Privacy Policy
This policy explains what information the ReportPlz app ("ReportPlz", "the app") collects, why, who it is shared with, and the choices you have. ReportPlz is operated by Bülent Ünlüsü, an individual developer based in Türkiye ("we", "us"). You can reach us at support@reportplz.com.
How ReportPlz works
An admin creates a workspace and adds managers and users to it. The admin enters each member's name and email address and creates their account. Members write reports, which are delivered to the right managers and to the admin of the same workspace.
The organization that runs a workspace decides what is written in it. For report content, we process information on behalf of that organization. If you are a member of a workspace, your admin is usually the first person to contact about your data. We will also help you directly.
Information we collect
Account information
- Email address, display name, role (admin, manager or user), team membership and workspace name.
- Your password. It is stored only as a secure hash by our authentication provider, and we cannot see it.
- For managers and users, the admin of your workspace provides your name and email address.
Reports
- The subject and content of reports you write, earlier versions when a report is edited, the people a report was sent to, and whether they have read it.
- Photos you choose to attach. Only the photos you pick are uploaded. They are resized and re-encoded on your device before upload.
Notifications
- A push notification token for your device, if you allow notifications, and your notification setting. The token is removed when you sign out on that device.
Purchases
- Subscriptions are bought through Apple. We receive the transaction identifier, the plan and billing period, the subscription status and its dates. We never receive your payment card or Apple ID details.
Activity records
- A record of administrative actions in a workspace, such as a member being added, renamed or removed, or a report being deleted. These records do not contain report content.
Technical logs
- Our hosting providers keep standard server logs, which can include your IP address and request times, for a limited period. They are used for security and troubleshooting.
What we do not collect
- We do not collect your location, contacts or advertising identifier.
- The app contains no advertising, no analytics or tracking SDKs, and does not track you across other apps or websites.
- We do not sell your personal information.
How we use information
- To provide the service: sign-in, workspaces, teams, and delivering reports to the right people.
- To send push notifications about new reports.
- To verify subscriptions with Apple and apply the member capacity of your plan.
- To send account emails, such as password reset links.
- To keep the service secure, prevent abuse, and answer your support requests.
Service providers
We use a small number of providers to run ReportPlz. They process information only to provide their service to us.
- Supabase stores our database, accounts and photos and runs our server functions. Data is stored in Tokyo, Japan.
- Expo delivers push notifications and app updates. A notification contains the author's name and the report subject.
- Apple processes App Store payments and delivers push notifications to iPhones.
- Resend sends account emails, such as password reset links.
- Google (Gmail) receives and stores the emails you send to our support address.
We may also disclose information if the law requires it, or to protect the rights and safety of our users and the service.
International transfers
Your information is stored in Japan, and our providers may process it in other countries, including the United States. When we transfer information, we rely on our providers' contractual and security commitments to protect it.
How long we keep information
- Workspace data is kept for as long as the workspace exists.
- Deleted reports stay in the workspace's Trash for 30 days, where the admin can restore them. After that, the report, its versions and its photos are permanently deleted.
- Removed members: When an admin removes a member, that member's account, email address and push token are deleted. Their display name stays on reports they wrote, marked as deleted, so the workspace's records remain complete.
- Deleted accounts: An admin can delete their account in the app (Profile, then Delete account). This permanently deletes the whole workspace, including all members, teams, reports, photos and the subscription record. Deleting your account does not cancel an App Store subscription. You can cancel it in your Apple ID settings.
- Purchase records: We may keep limited App Store transaction records, without workspace content, where we need them for fraud prevention, accounting or legal obligations.
- Logs and backups expire on our providers' regular schedules.
Your rights
Depending on where you live, including under Türkiye's Personal Data Protection Law (KVKK) and the EU and UK GDPR, you may have the right to:
- access, correct or delete your personal information;
- receive a copy of it;
- object to or restrict certain processing;
- complain to your data protection authority.
Admins can edit member names and remove members in the app. To make a request, email support@reportplz.com. If you are a workspace member, we may involve your workspace admin. We will respond within 30 days.
Security
Connections to our servers are encrypted. Each workspace's data is separated by access rules enforced on the server. Photos are stored privately and shown only through short-lived links. No method of storage or transmission is completely secure, but we work to protect your information.
Children
ReportPlz is a workplace tool and is not directed to children under 16. We do not knowingly collect information from children.
Changes to this policy
We may update this policy from time to time. We will change the date at the top. If a change is significant, we will let you know in the app or by email.
Contact
Bülent Ünlüsü, Türkiye
support@reportplz.com