Hatırla Privacy Policy
Last updated: August 3, 2026
This Privacy Policy explains how Tetra Yazılım ("we," "us," or "our") processes information in the Hatırla Android application (the "App"). Hatırla is designed as an offline-first personal notes, tasks, and reminders application. The contents of your notes, tasks, reminders, PIN, backup password, and audio recordings are not sent to servers operated by us.
1. Information stored locally
The following information is stored in the App's private storage on your device:
- notes, tasks, reminder text, dates, recurrence settings, and categories;
- application preferences and notification or alarm choices;
- a one-way cryptographic representation of an optional application-lock PIN; and
- audio recordings created or selected by you.
We do not operate a server that receives this local content, and this content is not included in advertising or analytics events. As described below, Pro users can optionally enable an end-to-end encrypted Google Drive backup. The Pro version can also prepare a limited recovery snapshot for Android's system backup service.
2. Device permissions and capabilities
- Microphone: Used only when you choose to record a voice note.
- Notifications and vibration: Used to deliver reminders created by you.
- Exact alarms, full-screen alarms, foreground media playback, wake lock, and restart handling: Used to trigger reminders at the requested time, display a full-screen alarm when selected, continue the alarm sound until dismissed, and restore future alarms after the device restarts.
- Internet access: Used by Google AdMob, Firebase Analytics, RevenueCat, and Google Drive backup when enabled by the user.
- Advertising ID: May be used by Google AdMob in the free version for advertising, measurement, frequency control, and fraud prevention, subject to applicable consent choices and device settings.
The App does not request permission to access precise or approximate device location, contacts, camera, photos, videos, or shared device storage. Third-party services may infer an approximate location, such as a city or region, from an IP address.
3. Voice and audio processing
Voice notes recorded through Hatırla remain in the App's private local storage. The App does not send voice-note audio to a speech-recognition service or upload it to a server operated by us.
4. Encrypted backup and restore
If you choose to create a backup, the backup is encrypted with AES-256-GCM using a key derived from the password you provide. The backup is transferred only to a destination you select through the Android file or sharing interface. We do not receive or store the backup file or password. If the password is lost, we cannot recover the backup.
Hatırla Pro users can explicitly connect a Google account to enable automatic Google Drive backup. The App requests only the drive.appdata scope and stores the backup in the hidden application-data area of the user's own Drive account. Other applications and the normal Drive interface cannot access this area. Notes, tasks, reminders, categories, selected preferences, voice notes, and custom alarm audio are encrypted on the device with AES-256-GCM using the user's backup password before upload. The application-lock PIN, purchase status, advertising identifiers, and analytics identifiers are excluded.
To support automatic backups, the Drive backup password is retained only on the device in a form protected by Android Keystore. It is not sent to Google or to us. Uninstalling the App removes this protected local password. After reinstalling, the user must reconnect the same Google account and enter the backup password again. Neither Google nor we can decrypt or recover the backup if the password is lost.
When restoring a Drive backup, the App safely merges cloud records with records already on the device. Matching records are not duplicated, identifier conflicts are preserved as separate records, and existing device records are not automatically deleted. After the merge, the resulting current data set may be encrypted again and written back to the Drive backup.
For users with an active Pro entitlement, the App can automatically prepare a recovery snapshot for Android's system backup service. This snapshot may contain note and reminder text, dates, recurrence settings, categories, and selected safe preferences. It excludes the application-lock PIN, purchase state, advertising or analytics identifiers, voice recordings, and custom alarm audio. Android controls when the snapshot is uploaded and restored, normally using the Google account associated with the device. Backup availability is not guaranteed and depends on Android, device, account, network, and backup settings.
Android encrypts system backup data during transfer and storage. On supported devices with a secure screen lock, Android may additionally protect backups with client-side encryption tied to the device credential. Because this additional protection is device-dependent, we do not claim that every automatic backup is universally end-to-end encrypted. We do not operate the backup server and cannot view or recover the snapshot.
5. Firebase Analytics
Firebase Analytics is enabled by default in current Android versions of Hatırla and does not currently have an in-app opt-out control. It may process:
- application interactions, screens viewed, feature usage, and session measurements;
- application version, device model, operating system version, language, and region;
- diagnostic and performance information;
- an approximate location derived from a masked or truncated IP address; and
- a randomly generated app-instance or similar device identifier.
Hatırla may record events such as creating an item, searching, or changing a theme. Analytics events do not contain note text, reminder text, search queries, PINs, backup passwords, or audio content. Firebase Analytics advertising-ID collection and ad-personalization signals are disabled in the App configuration. This setting is separate from Google AdMob's advertising and consent processing.
6. Advertising with Google AdMob
The free version of Hatırla uses Google AdMob to display adaptive banner advertisements and non-rewarded interstitial advertisements at natural transition points after eligible save actions. AdMob may process:
- IP address and approximate location derived from it;
- advertising ID, app-instance identifiers, and other device identifiers;
- device, operating system, language, and application information;
- advertisement requests, impressions, interactions, and diagnostics; and
- fraud-prevention and security signals.
Where required, Hatırla uses Google's User Messaging Platform (UMP) to request and store advertising consent choices before requesting ads. Depending on your choice and location, Google may serve personalized, non-personalized, or limited ads. You can also manage advertising choices through Android and Google account settings. Users with an active Hatırla Pro entitlement are not shown AdMob advertisements by the App.
7. Purchases with RevenueCat
Hatırla uses RevenueCat to manage and restore the optional Pro purchase. RevenueCat and the relevant app store may process an app-user identifier, purchase status, product information, transaction information, device or application information, and related diagnostics. We do not receive your full payment-card details.
8. Summary of third-party processing
| Service | Purpose | Possible data |
|---|---|---|
| Google AdMob | Advertising, measurement, security, and fraud prevention | Advertising and device identifiers, IP-derived approximate location, ad interactions, device data, and diagnostics |
| Firebase Analytics | Analytics and application improvement | App interactions, app-instance identifier, device data, language or region, IP-derived approximate location, and diagnostics |
| RevenueCat | Pro purchase management and restoration | App-user identifier, entitlement and transaction status, device or application data, and diagnostics |
| Google Drive | Optional encrypted Pro backup and restore | The encrypted backup file in the user's private app-data area; when supplied by authorization, the selected account email is retained locally for connection status, otherwise only a generic Google Drive label is retained |
| Android system backup | Optional automatic Pro recovery after reinstall or device change | Limited recovery snapshot containing note and reminder text, categories, dates, recurrence settings, and selected preferences; no PIN or audio |
For more information, review the providers' policies:
9. Purposes and legal bases
We process local information as necessary to provide the features requested by you. Third-party analytics is used for our legitimate interest in understanding and improving the App, subject to applicable law. Advertising identifiers and personalized advertising are processed based on consent where consent is legally required. Non-personalized or limited advertising, security, fraud prevention, and purchase verification may rely on other lawful bases available under applicable law.
10. Retention and deletion
Local content remains on your device until you delete individual items, use the "Delete all local data" function, or uninstall the App. Removing local data also cancels associated reminders where supported and asks Android to remove the App's prepared system snapshot. A Google Drive backup can be permanently deleted with "Delete Drive backup" in the App. "Disconnect" revokes account access and removes the protected password from the device but leaves the existing Drive backup in place unless the user separately deletes it. Information previously processed by Firebase Analytics, AdMob, RevenueCat, or an app store may be retained according to each provider's retention rules and legal obligations.
11. Data deletion requests
Hatırla does not require an account. Google Drive connection is optional and limited to Pro backup. You can delete local notes, reminders, voice recordings, categories, preferences, and the prepared Android recovery snapshot by opening Settings > Delete all local data. You can permanently delete the separate Google Drive backup from the backup screen with Delete Drive backup.
To request deletion of data associated with Analytics, advertising, support, or a Pro purchase, email tetra4studios@gmail.com with the subject Hatirla Data Deletion Request. Describe which service the request concerns. If the request concerns a Pro purchase, you may include the Google Play order number so the pseudonymous RevenueCat customer record can be located. Do not send your PIN, backup password, note text, reminder text, or audio content. We will respond and complete actions available to us within 30 days.
We will delete support correspondence and identifiable or pseudonymous service records under our control unless retention is required for fraud prevention, security, dispute handling, tax, accounting, or another legal obligation. Records retained for such a reason are kept only for the applicable legal period and are not used for advertising. Aggregated or irreversibly anonymized information that cannot be linked back to a user may remain. Google Play transaction records, Android or Google backups, and data controlled independently by Google, Firebase, AdMob, RevenueCat, or another app-store provider remain subject to that provider's deletion tools, legal obligations, and retention policy.
12. Your choices and rights
You can manage microphone, notification, exact-alarm, and full-screen-alarm permissions in Android settings. You can disconnect Google Drive and permanently delete its Hatırla backup from the App's backup screen. Where required, the Google UMP consent form provides choices concerning advertising personalization and participating advertising partners. You may also reset or limit the advertising ID through Android settings.
Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection concerning personal data, and to withdraw consent at any time. Withdrawing consent does not affect processing that occurred before withdrawal. Requests concerning data controlled directly by Google, RevenueCat, or an app store may need to be submitted to that provider.
13. Children
Hatırla is not directed to children under 13, or the higher minimum age required in a user's country. We do not knowingly collect children's note content. The App configures Google Mobile Ads as not child-directed and limits maximum ad content rating to parental guidance. If you believe a child has provided personal information in violation of applicable law, contact us.
14. Security
We use measures including private application storage, on-device AES-256-GCM encryption of Drive backups before upload, Android Keystore protection for the locally retained automatic-backup password, strict inclusion of only the dedicated limited snapshot in Android system backup, one-way PIN hashing, and encryption for manually exported backups. No electronic storage or transmission method can be guaranteed to be completely secure.
15. International data processing
Google, Firebase, RevenueCat, and app-store providers may process information in countries other than your own. Their processing is governed by their respective privacy terms and any legally required transfer safeguards.
16. Changes to this policy
We may update this Privacy Policy when App features, third-party services, or legal requirements change. The current version will be identified by the "Last updated" date shown at the top of this page.
17. Contact
Developer: Tetra Yazılım
Email: tetra4studios@gmail.com