01Who we are
DeferLabs (“DeferLabs”, “we”, “us” or “our”) is an independent studio that designs and develops mobile applications for iOS and Android. This Privacy Policy describes how we handle information when you use any of our mobile applications (the “Apps”), visit our website at deferlabs.com (the “Site”), or contact us for support — together, the “Services”.
DeferLabs is the developer and publisher of the Apps and is responsible for the personal data processed through the Services. You can reach us at any time at [email protected].
02Scope
This policy applies to every App published by DeferLabs on the Apple App Store and Google Play, unless an App shows you its own privacy notice — in that case, the App-specific notice supplements this policy and takes precedence where the two differ.
Each App's store listing also summarises its data practices (Apple's “App Privacy” details and Google Play's “Data safety” section). This policy does not cover third-party websites or services that our Apps may link to; their own privacy policies apply.
03Information we collect
We follow a simple rule: collect as little as possible, and only for a clear purpose. Depending on which App you use and which features you choose, we may process the following.
Information you give us
- Account details — if an App offers accounts: your email address, display name and login credentials (passwords are stored in hashed form), or an identifier provided by Sign in with Apple or Google Sign-In.
- Content you create — anything you enter, save or upload inside an App, processed only to provide the feature you are using.
- Support messages — your email address and whatever you choose to include when you contact us.
- Feedback and survey answers — if you choose to share them.
Information collected automatically
- Device and app information — device model, operating system version, app version, language, region or time zone, and an app-specific installation identifier.
- Usage information — which features are used, session length and similar interaction data, which we use in aggregated or pseudonymised form.
- Diagnostics — crash logs, error reports and performance data that help us find and fix problems.
We do not access your contacts, photos, microphone, camera, precise location or health data unless an App clearly asks for your permission to power a specific feature. You can change these permissions at any time in your device settings. Apps that show ads may infer your approximate location (for example, your country or city) from your IP address through Google AdMob, as described below.
Purchase information
In-app purchases and subscriptions are processed by Apple (App Store) or Google (Google Play). We never receive your full payment card details. We do receive limited transaction information — such as the product purchased, price, currency, transaction identifier, purchase date and subscription status — so we can unlock features, restore purchases and help you with billing questions. This transaction information is processed for us by AppActor, our purchase and subscription management provider.
Services built into our Apps
Our Apps include the following third-party software development kits (SDKs). They collect the data below directly from the App on your device. The category names match those used in Google Play's “Data safety” section.
- Google AdMob
- Used in Apps that show ads, to serve and measure ads. It collects automatically: your IP address, which may be used to estimate your approximate location; app interactions such as app launches, taps and ad views; diagnostics such as crash logs and performance data about the App and the SDK; and device or other IDs such as the Android advertising ID and App Set ID. Google uses this data for advertising, ad measurement, frequency capping, analytics and fraud prevention. It is encrypted in transit (TLS). Our Apps only request non-personalised ads — see Advertising & tracking.
- AppActor
- Used in Apps that offer in-app purchases or subscriptions, to verify purchases, unlock and restore what you bought, and run remote configuration and experiments. AppActor processes data on our behalf as our service provider: user IDs (an app user ID or an anonymous identifier generated by the SDK); purchase history (product IDs, price, currency, transaction and original transaction IDs, store country, and purchase, renewal, cancellation and refund status); and app info and device context (platform, OS version, app version, device model, language, time zone and country). Data is encrypted in transit (TLS).
When you visit this website
The Site does not use advertising or tracking cookies. Our hosting provider may process standard server logs (such as IP address, browser type and pages requested) to keep the Site secure and reliable. The Site loads web fonts from Google Fonts; when it does, your browser connects to Google's servers, which receive your IP address.
04How we use information
We use information to:
- provide, operate and maintain the Apps and the features you ask for;
- process and verify purchases, restore purchases and manage subscriptions;
- show non-personalised ads in Apps that are supported by advertising, and measure them;
- respond to your questions and support requests;
- diagnose crashes, fix bugs and improve performance;
- understand, in aggregate, how the Apps are used so we can improve them and build new features;
- keep the Services safe, and prevent fraud, abuse and security incidents;
- send you service messages, such as account or security notices; and
- comply with our legal obligations.
We will only send you marketing messages if you have agreed to receive them, and you can opt out at any time.
05Legal bases for processing
If you are in the European Economic Area, the United Kingdom, Türkiye or another region with similar laws, we rely on the following legal bases under the GDPR, UK GDPR and Turkish Personal Data Protection Law No. 6698 (“KVKK”):
- Contract
- To provide the Apps and features you request, including accounts and purchases.
- Legitimate interests
- To keep the Services secure, fix problems and improve our Apps — balanced against your rights and expectations.
- Consent
- For optional features such as device permissions or marketing messages, and for ads where the law requires consent — in the EEA, the UK and Switzerland we ask through Google's consent form before ads are requested. You can withdraw consent at any time.
- Legal obligation
- Where we must keep or disclose information to comply with the law.
07Advertising & tracking
Some Apps are free and supported by advertising. These Apps show ads through Google AdMob, and every ad request is non-personalised: ads are not chosen based on your past behaviour or a profile built across other companies' apps and websites. We do not track you across other companies' apps and websites, so our Apps do not show Apple's App Tracking Transparency prompt.
Even non-personalised ads rely on some data — such as device identifiers, your IP address and app interactions — for frequency capping, aggregated ad reporting, and preventing fraud and abuse. The data AdMob collects is listed under Information we collect.
If you are in the European Economic Area, the United Kingdom or Switzerland, the App shows Google's consent form before any ads are requested. You can review or change your choice at any time from Privacy options in the App's settings.
You can also control your advertising ID on your device:
- Android: Settings → Google → Ads (or Settings → Privacy → Ads), where you can reset or delete your advertising ID.
- iOS: Settings → Privacy & Security → Tracking.
08Data retention
We keep personal data only for as long as we need it for the purposes described in this policy:
- Account data is kept while your account is active and deleted within 30 days after you delete your account or ask us to delete it.
- Support messages are kept for as long as needed to resolve your request and handle any follow-up, then deleted.
- Diagnostics and analytics are kept in aggregated or pseudonymised form for a limited period set by the relevant provider.
- Purchase records processed by AppActor are kept for as long as needed to restore your purchases and meet our legal and accounting obligations.
- Advertising data collected by Google AdMob is retained by Google under its own retention policies.
- Backups containing deleted data are overwritten on a rolling basis, within 90 days.
We may keep certain information for longer where the law requires it (for example, for tax or accounting purposes) or to resolve disputes and enforce our agreements.
09Security
We protect information with technical and organisational measures appropriate to the risk, including encryption in transit (TLS), encryption at rest where supported by our providers, access controls and the principle of least privilege. No method of transmission or storage is completely secure, but we work hard to protect your data and will notify you and the relevant authorities of a data breach where the law requires it.
10International transfers
Our service providers may process information in countries other than the one you live in, including the United States and member states of the European Union. When we transfer personal data internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, adequacy decisions, or the transfer mechanisms provided for under KVKK.
11Your rights & choices
Depending on where you live, you may have the right to:
- access the personal data we hold about you and receive a copy of it;
- correct inaccurate or incomplete data;
- delete your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting processing that happened before; and
- lodge a complaint with your local data protection authority — in Türkiye, the Personal Data Protection Authority (KVKK).
California residents have the right to know what personal information we collect and how we use it, to delete and correct it, and to opt out of its “sale” or “sharing”. We do not sell or share personal information as those terms are defined under California law, and we will never discriminate against you for exercising your rights.
To exercise any of these rights, email [email protected]. We may need to verify your identity before acting on a request, and we will respond within the time required by applicable law.
12Account & data deletion
You can ask us to delete your account and associated personal data at any time — from inside an App where accounts are offered, or by emailing us from the address linked to your account. Step-by-step instructions, including what we delete and what we may need to keep, are on our account deletion page.
Uninstalling an App does not delete data stored on our servers, and deleting your account does not cancel an active subscription. Please cancel subscriptions through the App Store or Google Play.
13Children's privacy
Our Apps are not directed to children under 13, or under the minimum age of digital consent in your country (up to 16 in some parts of the EU), and we do not knowingly collect personal data from them. If an App is ever designed specifically for children, it will include its own notice and follow applicable rules such as COPPA and Google Play's Families Policy.
If you believe a child has provided us with personal data, please contact us and we will delete it.
14Changes to this policy
We may update this policy from time to time, for example when we launch new Apps or features or when the law changes. We will update the “Last updated” date at the top of this page, and if the changes are material, we will let you know in the App or on this Site before they take effect.
15Contact us
If you have any questions about this policy or how we handle your data, we'd love to hear from you:
DeferLabs
Email: [email protected]
Support: deferlabs.com/support.html