Privacy Policy
Last updated: 2026-09-07
0. Summary in plain language
Pebble requires a free account to use the app — you sign in with Apple, Google, or a phone number verified by a text message. That's the only personal information Pebble asks for. Your photos, videos, contacts, and calendar events are never uploaded, stored, or processed on any server — cleaning happens entirely on your device, and nothing about their content ever leaves it.
1. Information we collect
Account identifier
We store the identifiers tied to the sign-in method you choose, and nothing else:
- Sign in with Apple or Google — your email address, plus the opaque account ID ("subject") Apple or Google issues, used to recognize your account on future sign-ins.
- Phone number sign-in — your phone number (E.164 format), verified by a one-time text-message code.
If your sign-in method gave us an email address, that address is also where Pebble sends the receipts for your subscription — the purchase, its renewals, and any refund. Those are sent through Resend. The newsletter is the only marketing email Pebble sends, and only if you subscribe to it.
Device record
A device identifier, platform (iOS/Android), and app version, linked to your account while you're signed in. It never touches your photo library's content.
The same record also holds, where they apply:
- Coarse device fields — an operating-system version range, a device model group, a country and a language bucket. Each one is a group, never an exact value.
- A push token — Pebble does not send push notifications yet. When it does, a token will be stored only for as long as you keep notifications on — the pseudonymous address Apple's or Google's push service would use to reach this device, used for nothing else.
- A RevenueCat anonymous ID — the anonymous purchase identifier that links this device to the subscription state described below.
Analytics — bucketed and optional
Analytics is off by default for everyone — you turn it on from Settings → Data & Diagnostics → Analytics. If you leave it on, Pebble records anonymous, bucketed product usage — for example "5–20 GB" rather than an exact size. This anonymous ID rotates every 7 days and is never linked to your account identifier. Any figure representing fewer than 10 devices is suppressed rather than shown.
Crash and performance reports
Sent via Sentry. Emails, phone numbers, and GPS coordinates are scrubbed before a report ever leaves your device. Crash reporting is off until you turn it on in Settings → Data & Diagnostics → Crash reports; while it is off the reporting library is never started, so no crash report leaves your device at all.
Subscription status
Managed via RevenueCat — an anonymous purchase/entitlement state, used to unlock features.
Support requests
Only if you contact us. The email you provide is used to reply, and nothing else.
Newsletter subscription
Only if you subscribe on our website — the app never asks for this. We store the email address you enter, the language you subscribed in, a short label recording where the sign-up came from, and whether you confirmed it. The address is used to send the newsletter and nothing else. You can leave at any time from the link in every issue or on the unsubscribe page.
2. What we never collect
- Photo or video content, hashes, or filenames
- Contact names, phone numbers, or email addresses from your address book
- Calendar event titles, descriptions, or attendees
- Precise location or GPS coordinates
- An advertising identifier (IDFA / AAID) — Pebble has no ad SDK and does not track you across apps or websites
3. Data retention
- Analytics events: 90-day rolling window, then dropped — only aggregated, suppressed rollups remain, and those carry no device or account identifier
- Account and sign-in identifier: kept while your account is active; deleted on request (see below)
- Subscription records: retained for the period required by applicable financial and tax law
- Support tickets: 90 days after resolution, independent of account status
- Device record: kept while Pebble is in use on that device. Once push notifications exist, turning them off clears the stored token right away. Deleting your account unlinks the record from your account; the record itself, with its coarse fields, is removed on request (see below)
- Newsletter subscription: kept while you are subscribed — deleted 30 days after you unsubscribe, and 24 hours after sign-up if you never confirm it
4. Your rights (GDPR + KVKK)
Two distinct actions live in Settings, in two separate groups, and they do different things:
- Settings → Your data → Delete my data wipes every local, on-device Pebble store instantly and signs this device out. Your photos and files are never touched by this — they were never Pebble's to hold in the first place.
- Settings → Account → Delete account is a server-side right-to-erasure request (GDPR Art. 17 / KVKK Md. 11): it permanently removes your account and every linked sign-in identifier from Pebble's servers. This can't be undone. Analytics data is anonymous and was never linked to your account, so there's nothing account-shaped to erase there; a support ticket you filed follows the normal 90-day retention in §3 regardless of your account's status.
For access, correction, or portability requests, email pebble@muhittincamdali.com.
5. Third-party processors
- Sentry — crash and performance reporting, PII scrubbed before send
- PostHog (EU, Frankfurt) — anonymous, bucketed product analytics
- RevenueCat — subscription and purchase management
- İleti Merkezi (Türkiye) — sends the phone sign-in verification codes
- Hetzner Online GmbH (Germany) — the server that runs the API and the database today (interim hosting)
- Cloudflare — the bot check on the forms on this website; its wider infrastructure role is the target setup and is not in use yet
- Resend — the newsletter (opt-in only) and the subscription receipts
What each of them receives, and where it runs, is set out on the subprocessors page.
6. Contact
Data Controller: Pebble Studio Ltd.
Email:pebble@muhittincamdali.com
EU Representative: TBA
UK Representative: TBA