Privacy Policy — AniBell

Last updated: 2026-10-17

This Privacy Policy explains how Musa Alperen Demir ("we", "us", "our"), the provider of the AniBell mobile and web application (the "App"), collects, uses, and shares your personal data, and the rights you have over it. By creating an account or using the App you acknowledge this Policy.

1. Who is responsible for your data (Data Controller)

The data controller is Musa Alperen Demir. For any privacy question or to exercise your rights, contact us at [email protected].

2. What AniBell is

AniBell lets you track anime shows and receive a push notification when a tracked show's episode begins broadcasting, plus a weekly schedule and an episode tracker. An optional paid subscription (AniBell Plus) and optional one-time purchases (theme packs) unlock extra features. To do this we need an account and a way to send notifications to your device.

3. Personal data we collect

We collect only what the App needs to function:

• Account data: email address, password (stored only as a salted BCrypt hash — we never store or see your plaintext password), username, your chosen avatar (a selection from a built-in catalog — not an uploaded photo), and preferred language.
• Sign-in identifiers: if you use Sign in with Google or Sign in with Apple, the stable account identifier they provide and your email address. (An Apple email may be a private-relay address Apple generates for you.)
• Authentication & session data: short-lived, hashed one-time codes for email verification and password reset, and a record of each active sign-in session (whether it is the web or mobile app, when it started, and when it expires). We use the session records to keep you signed in, to let you sign out, and to enforce the limit of one mobile and one web session per account.
• Device & notification data: your device's push-notification token, platform (iOS/Android/web), and the App version installed on that device.
• App content & preferences: the shows you follow and the list each one is in, your watched-episode progress, and your settings (notification timing, quiet hours, per-show mute and timing, colour theme, and alert sound).
• Notification inbox: a copy of the notifications we send you (episode alerts, status changes, reminders, announcements, and replies to your feedback), so you can view them in the App.
• Feedback & support conversations: messages you send us through the App and our replies, together with the App version and platform.
• Survey answers: if you choose to answer the optional in-app questionnaire — your rating, your multiple-choice answers, any text you write, the App version, and platform.
• Purchases: if you buy AniBell Plus or a theme pack — the product, the store (App Store or Google Play), the purchase/transaction identifier, and your entitlement status and expiry. Payment and card details are handled entirely by Apple or Google — we never receive or store them.
• Offer & reward claims: if you claim the one-time welcome offer or the survey reward, the email address of the account that claimed it and the date, so each offer can only be claimed once per email address (see §8).
• Pricing experiments: to show you a consistent version of the Plus purchase screen while we test prices or layouts, we record which version you were assigned, keyed by your account identifier or, before you sign in, by a random identifier the App generates on install. This is not an advertising identifier and is not shared with anyone.
• Usage analytics: first-party, in-app product-analytics events — for example when the App is opened, which screens you visit, what you search for, or which step of the onboarding walkthrough you reach — together with the App version, platform, and a timestamp. We use these to understand and improve how the App's features are used.
• Diagnostics & security: server error logs (which may contain the request path and your account identifier), and your IP address, which we use only transiently to prevent abuse (rate limiting) and do not store with your account.

Data we do NOT collect

We do not collect your location, contacts, calendar, camera, photos, microphone, health, financial-account, or biometric data. We do not use an advertising identifier and we do not track you across other apps or websites. The usage analytics described above are first-party and collected by our own servers; AniBell contains no third-party analytics, attribution, or advertising SDKs.

4. Where your data comes from

• Directly from you (account details, the shows you follow, feedback, survey answers).
• From Google or Apple when you choose their sign-in (account id + email), and when Apple notifies us that you deleted your Apple account or stopped using Sign in with Apple with AniBell.
• From Apple, Google, and RevenueCat when you make, renew, cancel, or are refunded for a purchase (product, store, transaction identifier, entitlement status).
• Automatically from your device (push token, platform, App version, install identifier, technical log data, and in-app usage-analytics events).

5. Why we use your data and our legal bases (GDPR Art. 6)

You can withdraw consent for push notifications at any time in your device settings or by moving shows out of your Notify Me list.

6. Who we share data with (processors / sub-processors)

We do not sell your personal data. We share it only with service providers that help us run AniBell, each under its own privacy terms:

We may also disclose data where required by law or to protect our rights, users, or the public.

7. International data transfers

Our hosting and the providers above may process or transfer your data outside your country, including outside the EU/UK. Where required, such transfers rely on appropriate safeguards (e.g. the EU Standard Contractual Clauses).

8. How long we keep your data (retention)

• We keep account data until you delete your account.
• When you delete your account, we delete your profile and the associated push tokens, sign-in sessions, followed shows, watched-episode progress, settings, notification inbox, entitlement records, and authentication codes.
• Feedback conversations and survey answers are anonymized (disconnected from your account) rather than deleted, so their content may be retained without identifying you.
• Offer & reward claims: the email address recorded when you claimed the one-time welcome offer or the survey reward is kept after you delete your account, solely so the same offer cannot be claimed again with that address. It is not used for anything else.
• Pricing-experiment assignments (a random identifier and the version of the purchase screen shown) may remain after your account is deleted, but are no longer linked to any account.
• Read notifications in your inbox are automatically deleted after 30 days.
• Usage-analytics events are retained for up to 30 days and then automatically deleted. If you delete your account sooner, those events are disconnected from it (anonymized) and are still removed within that window.
• Server error logs are retained for up to 90 days. Routine database backups may retain data for their rotation period before being overwritten.
• If Apple tells us you deleted your Apple account or stopped using Sign in with Apple with AniBell, we permanently erase the linked AniBell account, including its feedback, survey answers, analytics events, and error logs.
• Apple, Google, and RevenueCat keep their own purchase records under their own policies; contact the relevant store to manage that data.

9. Your rights

If you are in the EU/UK (GDPR / UK-GDPR)

You have the right to: access your data; rectify inaccurate data; request erasure; restrict or object to processing; data portability; and withdraw consent at any time. You may also lodge a complaint with your local data-protection supervisory authority.

If you are in California (CCPA/CPRA)

You have the right to know what we collect, to delete it, to correct it, and to opt out of the "sale" or "sharing" of personal information. We do not sell or share your personal information as those terms are defined under California law, and we will not discriminate against you for exercising your rights ("Do Not Sell or Share My Personal Information").

If you are in Türkiye (KVKK)

AniBell is operated from Türkiye, so the Personal Data Protection Law No. 6698 (KVKK) applies. The data controller (veri sorumlusu) is Musa Alperen Demir. Under Article 11 of the KVKK you may: learn whether your personal data is processed and request information about it; know the purpose of processing and whether it is used accordingly; know the third parties to whom it is transferred; request correction or deletion; and object to results arising from automated analysis. You may also lodge a complaint with the Turkish Personal Data Protection Authority (Kişisel Verileri Koruma Kurumu). A Turkish-language clarification notice (Aydınlatma Metni) is provided separately. To exercise KVKK rights, contact [email protected].

How to exercise any right: use in-app account deletion (Profile → Delete account), email us at [email protected], or see https://anibell.net/data-requests and https://anibell.net/delete-account. We respond within the time required by applicable law.

Automated decisions

We do not make decisions with legal or similarly significant effects about you by automated means. Pricing experiments assign purchase-screen versions at random; the price is always shown to you before you buy.

10. Children

AniBell is not directed to children under 13 (or the minimum age of digital consent in your country, which may be up to 16 under the GDPR). We do not knowingly collect personal data from children below that age. If you believe a child has provided us data, contact [email protected] and we will delete it.

11. Push notifications

We use push notifications to tell you when a show in your Notify Me list is broadcasting a new or premiering episode, when a show's status changes, about changes to your AniBell Plus status, about replies to your feedback, and for occasional announcements. You can turn them off at any time in your device's OS settings, mute individual shows, or remove shows from your Notify Me list in the App.

12. Cookies & local storage

The web version of AniBell uses a strictly-necessary, HttpOnly session cookie to keep you logged in (the login token is never exposed to web page scripts) and browser local storage for preferences such as language, theme, and which in-app prompts you have already seen. The mobile app stores your login token in the device's secure storage (expo-secure-store) and keeps similar preferences on the device. We do not use advertising or tracking cookies.

13. How we protect your data

We use industry-standard measures including encryption in transit (HTTPS/TLS), salted password hashing (BCrypt), hashed one-time codes, sign-in sessions that can be revoked, a per-account device limit, secure on-device token storage, rate limiting, and access controls. No system is perfectly secure, but we work to protect your data appropriately.

14. Changes to this Policy

We may update this Policy. We will revise the "Last updated" date above and, for material changes, provide a more prominent notice. Continued use after changes take effect means you accept the updated Policy.

15. Contact

Questions or requests: [email protected] · https://anibell.net Data controller: Musa Alperen Demir.