Kalan Privacy Policy
1. In short
- Your income, expense, plan, budget, and debt records stay on your own device and in your own iCloud account. The developer has no server or account that holds them; the developer can't access them and doesn't collect them.
- Kalan has no user account or sign-in.
- When the app crashes, a technical crash report is sent to Google's Firebase Crashlytics service so the problem can be fixed. The report doesn't include amounts, descriptions, or account names.
- For exchange rates, only currency codes and dates are sent to a third-party service (Frankfurter).
- Notifications are scheduled on your device and don't include amounts.
- Kalan doesn't show ads, doesn't track you, and doesn't include a usage analytics tool.
- You can delete your Kalan data with "Delete all my data" in Settings. Section 6 explains what is and isn't deleted.
2. Data controller and contact
Kalan is developed and published by Yağız Savran. In this policy, "the developer" and "data controller" refer to him.
Contact and requests: support@kalanapp.app
3. What happens to which data
3.1 Your financial records
Your income, expense, plan, budget, account, card, and debt/installment records, your account and category names, and the descriptions you write are stored on your device. They aren't sent to the developer or collected by the developer. Kalan has no server that receives these records.
3.2 iCloud sync
With Kalan Pro, when iCloud is available, your records sync through Apple's CloudKit service, only with the devices signed in to your own iCloud account. This data stays in your iCloud account (not in the developer's iCloud account or on a developer's server) and is processed by Apple's services; the developer can't access it. Sync is on by default and runs automatically; it isn't guaranteed to be instant. You can pause it with the "iCloud sync" switch in Settings. Pausing doesn't delete your records in iCloud. This switch doesn't affect whether diagnostic data is sent.
Kalan Basic has no sync; your records stay only on your device. The iCloud copy of records that synced while you were on Kalan Pro stays in your iCloud account until you delete it. On Kalan Basic you can delete this copy in the app with "Delete all my data" on a device that synced before, or with Kalan Pro (section 6).
3.3 Error diagnostics (Firebase Crashlytics)
When Kalan crashes, a crash report is sent to Google's Firebase Crashlytics service so the problem can be found and fixed. The report includes information such as the app version, device model, iOS version, and the technical details of the crash (for example, the stack trace). The service may also use technical identifiers specific to the app installation (a Crashlytics/Firebase installation ID) and session/device events, and, as with any internet request, Google's servers can technically see the connection's IP address. The full list of what the service collects and how it is processed is described in Google's documentation and policy (see section 5).
Transaction amounts, descriptions, debt information, account names, limits, balances, the contents of files you export, and labels you write are never added to diagnostic data.
Diagnostic reporting is on by default and can't be turned off inside the app.
Kalan doesn't include Google Analytics or any other usage analytics tool.
3.4 Exchange rates
To show records in different currencies, rates come from Frankfurter, a third-party service that provides the European Central Bank's daily reference rates. A rate request can be made while the app is open or during a background refresh that iOS allows. To our knowledge, the service is delivered through Cloudflare infrastructure. As with any internet request, this service can see your device's IP address; the service states that it doesn't store IP addresses (the developer hasn't independently verified this statement).
Kalan's rate request doesn't include amounts, descriptions, or identity; only currency codes and the dates needed are sent. If all your records and your display currency match your account currency, no rate is needed and no request is made. Rates are reference rates, not bank rates.
3.5 Kalan Pro subscription
Purchases and payments are handled by Apple. Your payment details and Apple Account details aren't passed to the developer. Kalan reads whether your subscription is active on your device through Apple's StoreKit framework. The developer can see the sales and subscription reports that Apple provides through App Store Connect; Kalan doesn't add information to those reports on its own.
3.6 Notifications and export
Notifications are scheduled and shown on your device. The developer has no server that sends notifications, and no account or device identifier is collected for them. Kalan can notify you about plan reminders (a day before and on the due day), a card's payment due reminder, a weekly summary if you have overdue payments, and, if your subscription's auto-renewal is off, a reminder the day before Kalan Pro ends. Notifications don't include amounts, descriptions, or labels; a card's payment due reminder may include the card's name. Whether a notification appears on your lock screen is controlled by your iOS settings.
Kalan doesn't ask for notification permission during onboarding. It asks only when you turn on a plan reminder or tap "Allow" in the form, save a card with its payment due reminder on, turn on the weekly summary in Settings, or tap "Allow" there. If you don't allow it, the rest of Kalan keeps working. You manage plan reminders in the plan form, a card's payment due reminder in the card form, and the weekly summary in Settings; the permission itself lives in iOS Settings.
PDF and CSV files are generated on your device; Kalan doesn't store or sync them. You decide who receives a file and where it goes.
3.7 What we don't collect
Kalan has no user account, email, or password. Kalan doesn't show ads, doesn't track you across apps and websites, and doesn't sell personal data.
4. Purposes and legal bases
| Data | Purpose | Legal basis |
|---|---|---|
| Financial records (your device and your iCloud) | Running the app, calculating Remaining, syncing between your devices | The developer doesn't collect or process this data; it stays on your device and in your own iCloud account. You control syncing. |
| Crash report (Crashlytics) | Finding and fixing bugs, keeping the app stable | Legitimate interests (GDPR Art. 6(1)(f); KVKK Art. 5/2-f): keeping the product reliable. The report contains no financial record content. |
| Rate request (IP, currency codes, dates) | Showing amounts in other currencies at reference rates | Performance of a contract (GDPR Art. 6(1)(b); KVKK Art. 5/2-c): providing the feature you ask for. |
| Subscription status | Unlocking Kalan Pro features | Performance of a contract; Apple handles the purchase. |
5. Third parties and international transfers
When you use Kalan, data is processed by the following services. All three services operate outside Turkey and may process and store data in various locations worldwide, including the United States and other places outside the EU/EEA, so the related data may be transferred outside Turkey. Frankfurter's processing location isn't published.
- Apple Inc. — iCloud/CloudKit (sync), App Store and subscriptions. Apple's privacy policy: apple.com/legal/privacy
- Google LLC (Firebase Crashlytics) — crash reports. For retention, processing, and transfer safeguards, see Google's documentation: firebase.google.com/support/privacy
- Frankfurter and its infrastructure provider Cloudflare — exchange rates. Frankfurter: frankfurter.dev; Cloudflare privacy policy: cloudflare.com/privacypolicy
The developer doesn't send your personal financial data to these services. International transfers are subject to these services' own processing terms and to the safeguards required by applicable law. Personal data isn't sold or shared for advertising.
6. Retention and deletion
- Your records on your device and in your iCloud account: They stay until you delete them. The "Delete all my data" option in Settings deletes the Kalan data on this device (accounts, cards, installments, entries, plans, budgets, categories and subscription types you added, your account currency and display currency, chart layout, the rate cache, form drafts, temporary export files, and Kalan notifications, including Kalan Pro data hidden on Kalan Basic). With Kalan Pro while signed in to iCloud (even if sync is paused), or on Kalan Basic if this device has synced with iCloud before, the Kalan data in your own iCloud account is deleted too, and other devices synced with the same account receive the deletion; when they receive it isn't guaranteed. This can't be undone.
- What "Delete all my data" doesn't cover: On Kalan Basic, if this device has never synced with iCloud, or no iCloud account has ever been used on this device, only the data on this device is deleted; data in iCloud or on your other devices is not deleted. Records on your other devices that never moved to iCloud aren't deleted either. Kalan data you use with a different Apple Account on this device isn't affected; to delete it, sign in with that account and do it there. Deleting doesn't cancel your Kalan Pro subscription; the subscription is with Apple. Device settings such as appearance, language, the iCloud sync switch, and notification preferences aren't affected by deletion. Crash reports aren't covered either (see below).
- If iCloud can't be reached: When the iCloud copy must be deleted too and iCloud can't be reached (for example, you're offline or iCloud is off), deletion doesn't start and Kalan doesn't show anything as "deleted". If the process stops at the iCloud step, Kalan tells you what wasn't deleted and offers to try again.
- If you delete the app: The copy on the device is removed; the copy in iCloud remains. To delete the iCloud data too, use "Delete all my data" before removing the app. You can also review your iCloud storage on iPhone in Settings > [your name] > iCloud, but we can't promise that Kalan's data appears there as a separate item you can delete. The most reliable way to remove the iCloud copy is "Delete all my data" in the app.
- Crash reports: They are stored in Google's Firebase Crashlytics service with a random Firebase installation ID specific to your installation of the app; this ID isn't tied to your personal information or Apple Account; according to Google's documentation, they begin to be removed after 90 days. "Delete all my data" doesn't cover these reports or the installation ID; the reports contain no financial data. The developer may not be able to find a report that belongs to you because reports don't link to your personal information or Apple Account.
- Rate requests: The developer doesn't store the IP address in rate requests. Kalan keeps downloaded rates in a cache on your device; "Delete all my data" clears that cache too.
- Subscription records: They are held by Apple and are subject to Apple's policy.
7. Your rights and how to exercise them
Your financial data and identity aren't stored; to detect problems in the app, only crash reports that don't identify you and a random installation ID that isn't associated with you are kept; you manage your data in the app and delete it with "Delete all my data". For questions, write to support@kalanapp.app; we reply within 30 days. When you write, don't send amounts, account details, or other sensitive data.
Under KVKK Art. 11 and, if you are in the EU/EEA, the GDPR, you have rights such as access, correction, erasure, and objection to processing; you can exercise them through the same email address. Because we can't look up crash reports by person, we may not be able to pick out a report as yours.
If you are not satisfied with the response, you can complain to the Personal Data Protection Board in Turkey (kvkk.gov.tr), or to the data protection authority in the country where you live in the EU/EEA.
8. Security
Your records are protected on your device by Apple's system protections and in your iCloud account by Apple's security measures. Rate and diagnostic requests use encrypted connections (HTTPS). No method of transmission or storage over the internet is completely secure.
9. Changes
If how the app uses data changes, we will update this policy and change the effective date at the top. For a meaningful change, we will also mention it in the "What's New" notes of the app update.
10. Contact
Yağız Savran — support@kalanapp.app