Derman — Privacy Policy (English)

Effective date: 1 October 2026 Data controller: Nivorbit · Contact: vedat@nivorbit.com

Derman helps you find on-duty (open) pharmacies in Türkiye. We respect your privacy: no account, no sign-up, no personal profile.

1. Data we process

• Location (approximate/precise). Read from your device only when you tap "Allow location", solely to find the nearest open pharmacies. It is sent to our server transiently for the query only; it is not linked to your identity and not stored. Location is optional — you can also pick a province/district.

• Advertising identifier. The app shows ads via Google AdMob: an in-list banner and in-feed ads (video possible, starts muted); full-screen ads only once you're done — when you return after calling a pharmacy or opening directions (at most every 15 minutes, 3 a day) — and an optional rewarded video ("24 hours ad-free"). No ads while you search, before results, or when the app opens. Family-safe "G" rating. AdMob may use your device advertising identifier to serve ads (see Section 4).

• App integrity. Firebase App Check (Play Integrity on Android, App Attest on iOS) verifies requests come from the genuine app. This is a device-integrity signal, not personal data.

• Offline cache. The last viewed pharmacy list (public info) is stored on your device; your location is not.

• "Report closed". Reporting a pharmacy sends only its id and a timestamp; no data identifying you is sent.

• Usage statistics (Firebase Analytics). Screens opened and counts of key actions (call, directions, share, province picked), plus coarse facts such as the province name. No location, phone number or free text is sent. It is switched on only after the consent flow (Section 4); in the EEA/UK it stays off unless you consent.

• Crash reports (Sentry). When the app crashes or data cannot be loaded: a technical error record (error type, app version, device model/OS). No IP address or user info is sent; location coordinates are stripped from error text.

• "Derman Ad-Free" purchase. The optional one-time purchase is made only through the Apple App Store / Google Play; the store handles payment and card details and no payment information reaches us. Ownership is stored only on your device; usage statistics record an anonymous "purchase" with its amount and currency.

We do not collect: name, email, phone, account, payment/card details, contacts, or photos.

• Website (derman.nivorbit.com). The website has no accounts, cookies, ads or analytics. For "nearest pharmacy", your location is read by your browser only when you ask, and the nearest pharmacies are computed in your browser; your location is not sent to our server. Like any web server, ours may briefly keep technical logs (IP address, request details) for security and debugging.

2. How we use data

Your location is used only to list and map nearby open pharmacies. Ad data is used by AdMob to serve ads. Usage statistics and crash reports are used to improve the app and fix errors.

3. Sharing

We do not sell personal data. Limited technical sharing: Google AdMob (ads), Google Play Integrity / Apple App Attest (app verification), Google Firebase Analytics (anonymous usage statistics), Sentry (crash reports). Our server pulls the pharmacy list from our data provider in bulk — your location is never sent to the provider.

4. Ad consent & choices

For EEA/UK users, ad and analytics consent is requested via Google's UMP; without consent no usage statistics are collected. On iOS, Apple's App Tracking Transparency (ATT) prompt may appear. You can limit ad personalization in your device settings.

5. Retention

Location is not retained after a query. The offline cache lives only on your device and is removed when you uninstall. "Report closed" records contain no personal data. Usage statistics are kept up to 14 months (Google Analytics), crash reports up to 90 days (Sentry).

6. Your rights (KVKK / GDPR)

As we don't collect identifying data, we hold no record identifying you. For questions, contact vedat@nivorbit.com. Your KVKK/GDPR rights to access, rectification, and erasure are respected.

7. Children

The app is not directed at children and does not knowingly collect data from them.

8. Changes

We may update this policy and will announce material changes on the app/store page. The current version is always published at this address.