feasymo

feasymo (the App, the Service, we, us) is purely a personal finance asset TRACKING application that lets users track cash, bank account, precious-metal, fund, and stock assets on their own or together with others through shared lists - it is not an investment, banking, or brokerage service (see the Terms & Conditions). This Privacy Notice is prepared in accordance with Turkey's Law on the Protection of Personal Data No. 6698 (KVKK) and, for our international users, in a manner consistent with the EU General Data Protection Regulation (GDPR). It explains what personal data we collect, why, and how.

feasymo is the Data Controller for the personal data it processes, within the meaning of KVKK Art. 3 and GDPR Art. 4. You can reach us using the contact details at the end of this notice.

Account Information: your first and last name, email address, an irreversibly hashed version of your password, your preferred main currency, language, and country (Türkiye or Other). The country is used only to decide which asset types are shown to you (see Terms & Conditions).

Financial Record Data: cash, bank account, precious-metal, mutual fund, BIST stock, time deposit, private pension (BES), and credit card spending entries you or other members of a shared list add (fields such as type, amount, exchange rate, date, and description). This data does not include any bank or brokerage connection or real-time feed - it is entirely manually entered by you.

Sharing and Membership Data: the email addresses of people you invite to a list, and the permission level (viewer/editor/owner) assigned to each member.

Technical and Usage Data: IP address, browser/device information, session and sign-in timestamps, and the score generated by reCAPTCHA to help prevent abuse.

Communication Data: information you provide when you contact us for support.

We collect your data directly from you, electronically, when you sign up, sign in, add or edit a financial record, or invite someone to a list. Our processing relies, under KVKK Art. 5 and GDPR Art. 6, on your explicit consent, the performance of a contract (our Terms & Conditions), compliance with our legal obligations, and our legitimate interests (such as fraud and abuse prevention).

We process your personal data to: create and authenticate your account; provide and maintain the Service (including asset tracking, shared list management, and live currency/gold price display); send in-service notifications by email (such as invitations, verification codes, and password resets); maintain the security of the Service and prevent misuse; comply with our legal obligations; and respond to support requests you submit.

We share a limited amount of data with the following third-party service providers, strictly to operate the Service and only for the purposes we specify; these providers process data solely on our behalf:

• Supabase, for database, authentication, and delivering account and transactional emails, • Vercel, for hosting and infrastructure, • Fonoloji, to source current currency, gold, and fund prices; Yahoo Finance, to source BIST stock prices (these integrations do not send any data about you - they only pull public market price data), • Google reCAPTCHA, for bot and abuse prevention; and Google Analytics 4 and Google Ads, via Google's unified "Google tag" infrastructure, to measure site traffic/usage statistics and conversions (e.g. sign-ups) from our ad campaigns (this cookie loads by default regardless of your cookie preference - see our Cookie Policy), • Anthropic (Claude), if you choose to use the "Upload Image" feature (automatically creating a record from a photo of a receipt, invoice, or statement), to read the uploaded image and extract the data; your image is never sent to this provider unless you use this feature.

When you join a shared list, other members of that list can see your name and any financial records you add or own - this is a core, expected part of the Service's functionality and is apparent to you at the moment you join. We never sell or rent your personal data to third parties for marketing purposes.

We retain your personal data for as long as your account is active and as needed for the purposes described above. After you delete your account, your data is deleted or anonymized within a reasonable period, except where we are required to retain it to meet a legal obligation.

Some of our service providers may process your data on servers located outside Turkey. Where this occurs, we take care to ensure appropriate safeguards required under KVKK and GDPR are in place (such as standard contractual clauses or adequacy decisions).

The App uses your browser's local storage to maintain your session and remember your chosen visual theme. In addition, Google Analytics 4 and Google Ads are used through a single "Google tag" to measure site traffic and the conversion of our advertising campaigns; this tag loads by default. For the full list of cookies and similar technologies, their purposes, retention periods and how to manage your preferences, see our Cookie Policy.

Your password is never stored in plain text; it is hashed using an industry-standard algorithm and cannot be viewed by anyone, including our own team. Access to your data is restricted via Row Level Security policies to only the members of the relevant list.

Under KVKK Art. 11 and, for EU residents, GDPR Art. 15-22, you have the right to: learn whether your personal data is being processed; request information about such processing; learn the purpose of processing and whether data is used accordingly; know the third parties to whom your data is transferred domestically or abroad; request correction of incomplete or inaccurate data; request erasure or destruction of your data; request that your data be transferred to you or another controller in a portable format; object to processing; and object to a result that is unfavorable to you arising from analysis by automated systems alone. To exercise these rights, contact us using the details in the Contact section below.

The Service is not directed at individuals under the age of 18, and we do not knowingly collect data from them. If we become aware that someone under 18 has provided us with data, we will delete it within a reasonable time.

We may update this Privacy Notice from time to time. We will notify you of material changes in-app or by email. The current version is always available on this page.

For questions about this notice: info@feasymo.com