do not store your search.

When you use your phone’s location, the App names your place with the place-name service built into your phone (Apple on iPhone, Google on Android), which receives the coordinates for this. On iPhone, the map in the Forecast tab comes from Apple Maps; Apple receives the requests for the map of the area shown, about 1,400 km across. Apple and Google process this data under their own privacy policies.

Legal basis (GDPR): performance of our contract with you to provide the App (Art. 6(1)(b)). Access to your phone’s location only happens after you allow it in the system dialog, and you can withdraw this at any time in your phone’s settings.

4.2 Our server, heads-ups and reminders

We run a small server for the forecast and the heads-ups. It is hosted by Supabase (Supabase, Inc.) in Frankfurt, Germany. It never receives your diary, your symptoms, your welcome answers, your name or your coordinates.

With every forecast, map or search request, our server receives the code of your area (see 4.1), a random ID that the App creates on your phone when you install it, the request itself and, as with any internet service, your IP address. We keep the random ID only as a hash (SHA-256), to limit each installation to 60 requests an hour; these counters are deleted after 2 days. Supabase keeps technical request logs, including the IP address, for a short time to run and protect the service.

Heads-ups before sharp pressure drops (and sharp rises, if you turn them on), updates, all-clears and the morning summary are planned and sent by our server. For this, if you allow notifications and have SkyFeel Pro, the App registers your phone with our server, which stores: the hash of the random ID, a push token for your phone, the code of your area, the App’s language, your pressure unit, 12- or 24-hour time and your heads-up settings (threshold, evening and hours-before heads-ups, quiet hours, rises, morning summary). Our server sends the notifications through Expo’s push service (650 Industries, Inc., USA), which passes them on to Apple Push Notification service (on Android: Google Firebase Cloud Messaging). Expo receives the push token and the text of each notification. The text is only about the weather, for example the size and time of a pressure drop.

The check-in reminder, your first results and up to three reminders about SkyFeel Pro are scheduled by the App on your phone and never pass through our server. On iPhone, the sentence in a heads-up that recalls what you logged the last time a similar drop came is added on your phone when the heads-up arrives; it is never sent to us.

We delete the registration when the App finds that you turned notifications off or that SkyFeel Pro has ended, when you use “Delete all data” in the App, or when Apple or Google reports that your phone no longer receives the notifications. Records of planned and sent notifications are deleted 14 days after sending.

You can switch notifications off at any time in the App or in your phone’s settings.

Legal basis: performance of our contract (Art. 6(1)(b) GDPR); for the request limits and the logs, our legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).

4.3 SkyFeel Pro subscriptions

SkyFeel is free to download. If you subscribe to SkyFeel Pro, the purchase is made with Apple (App Store) or Google (Google Play). Apple or Google process your payment details and your purchase history; we never receive your card details.

To unlock SkyFeel Pro, we use RevenueCat (RevenueCat, Inc., USA), a service that manages subscriptions for us. The App identifies itself to RevenueCat with the random ID described in 4.2, which the App shows in Settings as “Support ID”. RevenueCat receives the purchase and subscription information from Apple or Google (such as the product, the purchase date, the price, the store country and the subscription status) and technical data (such as device model, operating system, App version, IP address and the identifier Apple gives our apps on your device, IDFV). If you allow tracking on iPhone, RevenueCat also receives your device’s advertising identifier (IDFA). On Android, it receives your Google advertising ID when the Meta SDK runs. When the Meta SDK runs (see 4.4), RevenueCat also receives Meta’s anonymous ID for your device. RevenueCat sends purchase events to Meta for us (see 4.4).

Access codes (Android): on Android, the subscription screen also accepts an access code, which we give to Google Play’s app reviewers. When you enter a code, our server (see 4.2) stores the hash of the random ID, whether the code was right and, if it was, until when SkyFeel Pro was granted. These records are deleted after 30 days. After five wrong codes in 24 hours, further tries are blocked for a day. A right code gives SkyFeel Pro for 7 days through RevenueCat.

Legal basis: performance of our contract (Art. 6(1)(b) GDPR) and, for records we must keep, our legal obligations (Art. 6(1)(c) GDPR). For the advertising identifiers and the purchase events sent to Meta, the legal basis in 4.4 applies.

4.4 Measuring our ads with Meta

We advertise SkyFeel on Facebook and Instagram. To find out whether these ads work, the App contains the Meta SDK, provided by Meta Platforms Ireland Limited (for users in the EU/EEA) and Meta Platforms, Inc. (elsewhere).

When the Meta SDK runs:

• If your store country (App Store or Google Play) is in the EU, the EEA, the United Kingdom or Switzerland, or the App cannot tell your country, the Meta SDK starts only after you agree. On iPhone, you agree by tapping Allow in Apple’s tracking dialog (App Tracking Transparency). On Android, you agree by tapping Allow when the App asks about ad measurement, or by turning on Settings → Privacy → Ad measurement in the App. If you do not agree, the Meta SDK does not start and the App sends nothing to Meta.
• In all other countries, the Meta SDK starts when you open the App. On iPhone, it uses your advertising identifier only if you allow tracking. On Android, it uses your Google advertising ID unless you have deleted it in your phone’s settings.
• On Android, in the EU, the EEA, the United Kingdom and Switzerland, you can change your answer at any time under Settings → Privacy → Ad measurement. Turning it off stops the Meta SDK and removes Meta’s identifiers that RevenueCat holds for you (see 4.3). What Meta has already received stays with Meta.

When the Meta SDK runs, it may process:

• app events: installing and opening the App, and one event when you reach the subscription screen for the first time. The App sends no other events;
• technical information, such as device model, operating system, App version, language, time zone and IP address, and reports about crashes in the Meta SDK;
• your device’s advertising identifier: on iPhone the IDFA, only if you allow tracking; on Android the Google advertising ID;
• an anonymous ID that the Meta SDK creates on your device, and other identifiers that Meta uses to match these events to its own users.

Subscriptions: the App itself does not send purchases to Meta. When you start or renew SkyFeel Pro, RevenueCat (see 4.3) sends this event from its server to Meta (Meta Conversions API): the product, the price after the store’s commission, the currency, a hashed form of the random ID (see 4.2), your IP address and device information, and, if available, your advertising identifier and Meta’s anonymous ID. In the EU, the EEA, the United Kingdom and Switzerland, this happens only if you agreed as described above. In other countries it also happens if you did not allow tracking on iPhone, but then without your advertising identifier.

We never send your diary entries, symptoms, medication, welcome answers, notes or any other health information to Meta. We do not use your data to target you with ads based on your health.

Meta also uses this information for its own purposes, as described in Meta’s Privacy Policy (facebook.com/privacy/policy). For the collection and transmission of the data to Meta, we and Meta may be jointly responsible; Meta is responsible for its own processing afterwards.

Legal basis: where the law requires your consent before information on your device is accessed for advertising measurement (for example in the EU/EEA, where Art. 5(3) of the ePrivacy Directive and its national laws apply), we only use the Meta SDK for this purpose after you agree (Art. 6(1)(a) GDPR). You can withdraw your consent at any time with effect for the future. On iPhone you can also turn off “Allow Apps to Request to Track” in Settings → Privacy & Security → Tracking.

4.5 When you contact us

If you write to us, we process your email address, your message and anything you choose to include, so we can answer you. Please do not send us health details we do not need.

Legal basis: our legitimate interest in answering your request (Art. 6(1)(f) GDPR), or steps before or during our contract with you (Art. 6(1)(b) GDPR).

4.6 Crash reports and analytics

SkyFeel does not use a separate analytics service of its own. If you have allowed it in your phone’s settings, Apple or Google may share crash reports and basic, aggregated usage statistics with us.

4.7 Our website

skyfeelapp.com does not use cookies, analytics or advertising trackers. When you visit it, our hosting provider automatically processes technical data that your browser sends, such as your IP address, the date and time, the page requested, the referring page and your browser type, in server log files. This is necessary to deliver the website and to keep it secure.

If you choose a language on the website, your browser stores that choice locally (in “local storage”) so we can show the right language next time. This information stays in your browser and is not sent to us.

Legal basis: our legitimate interest in a secure, working website (Art. 6(1)(f) GDPR); storing your language choice is strictly necessary for a function you requested.

5. Who receives data

We do not sell your personal information for money. We may disclose data where the law requires it, for example to authorities.

6. International transfers

We are based in Türkiye, and some of our providers are based in the United States or other countries outside your own. When personal data leaves the EU/EEA, we rely on an adequacy decision of the European Commission (for example the EU-U.S. Data Privacy Framework for certified companies) or on standard contractual clauses. For transfers from Türkiye, we follow Article 9 of the KVKK.

Our server runs in the EU (Frankfurt, Germany). Supabase, Expo, RevenueCat and Meta Platforms, Inc. are companies in the United States, so data may be transferred there.

7. How long we keep data

• Diary and settings on your phone: until you delete them or the App. We have no copy.
• Our server: request counters (with the hash of the random ID) for 2 days; the heads-up registration until you turn notifications off, SkyFeel Pro ends or you use “Delete all data” (see 4.2); planned and sent notifications for 14 days after sending; Supabase’s technical logs for the short period Supabase sets.
• Access code attempts (Android): 30 days.
• Purchase information, held by RevenueCat for us: for as long as your subscription is active and afterwards as long as tax and commercial laws require.
• Emails to us: as long as needed to answer you, and then up to 24 months, unless the law requires longer.
• Website server logs: for the short period set by our hosting provider, unless needed to investigate a security incident.
• Data held by Meta, Apple, Google or Expo: according to their own policies.

8. Security

Connections between the App and our providers are encrypted (HTTPS). Data on your phone is protected by your device’s security features, such as your passcode and the system’s encryption. No method of transmission or storage is completely secure, but we work to protect your data with appropriate technical and organisational measures.

9. Your rights

Depending on where you live, you have rights over your personal data. To use them, write to info@skyfeelapp.com. Because we do not hold your diary, you can view, change and delete it directly in the App.

For data on our server or at RevenueCat, please include the Support ID shown at the bottom of the App’s Settings, so we can find it. “Delete all data” in the App removes the registration on our server at once (see 10).

If you are in the EU, EEA or the UK

You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability, and to object to processing based on legitimate interests. Where we rely on your consent, you can withdraw it at any time with effect for the future. You also have the right to complain to a data protection supervisory authority, in particular in the country where you live or work.

If you are in Türkiye (KVKK)

Under Article 11 of the KVKK you can ask whether your personal data is processed, request information about it, learn the purpose of processing and whether it is used for that purpose, learn the third parties in Türkiye or abroad to whom it is transferred, ask for incomplete or incorrect data to be corrected, ask for it to be deleted or destroyed and for these steps to be notified to third parties, object to a result against you that arises solely from automated analysis, and claim compensation for damage caused by unlawful processing. You can send your request to the address or email above.

If you are in the United States

Depending on your state (for example California, Virginia, Colorado, Connecticut or Washington), you may have the right to know what personal information we process, to access, correct or delete it, and to opt out of the “sale” or “sharing” of personal information for targeted (cross-context behavioural) advertising. We do not sell personal information for money. Measuring our ads with Meta may count as “sharing” under some state laws. You can opt out by writing to us. Not allowing tracking on iPhone, or deleting your advertising ID in your Android phone’s settings, also stops the use of your advertising identifier. We will not treat you differently for using your rights. If we decline your request, you may appeal by replying to our decision.

10. Your choices in the App and on your phone

• Location: allow or deny location access in your phone’s settings, or choose a place yourself.
• Notifications: switch heads-ups and reminders off in the App or in your phone’s settings.
• Tracking (iPhone): Settings → Privacy & Security → Tracking.
• Advertising ID (Android): Settings → Privacy → Ads (the exact path varies by device).
• Meta: manage how Meta uses information from apps and websites in Meta’s Accounts Center, under “Your activity off Meta technologies”.
• Delete all data: in the App, Settings → Delete all data deletes everything the App stored on your phone, removes your phone’s registration from our server and cancels every scheduled notification. SkyFeel Pro stays active.
• Reminders about SkyFeel Pro: tap “Stop reminders” on the subscription screen.
• Ad measurement (Android, in the EU, the EEA, the UK and Switzerland): Settings → Privacy → Ad measurement in the App.

11. Children

SkyFeel is not directed at children. You must be at least 16 years old to use it. We do not knowingly process personal data of children. If you believe a child has used SkyFeel, please contact us.

12. Changes to this policy

We may update this policy when the App, the law or our providers change. We show the date of the latest version at the top. If a change is significant, we will tell you in the App or on this website.

13. Contact

Questions or requests about your data: info@skyfeelapp.com.
Noveria Dijital Teknolojiler Limited Şirketi, Küçükbakkalköy Mah. Selvili Sk. No: 4 İç Kapı No: 20, 34750 Ataşehir/İstanbul, Türkiye.