Version date: 2026-10-08
Who operates PACT?
PACT is provided by Hasan Eksi (Lone), the data controller, in Türkiye. Address: Dikkaldirim Mah 2.Halis Sok. No:15 Kat:3 D:4 Osmangazi/Bursa. Contact: limoncreatif@gmail.com.
Information and purposes
Account identifiers, sign-in details, name, language and time zone support account access and preferences. Guest or anonymous use can still involve installation and account identifiers; it is not necessarily anonymous data. Optional onboarding answers, habits, goals, activity, journals, moods, notes and exercise records support the features you use. Free text may contain sensitive information; do not add details you do not wish to share. PACT is not a medical service.
Sign-in and email verification
If you register with an email address and password, our authentication service processes them to create your identity and verify sign-in. Your password is not sent to the PACT application server. PACT uses account identifiers, verification and session information to manage access. An identity may already exist with the authentication service before email verification is complete, even if your PACT account has not yet been created. You can contact limoncreatif@gmail.com about this registration too.
Account verification messages
A verification email is sent as part of registration and account security. Do not share your verification link, password or sign-in codes. The verification message is not a marketing subscription.
Notifications and support
Notification tokens, preferences and delivery information support the notifications you enable. Support processes your email address, message and attachments to handle your request. Optional onboarding answers may include first and last name, age, goals and obstacles to personalise the start of your experience.
Groups, messages and images
Group members can see the profile and goal information you share with them. Messages and evidence images are accessible to the authorised participants of the relevant group or feature. Personal motivation images and journals are distinct from group sharing. Camera or photo access is used when you choose the corresponding feature. Other people may retain previously delivered messages, notifications or screenshots.
Optional photo uploads and storage
If you choose to upload an evidence photo or a personal motivation image, PACT checks your access and provides a temporary upload link. Your device sends the selected file to a cloud image-storage service; PACT processes it to provide the feature you chose, including resizing and creating a thumbnail. A photo can be associated with your account and the relevant goal. Access to evidence shared in a group differs from access to a private motivation image. Deleting an account does not mean that every stored copy or backup disappears immediately.
Collection and legal grounds
We collect information electronically from your entries, devices, sign-in and payment providers, website use and support correspondence. Under Turkish Law No. 6698, ordinary account and service processing is assessed under performance of a contract (Article 5/2-c); security under legitimate interests subject to your rights (5/2-f); mandatory records under legal obligations (5/2-ç); and disputes under establishing, exercising or protecting a right (5/2-e). These grounds alone do not authorise sensitive-data processing; Article 6 applies separately. Using PACT or entering text is not itself explicit consent. Where consent is needed, it must be specific and separate; contact us to withdraw it.
Service providers
Authentication services support sign-in and account verification; notification services deliver permitted notifications. App stores and purchase-verification services check purchases and access. Advertising services process ad and reward-verification data. Cloud application and database hosting services handle service records; cloud storage and distribution services store selected images and deliver updates. Email services handle support correspondence. Crash-diagnostic services process technical error reports to improve reliability. Each group receives the identifiers, content or technical data needed for its stated function.
Crash and error diagnostics
In versions that include crash reporting, PACT uses a crash-diagnostic service to find errors and improve stability. Technical reports can include installation identifiers, app version, device and operating-system information, and crash traces. PACT limits the content of its custom screen-error reports; this does not mean that every diagnostic record is anonymous or that every automatically collected crash report has the same limits. Journals, private messages and photos are not intended to be diagnostic report content. Diagnostic records and storage providers can have separate retention and deletion processes.
Advertising, purchases and diagnostics
Even non-personalised advertising can process device identifiers, approximate location and interactions. Reward validation uses an account-linked identifier. The purchase-verification service processes purchase and profile information and may collect IP addresses under the configured service. Usage events may include installation identifiers, event time and onboarding or purchase steps, and can become account-linked. Crash reports are not intended to contain journals or private message text. A diagnostic service is not a guarantee that all infrastructure logs are free of personal data.
Device storage and website
Some drafts, settings and unsynchronised content are stored in encrypted device storage; this does not mean every server record is end-to-end encrypted. Notifications can appear on a lock screen. The website can remember dismissed promotions and preview choices in session storage; restored browser sessions may preserve these choices. Site management software uses login/security cookies for administrators. Hosting services may keep access and error logs. Using the website does not upload your mobile journals. You can clear site data in your browser and manage notifications in device settings.
International processing
The recipient groups described above can process relevant information outside Türkiye. Turkish cross-border transfer conditions under Article 9 are separate from domestic processing grounds. This notice and use of the service do not themselves authorise a transfer. Contact PACT for information about recipients and applicable safeguards. This notice does not claim that one country's rules establish compliance in every country.
Retention and deletion
Retention depends on the data type, service purpose, support request, security investigation and applicable legal duties. There is no single period for all data or promise of immediate deletion. Backups and providers may follow different cycles. Applicable Turkish rules require retaining minimal disposal records for at least three years; this does not mean deleted journals are retained for three years. Ask us about a particular record and its retention basis. Deletion requests include consideration of connected services and lawful exceptions.
Request account deletion
Email limoncreatif@gmail.com with the subject “PACT account deletion”. Include your sign-in method and the sign-in email that identifies your account. For guest use without an email, describe the situation; do not invent an address. You can request help even without app access. Do not send passwords, sign-in codes or card information.
What happens next?
PACT verifies ownership and explains the scope and outcome. Sending an email or receiving acceptance is not confirmation that deletion is complete. An active subscription does not prevent a deletion request. We explain any information that must be retained and why. Requests under Turkish law are answered within 30 days; applicable requirements elsewhere are assessed separately.
What deletion covers
The request is assessed for account details, journals and moods, habits and progress, onboarding, notes, images, messages, support and account-linked usage or notification records, including connected sign-in and purchase services. Closing groups you own may affect shared access but does not delete other people's independent records. Copies already delivered to other devices cannot be guaranteed to be recalled.
Subscriptions and deleted content
Account deletion does not cancel store subscriptions or initiate refunds. Cancel renewal separately in the relevant store. Deleted journals, habits and progress cannot be recovered by creating a new account. Contact support about purchased access; recovery of personal content is not promised.
Your rights
Contact limoncreatif@gmail.com or the postal address above to ask about processing, purposes, recipients, correction or deletion, and to exercise applicable rights. Under Article 11 of Turkish Law No. 6698, you may also request notification of correction/deletion to recipients, object to adverse results based solely on automated analysis and seek compensation for unlawful processing. Other mandatory rights remain unaffected. Proportionate identity verification may be necessary. Requests under Turkish law are answered within 30 days; other applicable requirements are assessed separately. Reading this page does not waive your rights.
Changes
We update the displayed version date when this notice changes. Required notices and consent processes apply to changes that materially affect your rights or paid service. These terms do not remove mandatory legal rights.