Privacy Policy
Last updated: 13 Temmuz 2026
This Privacy Policy explains how your personal data is collected, used, shared, transferred and protected through the FalBox mobile app and website (the "Service"). By using the Service, you accept the practices described here.
1. Data Controller and Contact
Your personal data is processed by Nova Global Resmi acting as data controller (KVKK) / data controller (GDPR). For any privacy matter you can reach us at novaglobalresmi@gmail.com.
Processing is carried out under Turkey's Personal Data Protection Law No. 6698 (KVKK) and, where applicable, the EU General Data Protection Regulation (GDPR).
2. Personal Data We Collect
Account and identity data: email address, display name, language preference, and — if you sign in with Apple/Google — the user identifier provided by those services.
Profile and birth data: birth date, time and place you enter for astrology features, and your zodiac sign. This data is processed only to produce the analyses you request.
Content data: your fortune questions, free-text inputs and, for readings such as coffee, palm or face, any photos you optionally upload.
Transaction and usage data: reading history, credit movements, subscription status, notification preferences.
Purchase data: subscription/purchase records (your card or payment-method details are not stored by us; payment is processed by Apple/Google).
Device and technical data: device type, operating system, app version, push token and basic log records.
3. How We Collect Data
Directly from you (account creation, profile, reading inputs); automatically (device/usage data as you use the app); and from Apple/Google as limited account information when you sign in with those platforms.
4. Purposes and Legal Bases
Providing the Service, generating fortune/astrology interpretations, and managing your account, credits and subscription — performance of a contract (KVKK art.5/2-c; GDPR art.6(1)(b)).
Security, fraud and abuse prevention, and service integrity — legitimate interests (GDPR art.6(1)(f)) and related legal obligations (KVKK art.5/2-ç).
Sending notifications you request and personalizing your experience — consent (GDPR art.6(1)(a)) or legitimate interests.
Profile data such as birth date/time/place and any photos you upload are processed solely to produce the relevant reading or astrology analysis, based on your explicit consent; you may withdraw consent at any time.
Compliance with legal obligations (e.g. retaining financial records) — legal obligation.
5. AI Processing
Fortune, tarot and astrology interpretations are AI-generated. To create the interpretation, your inputs (questions, texts, relevant photos and language preference) are sent to our provider OpenAI; content passes automated moderation before it is sent.
For readings that require a photo, your image is analyzed using the AI's image (Vision) capability. If you use voice narration, the interpretation text is converted to speech (TTS).
Under our provider's API terms, this data is not used to train models. AI outputs are for entertainment only and their accuracy is not guaranteed.
6. Sharing with Third-Party Providers
We do not sell your data. We share it only with providers who process it on our behalf as needed to deliver the Service (see the table below), with competent authorities where legally required, and with a successor in the event of a merger or transfer.
7. International Data Transfers
Some of our providers may process data outside Turkey (in particular the USA and the EU). Such transfers are carried out with the safeguards required by KVKK and the GDPR (e.g. standard contractual clauses and/or your explicit consent).
8. Retention
We retain your personal data for as long as needed for the relevant purpose and while your account remains active. Photos uploaded for a reading are kept for a limited period after processing. When you delete your account, data other than records we are legally required to keep is permanently deleted or irreversibly anonymized within a reasonable time.
9. Data Security
We apply technical and organizational measures such as access control, encryption in transit and at rest, row-level security (RLS), and keeping secret keys server-side only. No method is 100% secure, but we take industry-standard measures to protect your data.
10. Cookies and Similar Technologies
Our website uses only essential cookies/local storage needed for language and core functionality; no advertising or third-party tracking cookies are used. The mobile app uses your device's secure storage to keep your session safely.
11. Push Notifications
With your permission, we may send push notifications such as daily horoscope and reading-ready alerts. You can turn notifications off at any time from your device settings or within the app.
12. Your Rights
Under KVKK art.11 and the GDPR you have the right to know whether your data is processed, to request information and access, to rectification, to erasure, to restriction of and objection to processing, to data portability, and to withdraw any consent you have given. You may object if an automated decision produces an adverse effect on you.
To exercise your rights, contact novaglobalresmi@gmail.com; we will respond within the period required by law.
13. Children's Privacy
The Service is only for people aged 18 and over. We do not knowingly collect personal data from anyone under 18; if we learn we have, we will delete it.
14. Changes to This Policy
We may update this policy from time to time. The current version is always published on this page; for material changes we will make reasonable efforts to notify you in-app or by email. The effective date is shown above.
15. Contact and Complaints
For questions and requests: novaglobalresmi@gmail.com. If you believe your rights have been infringed, you may lodge a complaint with the Turkish Personal Data Protection Authority or, in the EU, with your local data protection authority.
16. Service
We work with the following third-party providers (processors/recipients) to deliver the Service. The app contains no advertising networks or ad-tracking SDKs. Each provider processes data only for the relevant purpose and under its own privacy policy:
| Service | Purpose | Data shared | Policy |
|---|---|---|---|
| OpenAI | AI interpretation generation, content moderation, photo (Vision) analysis and voice narration | Your texts, questions, photo content, language | View |
| Supabase | Authentication, database, storage, server functions (hosting) | Account, profile and birth data, reading history, uploaded content | View |
| RevenueCat | Subscription and in-app purchase management | Purchase transactions, app user id, device | View |
| Apple | Sign in with Apple and App Store purchases | Account identifier, purchase info (managed by platform) | View |
| Sign in with Google, Google Play purchases and Android notification delivery | Account identifier, purchase info, push token | View | |
| Expo | Push notification delivery and app updates | Push token, app version/runtime info | View |
| Open-Meteo | Birthplace geocoding for astrology | The location/city name you enter | View |