Primal
Privacy Policy
Effective date: 3 November 2026
Last updated: 3 November 2026
This Privacy Policy explains how Yavuz Gültekin Kuş ("Primal", "we", "us") collects, uses and protects your information when you use the Primal mobile application and the website at getprimalapp.com (together, the "Service").
We built Primal to collect only what it needs to work. We do not sell your personal data, and we do not use it for advertising.
If you have any questions, contact us at supportprimal@gmail.com.
1. Who is responsible for your data
The data controller for the Service is:
Yavuz Gültekin Kuş
İstanbul, Türkiye
Email: supportprimal@gmail.com
2. Information we collect
2.1 Information you give us
- Account information. When you sign in with Apple or Google, we receive a unique account identifier and, depending on what you allow, your email address and name. If you use Apple's "Hide My Email", we receive a private relay address instead of your real email. Your account gets a random account ID in our database.
- Profile information. The name you choose in the app.
- Onboarding answers. Your age and your answers to the onboarding questions — for example which capacity you want to develop, how often you exercise, what motivates you, your estimated screen time, how often you learn new things, why you want to make a change and when you last felt proud of yourself. We use these to set up your starting plan.
- Challenge inputs. Values you set when you start certain challenges — for example your wake-up time or the skill you want to practise.
- Journal entries. What you write in challenges that ask for it (for example "Daily Journal"). See Section 2.6.
- Messages you send us. The content of messages you send through "Suggest Us" or "Contact Us" (with your in-app name, language, platform and app version), or by email.
2.2 Information created when you use the app
- Progress data. Tasks you start, complete or fail and when (including Locks); the Focus Tasks you choose; your stats (STR, INT, AGI, WIL), experience and level; your streak, frozen days and the days you were active; relics you unlock and the relic you equip; your Path.
- Challenge data. Challenges you start, leave or finish, the days you check in, and whether a challenge was completed or failed. The number of players who completed each challenge is shown in the app as an anonymous total.
- Preferences. Your language, notification and sound effect settings.
Your progress is kept on your device and, while you are signed in, saved to your account (cloud save) so it can be restored on another phone.
2.3 Information collected automatically
- Device and technical information. Device type, operating system and app version, language and time zone, and basic logs needed to run and secure the Service.
- Notifications. Reminders are scheduled on your device by the app itself. We do not collect a push notification token.
- Diagnostics. If the app crashes or hits an error, a technical report that helps us fix it: what went wrong, the app's state at that moment (for example which screen was open), your device model, operating system and app version, and your account's random ID. We set these reports up not to include your name, email or what you write in the app.
- Usage analytics. How the app is used — for example which screens you open, which onboarding steps you complete, when you sign in, start or finish a task or challenge, open the Primal Pro screen and whether a purchase completed — together with the device information above. Before you sign in, analytics use a random identifier; after you sign in, they are linked to your account's random ID, never to your name or email. Location lookup from your IP address is turned off.
- Reminder records. To learn which reminder texts are useful, we record — linked to your account's random ID — which reminder was scheduled, cancelled or opened: the text variant, the time slot, the language and the challenge it was about, if any.
2.4 Purchases
If you buy a subscription, the payment is handled entirely by Apple (App Store) or Google (Google Play). We never see or store your card details. We receive information about your subscription status (for example: active, trial, expired; monthly or yearly), linked to your account's random ID, so we can unlock the right features. Purchases and subscription status are managed through RevenueCat (Section 4).
2.5 Information we do not collect
We do not collect your precise location, contacts, photos, microphone or camera data, or any data from Apple Health or Google Health Connect. We do not verify tasks with your camera or sensors — completion is self-reported.
We do not ask about your health and do not collect health data or any other special category of personal data (GDPR Article 9; KVKK Article 6). Onboarding questions such as how often you exercise are general habit information. Please do not send us detailed health information in messages.
2.6 Journal entries
Some challenges ask you to write a few lines a day. These entries are personal: they are kept on your device and stored with your account so they can be restored, and are used only to show them back to you. We do not read them, analyse them, use them for analytics or share them, except with the hosting provider that stores your account. They are deleted when you delete your account.
3. How we use your information
| Purpose | Data used | Legal basis (GDPR) |
|---|---|---|
| Create and run your account, sign you in, keep your progress in sync | Account, profile, progress | Performance of a contract |
| Set up your starting plan and suggest tasks | Onboarding answers, progress | Performance of a contract |
| Count streaks, unlock relics, run challenges and Paths | Progress, challenge data, journal entries | Performance of a contract |
| Send reminders (scheduled on your device) | Progress, challenge data, preferences | Consent (you can turn notifications off at any time) |
| Learn which reminder texts are useful | Reminder records | Legitimate interest |
| Answer your messages and suggestions | Messages, account | Legitimate interest |
| Unlock paid features | Subscription status | Performance of a contract |
| Keep the Service secure, prevent abuse, fix bugs | Technical data, diagnostics | Legitimate interest |
| Understand which features work and improve the app | Usage analytics | Legitimate interest / consent where required |
| Comply with the law | Any data required | Legal obligation |
We do not use your data for advertising, and we do not make decisions about you that produce legal or similarly significant effects based solely on automated processing.
4. How we share your information
We do not sell or rent your personal data. We share it only with service providers that help us run the Service, under contracts that require them to protect it:
| Provider | What they do | Location |
|---|---|---|
| Supabase | Database, authentication and file storage (our backend) | European Union (Ireland) |
| Apple | Sign in with Apple, App Store purchases | Global |
| Sign in with Google, Google Play purchases, and our support inbox (Gmail) | Global | |
| RevenueCat | Managing subscriptions and purchase status | United States |
| Sentry | Crash and error reporting | United States |
| PostHog | Product analytics | European Union |
| Resend | Delivering the messages you send us to our inbox by email | United States |
| Expo (650 Industries) | Delivering app updates | United States |
| Framer | Hosting our website | European Union / United States |
We may also disclose information if required by law, to protect our rights or the safety of users, or as part of a merger or acquisition (in which case this Policy will continue to apply).
5. International transfers
Our main database is hosted in the European Union. Some providers listed above may process data outside your country, including in the United States. Where this happens, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, and, for users in Türkiye, the transfer mechanisms set out in the Personal Data Protection Law No. 6698 (KVKK).
6. How long we keep your data
- Account, profile, progress, challenge data, journal entries and reminder records: for as long as your account exists.
- Messages you send us: deleted from our database when you delete your account; the copy that reached our inbox by email is kept for up to 24 months, then deleted.
- Usage analytics: up to 12 months, linked only to your account's random ID.
- Technical logs and diagnostics: up to 90 days.
- Purchase records: as long as Apple, Google, RevenueCat and the law require (for example for tax and accounting).
When you delete your account (Profile → Delete Account), your account and everything stored with it in our database — your cloud save, progress history, challenge records, reminder records and messages — are deleted right away. Primal's access to your Apple ID is revoked, and Primal is removed from your Google account's connected apps. Database backups are overwritten within 30 days. Usage analytics and diagnostics already sent stay linked only to the deleted account's random ID until their retention period above ends. Deleting your account does not cancel a subscription: cancel it in the App Store or Google Play.
7. Your rights and choices
Depending on where you live, you have the right to:
- access the personal data we hold about you and receive a copy;
- correct inaccurate data (you can change your name in the app at any time);
- delete your data — you can delete your account in the app under Profile (the settings button on Home or Progress) → Delete Account, or email us;
- object to or restrict certain processing;
- data portability — receive your data in a common machine-readable format;
- withdraw consent at any time (for example, by turning off notifications in the app or in your device settings);
- opt out of analytics by emailing us;
- lodge a complaint with your local data protection authority.
To exercise any of these rights, email supportprimal@gmail.com. We will respond within 30 days. We may need to verify your identity first.
Users in the European Economic Area and the United Kingdom
You have the rights listed above under the GDPR / UK GDPR. You may complain to the supervisory authority in the country where you live or work.
Users in Türkiye (KVKK)
Under Article 11 of the Personal Data Protection Law No. 6698, you have the right to learn whether your data is processed, request information about it, learn the purpose of processing, know the third parties it is transferred to, request correction or deletion, object to results arising from automated analysis, and claim compensation for damages caused by unlawful processing. You can send requests to supportprimal@gmail.com. You may also complain to the Personal Data Protection Authority (KVKK).
Users in California
We do not sell or share personal information for cross-context behavioral advertising. You may request access to or deletion of your personal information by emailing us, and we will not discriminate against you for exercising your rights.
8. Security
We use industry-standard measures to protect your data, including encryption in transit (HTTPS/TLS), access controls that let each user read only their own data, and restricted access for our team. No system is completely secure, but we work to protect your information and will notify you and the authorities of a breach where the law requires.
9. Children
Primal is not intended for children under 13. If you are under the age required to consent to data processing in your country (for example, 16 in some EU countries), you may only use Primal with the consent of a parent or guardian. If we learn that we collected data from a child without the required consent, we will delete it. If you believe this has happened, contact us at supportprimal@gmail.com.
10. Changes to this Policy
We may update this Policy from time to time. We will change the "Last updated" date above and, for material changes, notify you in the app or by email before they take effect.
11. Contact
Yavuz Gültekin Kuş
İstanbul, Türkiye
supportprimal@gmail.com