Skip to content
f
FerahDarius Medya Limited Şirketi
Türkçe

Privacy Policy

Last updated: November 5, 2026

Summary

Information about your quit-smoking journey remains only on your phone. We do not have a server that stores this information, and we cannot see it. We do not use advertising, ad tracking, or behavioral analytics tools, and we do not sell your data.

The only personal data that reaches us is: if you email us, your email address and message; and if you purchase Pro, the order information in the sales report the store sends us.

Data controller

Data controller: Darius Medya Limited Şirketi · Gazicelal Mah. 10052 Sk. Özmen İş Merkezi K:2 No:25, Edremit / Balıkesir, Türkiye · Edremit Chamber of Commerce registration no. 9502 · digital@dariusmedya.com

Detailed information for users in Türkiye is available in the KVKK Privacy Notice (Türkiye).

Information stored on your phone

Your display name; the time of your last cigarette or planned quit time, your daily number of cigarettes, the price per pack, and changes you make to this information over time; the duration of one cigarette; your reasons for quitting; your daily check-ins (mood, craving level, and notes); moments you save; your breathing breaks; records of smoking again; your badges, health benefits, garden, and Leaves balance; your Savings Jar goals and the amounts allocated to them; your level and stars in the Distract game; your currency, theme, and reminder preferences; and which version and language of the legal documents you accepted and when you accepted them.

This information is processed only on your phone to make the app work. Savings, counters, badges, and the health timeline are also calculated on your phone. This information is not sent to us or anyone else.

Even though the information is not sent to us, Ferah's storage and calculation of it on your phone may constitute personal data processing. We therefore also explain this processing in this Policy and comply with data-protection rules:

  • Purpose: to provide the features you request, such as quit-smoking tracking, motivation, journaling, the garden, and the health timeline.
  • Legal basis: performance of a contract for general information under GDPR Article 6(1)(b) and KVKK Article 5(2)(c). For health-related information, such as smoking, mood, cravings, and smoking again, the consent you give during initial setup by reading and accepting this policy, under GDPR Article 9(2)(a) and KVKK Article 6.
  • Withdrawing your consent: Because Ferah cannot function without this information, you can withdraw your consent by deleting your information: you may first obtain a copy through Profile > Export my data and then delete it using Delete my account. Withdrawal does not make prior processing unlawful.

Sign-in

You may sign in with Apple or Google, or continue without creating an account. Ferah does not create an account on its own server; Apple or Google handles sign-in directly on your phone. The account identifier received during sign-in and, if you permit it, your name are stored only on your phone and are not sent to us. Ferah does not use your email address.

Sign-in is used only to determine which Apple or Google account your backup will be written to. If you continue without creating an account, Backup remains disabled. You may connect an Apple or Google account later, and your data will remain unchanged.

Backup

Backup is optional and remains disabled until you enable it. Before you enable it, you are shown what will be sent and where, and your consent is requested.

If you enable Backup, a copy of your Ferah information, including health-related information, is transmitted over the internet and written to your own iCloud account when you sign in with Apple or to the private, app-specific folder in your own Google Drive account when you sign in with Google. This means that your information is transferred to Apple or Google's servers, which may be located outside your country. A backup is made automatically, no more than once every 6 hours, or whenever you request one. You can restore it on a new phone by signing in with the same account.

For Google Drive backup, Google asks on its own screen whether you want to allow Ferah to access only its private folder; Ferah cannot see other files in your Drive. The backup remains in your account and is subject to Apple or Google's terms. We cannot access the backup.

Your phone's own iCloud, Google, or computer backups may also contain Ferah data. Those backups are also subject to Apple and Google's policies.

Purchases

Pro membership is purchased through the App Store or Google Play. We do not see your payment or card information.

Ferah checks whether your Pro entitlement is valid by reading it directly from the store on your phone. No information is sent to us or to any other service for this check; we do not use a separate purchase-verification service.

The store sends us order information about sales (the order number, plan, date, and information such as country to the extent shared by the store) as a sales report. These reports do not include your name, email address, or the information in Ferah.

Notifications

Ferah requests only notification permission, and this permission is requested only when you enable a notification under Profile > Notifications. There are two notifications, both disabled by default: an achievement notification when you reach a new achievement and a garden reminder if your garden has not been watered before the end of the day. Notifications are scheduled on your phone; no server is used, and no advertising or marketing notifications are sent. You may disable permission at any time in your phone's settings.

Permissions

No permission other than notifications is requested on your phone. We do not access your contacts, location, camera, microphone, or photos. The separate authorization you grant through your Google account for Google Drive backup is described above in the Backup section.

Sharing and invitations

When you share a badge or your progress, the image is prepared on your phone and your phone's sharing screen opens. You choose what to send, to whom, and through which app, such as WhatsApp. "Invite a friend" works the same way. Nothing is sent to us.

No advertising or tracking

We do not display ads, use your advertising identifier (IDFA / advertising ID), use third-party advertising, behavioral analytics, or tracking tools, or use cookies. We do not track you across other apps or websites.

External links

You can copy the links to sources for health benefits, such as CDC, WHO, and NHS, and open them in your browser. Ferah does not open these websites itself; when you visit them, their own privacy policies apply.

Store and reviews

Your downloading and updating of the app, as well as any rating or review you submit in the store, are processed by Apple or Google; we cannot see who you are. No reward is provided in exchange for a review.

When you email us

We use your email address and message only to respond to you. If you write through the suggestion or support link in the app, the draft includes the app version, platform (iOS or Android), and app language; no user identifier or health information is added, and you can edit the draft before sending. Correspondence is stored in our Google Workspace email account, which means on Google's servers, and we delete it no later than 1 year after the matter is resolved.

You do not need to include health information such as smoking, a diagnosis, medication, or mental health information in your message, and we do not ask you to do so. If you voluntarily send such information, we do not use any portion that is unnecessary to respond and delete it as soon as possible.

Who receives your information

Information is shared only in the following circumstances and only as described:

  • Apple and Google: store purchases and, only if you enable them, sign-in and your own cloud backup.
  • Google (Google Workspace): emails you send us; Google acts as a data processor under our business agreement.
  • Advisors: only when necessary for accounting, tax, or a legal dispute and subject to confidentiality obligations; limited to the email and purchase records we hold.
  • Authorized public authorities and courts: only when legally required.
  • A person taking over Ferah: if Ferah is transferred to another person, only the email and purchase records we hold, provided that the same protections remain in place and you are notified in advance.

Because we cannot access the smoking, health, journal, garden, Savings Jar, or game information on your phone, we cannot share it with anyone. This information is sent only to your own Apple or Google account if you enable Backup.

Security

Information on your phone is stored in the protected area that the operating system allocates to each app. Your phone's lock, encryption, and up-to-date software, as well as the security of your Apple / Google account, also protect this information. Because this information is never sent to us, we do not have a copy.

We take reasonable measures for the email and purchase records we hold, such as restricting access, using a strong password, and enabling two-step verification. Absolute security cannot be guaranteed for any system. If we become aware of a data breach affecting these records, we investigate the incident, limit the harm, and notify the competent authority and affected individuals within the required period if required by law.

Retention periods

  • Information on your phone and your records of accepting legal documents: until you delete them.
  • Your own iCloud or Google Drive backup: until you delete the Ferah backup or remove it from your account.
  • Email correspondence: no later than 1 year after the matter is resolved; if there is a dispute, until it is resolved.
  • Sales and accounting records: for the period required by law, such as 3 years for distance-sales records, 5 years for tax records, and up to 10 years for commercial books in Türkiye.

Deleting your data

Through Profile > Export my data > Delete my account, you can delete all Ferah data on your phone and the Ferah backup in iCloud or Google Drive; the app's connection to your Apple or Google account is also removed. Uninstalling the app deletes only the data on your phone.

Apple or Google manages your store purchase history. You must separately cancel any active subscription through the store settings.

Your rights

You may obtain a copy of the information and legal-document acceptance records on your phone at any time through Profile > Export my data. To exercise your rights under the KVKK in Türkiye, including requesting information, correction, deletion, or objecting, you may email digital@dariusmedya.com; details are available in the KVKK Privacy Notice (Türkiye). See the next section for other countries.

Rights based on where you live

This section applies to the extent that the law where you live applies. The data we hold consists of email correspondence and the sales records the store sends us. Because we cannot access information that remains on your phone, you export and delete it yourself. You may email digital@dariusmedya.com to exercise your rights; we may request only the additional information necessary to verify your identity. Your use of the service will not be restricted because you exercise a right. No decision about you is made solely by automated systems.

Purchase information is necessary to provide Pro; emailing us is optional. Your data may be processed outside the country where you live, including in Türkiye and the USA, where data-protection rules may differ from those in your country.

European Union and United Kingdom

Under the GDPR and UK GDPR:

  • Legal basis: performance of a contract for general information on your phone; your consent for health-related information and Backup; performance of a contract and compliance with legal obligations for purchases; and our legitimate interest in responding to your questions for emails.
  • Your rights: access, correction, deletion, restriction of processing, data portability, objection to processing based on legitimate interests, and withdrawal of consent.
  • Transfer: transfers to Google, which stores our email, are protected by the EU Standard Contractual Clauses in Google's data processing terms.
  • Complaint: You may complain to the data-protection authority in your country, such as your state's data-protection authority in Germany, CNIL in France, Autoriteit Persoonsgegevens in the Netherlands, or ICO in the United Kingdom.

United States

We do not sell your personal data or share it for targeted advertising. Where the CCPA/CPRA and similar state laws apply, you have the right to know about, correct, and delete the data we process, and you will not be discriminated against for exercising these rights.

Consumer health data under the Washington My Health My Data Act and similar state laws:

  • Data covered: smoking and quitting information, reasons for quitting, craving and mood records, records of smoking again, breathing breaks, notes, and the health timeline calculated from them on your phone.
  • Source: only the information you enter and the calculations Ferah performs from it on your phone.
  • Purpose: to provide the quit-smoking tracking, motivation, journal, and health-timeline features you request.
  • Sharing and sale: We do not share health data with anyone and never sell it. It is sent only to your own Apple or Google account if you enable Backup.
  • Your rights: You can directly access and delete the data on your phone using Export my data and Delete my account, and you can withdraw your consent in this way. You may contact us about any data we hold; we will respond to your request within 45 days. If we deny your request, we will tell you why and explain how to appeal by emailing the same address with the subject line "Privacy appeal."

Canada

Under PIPEDA and applicable provincial laws, you may access your data, request its correction, and withdraw your consent. For unresolved matters, you may complain to the Office of the Privacy Commissioner of Canada (OPC) or the competent authority in your province.

Australia

Under the Australian Privacy Principles, you may access your data, request its correction, and complain about our privacy practices. Submit your complaint to us first; we will review it and generally provide a written response within 30 days. If you are not satisfied with the outcome, you may complain to the Office of the Australian Information Commissioner (OAIC). The data we hold is processed in Türkiye and on the servers of Google, which stores our email.

Japan

Under the APPI, you may request disclosure or correction of your data or suspension of its use. Emails you send us are stored with Google, which has servers outside Japan, including in the USA. The USA does not have a single federal law that generally protects personal data; Google protects this data through the technical, organizational, and contractual measures in its business agreement with us. We will provide additional information about these measures upon request. For unresolved matters, you may complain to the Personal Information Protection Commission (PPC).

South Korea

Under PIPA, you may access your data and request its correction, deletion, or suspension of processing. Privacy officer: Darius Medya Limited Şirketi · Gazicelal Mah. 10052 Sk. Özmen İş Merkezi K:2 No:25, Edremit / Balıkesir, Türkiye · Edremit Chamber of Commerce registration no. 9502 · digital@dariusmedya.com.

International transfer:

  • Data transferred: if you email us, your email address and message.
  • Country and recipient: Google LLC; its servers are located in several countries, including the United States.
  • Time and method: when you email us, through an encrypted internet connection.
  • Purpose: to respond to your request.
  • Retention: no later than 1 year after the matter is resolved; permanently deleted when the period expires.
  • Refusal: you can choose not to email us; all of Ferah's features still work.

You may complain to the Personal Information Protection Commission (PIPC) or the Personal Information Dispute Mediation Committee.

Age limit

Ferah is not designed for anyone under 18. If you become aware that someone under 18 has sent us information by email, contact us and we will delete it.

Changes

If this Policy is updated, the new version, its date, and a summary of material changes will be displayed in the app. If consent is required for a new type of data, purpose, recipient, or transfer, we will request it separately in advance; we will not automatically expand your existing consent.

Contact

You may send your questions to digital@dariusmedya.com.