Privacy Policy

This Privacy Policy explains how personal data is processed when you use the Finito mobile application (the "App"). It covers App usage, account sign-in, cloud sync, subscriptions, product analytics, crash reporting, notifications, and support communications.

Data Controller: Selami Demir (a sole proprietorship operating under the Finito brand)

Address: Sırrıpaşa Mah. Uygar Sok. No: 16 Daire: 2 Derince Kocaeli Türkiye

Privacy & Support Contact: finito@netbilio.com

Depending on how you use the App, we may process:

Anonymous use (no sign-in): Your in-app content is stored locally on your device and is not synced to our cloud. However, limited technical, analytics, and crash-reporting data may still be processed (e.g., event-based analytics and error reports). In-app content (notes/achievements) is not synced unless you sign in.

Registered use: Your content remains on your device and may also be synced to the cloud for cross-device access.

We process data to:

• Provide and operate the App (accounts, sync, core features)
• Manage subscriptions and verify purchases
• Maintain security and prevent abuse
• Improve the product (analytics) and fix issues (crash reporting)
• Provide customer support
• Send reminders/notifications if you allow them

Depending on your location and applicable law, we rely on the following legal bases:

• Performance of a contract (GDPR 6(1)(b); KVKK 5/2-c): account access, core features, and cloud sync (for registered users)
• Legal obligations (GDPR 6(1)(c); KVKK 5/2-ç): responding to lawful requests and complying with mandatory record-keeping obligations
• Legitimate interests (GDPR 6(1)(f); KVKK 5/2-f): ensuring security, preventing abuse, improving product quality, analytics, and troubleshooting/crash reporting
• Consent/permission where required (GDPR 6(1)(a); KVKK 5/1): notifications and other optional features that require your consent

We share data only as necessary with:

Your data may be processed outside Türkiye (e.g., within the EEA) due to the location of our infrastructure providers (such as EU-based cloud services). The Data Controller is located in Türkiye, and access to data from Türkiye may occur for support and operations. We implement appropriate safeguards as required by applicable law. Where required, we may request additional consent or use other lawful transfer mechanisms.

• Registered accounts: 18 months inactive: notice; 24 months inactive: final notice; 25 months inactive: deletion
• Analytics and crash reports: 12 months
• Support communications: retained for a reasonable period after the request is closed (typically up to 12 months), unless a longer period is required to resolve disputes or comply with legal obligations
• Backups: 30–90 days after deletion to fully purge

We apply reasonable technical and organizational measures (TLS/SSL, access controls). No system can be guaranteed 100% secure.

Contact us at finito@netbilio.com to exercise your rights under applicable laws (KVKK/GDPR). We may request identity verification for security. We aim to respond within 30 days (or within the timeframe required by law).

If processing is based on consent/permission, you can withdraw your consent at any time (for example, by disabling notifications in your device/app settings).

GDPR users may also lodge a complaint with their local supervisory authority.

Finito is not intended for children under 13. We do not knowingly collect personal data from children and will delete it if we become aware.

• In the App: Settings > Privacy > Delete Account
• Via the Web: finito.netbilio.com/delete-account

Deletion is subject to legal retention obligations. See Section 9 for backup timelines.

We operate a website at finito.netbilio.com to provide information about the App and to publish our legal pages (such as this Privacy Policy, the Terms of Service, and the account deletion page).

We use PostHog (EU Cloud) on our website to understand how visitors use the site (e.g., page views, clicks, and basic usage patterns) and to improve the website and the App. IP anonymization is enabled.

We do not use website analytics for behavioral/targeted advertising.

You may be able to limit analytics by blocking cookies/similar technologies in your browser settings and/or enabling "Do Not Track" where supported. If we implement an explicit on-site analytics preference toggle, you can also use it to disable analytics.

If you submit an account deletion request via finito.netbilio.com/delete-account, we process the information you provide (typically your email address and any details included in your request) for the purpose of:

• verifying the request,
• communicating with you about the request, and
• completing account and data deletion.

We retain deletion request records for a reasonable period (typically up to 12 months) to process the request, prevent abuse, and handle disputes or legal obligations, after which they are deleted or anonymized where feasible.

We may update this Policy from time to time. If changes are material, we may notify you in-app and/or by email.