Privacy Policy

01 Introduction

BerryBoard ("we", "our", or "us"), developed by İlknur Tulgar, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and handle information when you use our real-time collaborative drawing application.

By downloading or using BerryBoard, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the App.

02 Information We Collect

We collect only the information necessary to provide and improve our service:

• Account information — When you sign in via Firebase Authentication, we collect your e-mail address and display name to identify your account and enable collaboration features.
• Drawing data — Stroke coordinates, canvas states, and board metadata are stored in Firebase Realtime Database and Firebase Storage to enable real-time synchronisation and session persistence.
• Subscription status — We use RevenueCat and Google Play Billing to manage subscriptions. We receive your subscription tier and renewal status only; your payment card details are never shared with us.
• Device information — Device model and operating system version are collected via Firebase Crashlytics solely for crash reporting and performance diagnostics.

03 How We Use Your Information

Information collected is used solely to:

• Authenticate and identify users to enable secure access and collaboration
• Synchronise drawing boards in real time across multiple devices and users
• Store and retrieve your saved boards and favourite canvases
• Manage your subscription plan and unlock premium features accordingly
• Diagnose crashes and improve the stability and performance of the App
• Detect and prevent abuse or violations of our Terms of Use

We do not use your data for advertising, behavioural profiling, or any purpose beyond what is required to provide and improve BerryBoard.

04 Firebase Services

BerryBoard is built on Google Firebase, which includes Authentication, Realtime Database, Cloud Storage, and Crashlytics. These services are operated by Google LLC and are subject to Google's own privacy policies and data processing terms.

Data stored in Firebase may be processed on servers located outside your country. Google implements appropriate safeguards for international data transfers, including Standard Contractual Clauses where required.

We encourage you to review Firebase's Privacy and Security documentation for full details.

05 Subscription & Payment Data

Subscription management is handled through RevenueCat in conjunction with Google Play Billing. When you purchase a subscription:

• Payment processing is performed entirely by Google Play — we never receive or store your card or banking details.
• RevenueCat provides us with your subscription status, product identifier, and renewal information to activate the correct features in the App.
• RevenueCat may assign an anonymous user identifier to track entitlements across sessions.

For details on how RevenueCat handles data, please review the RevenueCat Privacy Policy.

06 Data Storage & Retention

Your account data and drawing boards are retained for as long as your account is active. If you delete a board or asset, it is removed from Firebase Storage and the Realtime Database promptly.

Crash and diagnostic logs collected via Crashlytics are retained for up to 90 days. Anonymised usage analytics, if collected, are retained for no longer than 12 months.

Upon account deletion (requested via the contact details below), we will delete your personally identifiable information within 30 days, except where we are required to retain it by law.

07 Data Security

We take reasonable technical measures to protect your data, including:

• Encrypted transmission (HTTPS/TLS) for all data in transit
• Firebase Security Rules to restrict database and storage access to authorised users only
• Authentication tokens managed securely by Firebase Authentication

However, no method of transmission or storage is 100% secure. We advise you not to include sensitive personal information in your board names or drawing content.

08 Children's Privacy

BerryBoard is not directed at children under the age of 13 (or 16 in jurisdictions such as the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has registered and provided personal data, please contact us immediately so we can take appropriate action.

09 Your Rights (GDPR / KVKK)

Depending on your location, you may have the following rights regarding your personal data:

• The right to access the personal data we hold about you
• The right to correct inaccurate or incomplete data
• The right to request deletion of your data ("right to be forgotten")
• The right to restrict or object to certain processing activities
• The right to data portability (where technically applicable)
• The right to withdraw consent at any time (where processing is based on consent)

Users in Turkey are additionally protected under the Personal Data Protection Law (KVKK No. 6698). To exercise any of the above rights, please contact us using the details in Section 11. We will respond within 30 days in accordance with applicable law.

10 Changes to This Policy

We may update this Privacy Policy from time to time. Any significant changes will be communicated through the App or on our website. We encourage you to review this policy periodically.

Continued use of the App after changes take effect constitutes your acceptance of the updated policy.

11 Contact

For any privacy-related questions, data requests, or concerns, please contact the developer directly: