Privacy Policy

1. About This Policy

This Privacy Policy explains how Huma Software Inc. ("Huma", "Reseta", "we", "us", or "our") collects, uses, stores, shares, and protects personal data when you use the Reseta mobile application, public website, admin/contact pages, and related services.

Reseta is a personal development and productivity application that helps users manage habits, tasks, journals, focus sessions, seasons, reminders, achievements, premium subscriptions, and AI-assisted reflection features.

By using Reseta, you acknowledge that you have read this Privacy Policy. Where consent or an operating system permission is legally required, we request it separately.

2. Data Controller

The data controller is:

3. Personal Data We Collect

We collect only the data needed to provide, secure, improve, personalize, measure, and monetize Reseta.

3.1 Account and Authentication Data

We may collect:

• User ID
• Email address
• Display name
• Profile photo, if provided by the sign-in provider
• Sign-in provider information, such as Apple, Google, or email authentication
• Account creation, login, and deletion timestamps
• Device and session identifiers needed for authentication and security

3.2 Habit, Task, Focus, Season, and Progress Data

We may collect data you create or generate while using Reseta, including:

• Habits, tasks, goals, reminders, schedules, completion status, streaks, and archives
• Focus sessions, durations, completion status, and related rewards
• Season participation, imported season packs, progress, badges, XP, levels, and leaderboard projections
• Rewarded unlocks, limits, quota usage, and premium/free plan status

3.3 Journal and Reflection Data

If you use journal or reflection features, we may process:

• Journal entries and titles
• Mood selections
• Edited or deleted journal status
• AI journal messages and generated responses
• Optional context categories used to personalize AI responses

Journal and reflection content can be sensitive. We use it only to provide the feature, personalize the experience, improve reliability and safety, and comply with legal or safety requirements where applicable.

3.4 AI Feature Data

When you use Reseta AI or Journal AI, we may process:

• Your messages to the AI
• AI-generated replies
• Conversation metadata, such as timestamps and message counts
• Safety classification results, such as crisis or unsafe-content detection
• User understanding and memory summaries generated from your interactions, where enabled
• AI feedback, such as liked/disliked responses and feedback reason

AI features are intended for personal reflection and productivity support. They are not a substitute for professional medical, psychological, legal, financial, or emergency advice.

3.5 Subscription, Purchase, and Premium Data

We use RevenueCat, Apple App Store, and Google Play to manage subscriptions and purchases. We may process:

• App user ID
• Subscription product ID
• Entitlement status
• Trial, renewal, cancellation, expiration, refund, and billing events
• Purchase date, expiration date, renewal date, and store environment
• Price, currency, and revenue data where available
• Sandbox/test purchase status, separated from production revenue

Payment card details are processed by Apple or Google. Reseta does not receive or store your full payment card information.

3.6 Advertising and Rewarded Ad Data

Reseta may show ads in the free version and may offer rewarded ads for limited unlocks. We use Google AdMob for advertising. Depending on your device, settings, region, and the ad provider's configuration, advertising-related data may include:

• Device and app identifiers used by advertising systems
• Ad impressions, clicks, rewarded-ad completion, and ad performance data
• Approximate device, app, and technical information
• Limited ad interaction data used to deliver, measure, prevent fraud, and improve ads

We do not sell your personal data. We do not share your journal entries, AI conversations, habits, tasks, or private productivity content with third parties for their own marketing. However, advertising partners such as Google AdMob may process limited device, advertising, and ad interaction data to provide and measure ads, prevent fraud, and improve advertising performance.

The current iOS version of Reseta does not request App Tracking Transparency permission. If we introduce tracking that requires a separate permission in the future, we will update this policy, update App Store privacy declarations, and request the required permission before using that data.

3.7 Analytics, Diagnostics, and Product Usage Data

We use analytics and diagnostic tools, including Firebase/Google Analytics, to understand app usage and improve Reseta. We may collect:

• App opens, screen views, feature usage, and funnel events
• Habit, task, journal, focus, AI, premium, and onboarding events
• Crash, error, performance, and diagnostic data
• Approximate device, operating system, app version, language, and country/region data
• Aggregated acquisition and campaign performance data

Analytics data is used primarily in aggregated or pseudonymized form. Some analytics events may be associated with an internal user ID so we can understand product reliability, subscription conversion, and abuse prevention.

3.8 Advertising Attribution and Acquisition Data

To understand which acquisition channels bring users and premium subscribers, we may collect attribution data such as:

• Apple Search Ads campaign ID, ad group ID, and keyword ID where available through Apple AdServices
• Google Play Install Referrer data, including referrer string, source, medium, campaign, and related UTM parameters where available
• Google Analytics acquisition dimensions such as source, medium, campaign, and channel group
• Revenue and subscription conversion data joined to attribution data in our internal admin analytics

Where Apple Search Ads returns numeric campaign, ad group, or keyword identifiers, we may display those identifiers in our admin panel. If Apple Ads API credentials become available later, we may map those identifiers to readable campaign or keyword names.

We use attribution data to measure campaign performance, understand which campaigns lead to premium subscriptions, prevent fraud, and allocate advertising budget more effectively.

3.9 Notification and Reminder Data

If you enable reminders or notifications, we may process:

• Notification permission status
• Reminder times, repeat settings, and alarm/reminder preferences
• Push notification tokens for remote notifications, where supported and enabled
• Local notification scheduling metadata

You can change notification permissions from your device settings. Some reminder features may not work if notification permissions are denied.

3.10 Support and Contact Data

When you contact us through the website, app, email, or support channels, we may process:

• Email address
• User ID, if the email matches a Reseta account
• Message content
• Category, platform, status, timestamps, and internal handling notes

We use this data to respond to support requests, investigate issues, and improve the service.

3.11 Device, Technical, and Security Data

We may collect:

• Device model, operating system, app version, language, region, and timezone
• IP address and approximate location derived from IP
• Authentication, session, request, and security logs
• Abuse-prevention, rate-limit, and anti-fraud signals

4. Why We Use Personal Data

We use personal data to:

• Create and manage your account
• Provide habits, tasks, journals, focus, seasons, reminders, AI, premium, and leaderboard features
• Sync data between your device and our backend
• Enforce free and premium limits
• Process subscriptions, trials, cancellations, renewals, refunds, and entitlement changes
• Provide AI responses, safety handling, and user memory features
• Show and measure ads in the free version
• Measure acquisition, campaign performance, subscriptions, and revenue
• Send notifications and reminders where enabled
• Provide support and respond to contact requests
• Improve product quality, reliability, security, and user experience
• Detect, prevent, and investigate abuse, fraud, errors, and security issues
• Comply with legal obligations

5. Legal Bases for Processing

Depending on your location and the processing activity, we rely on one or more of the following legal bases:

• Performance of a contract: to provide the app, account, sync, subscription, and core features.
• Legitimate interests: to secure, improve, measure, and operate Reseta, prevent fraud, and understand product performance.
• Consent: where required for notifications, optional permissions, certain marketing or advertising activities, or other consent-based processing.
• Legal obligation: where we must retain or disclose information under applicable law.
• Establishment, exercise, or defense of legal claims.

Where consent is required, you may withdraw it through device settings, app settings, store settings, or by contacting us, depending on the feature.

6. Third-Party Services and Processors

We use trusted service providers to operate Reseta. These providers process data only for the purposes described in this policy and according to their own legal obligations and privacy terms.

Current or planned service categories include:

These providers may process data in countries outside your country of residence. We take reasonable steps to ensure appropriate safeguards are used where required by law.

7. AI Data and Safety

AI features may use your messages, journal context, habits, tasks, moods, goals, and selected app context to generate more relevant responses. Reseta may also generate summaries or user-understanding records to personalize future AI interactions.

We may use automated safety systems to detect crisis, self-harm, unsafe, sexual, exploitative, or otherwise prohibited content. In high-risk situations, Reseta may provide safety-oriented guidance, crisis resources, or refuse to generate certain content.

AI responses may be incomplete, inaccurate, or inappropriate. You are responsible for evaluating responses before relying on them. For emergencies or medical, psychological, legal, financial, or safety issues, contact qualified professionals or emergency services.

8. Data Sharing

We may share data:

• With service providers listed in this policy to operate Reseta
• With Apple, Google, RevenueCat, AdMob, analytics, infrastructure, and AI providers as needed for the relevant feature
• With law enforcement, regulators, courts, or public authorities where legally required
• To protect the rights, safety, security, or integrity of Reseta, our users, or others
• In connection with a merger, acquisition, financing, restructuring, or sale of business assets, subject to appropriate safeguards

We do not sell your personal data. We do not share your journal entries, AI conversations, habits, tasks, or private productivity content with third parties for their own independent marketing.

9. Your Choices and Rights

Depending on your location, you may have rights to:

• Access your personal data
• Correct inaccurate data
• Delete your account and personal data
• Object to or restrict certain processing
• Withdraw consent where processing is based on consent
• Request a copy of your data
• Lodge a complaint with a data protection authority

You can delete your account from the app where available, or contact us at destek@huma.ist. Some data may be retained where required by law, for security, fraud prevention, accounting, dispute resolution, or legitimate business purposes.

10. Retention

We retain personal data only as long as reasonably necessary for the purposes described in this policy, including:

• Account data while your account is active
• App content while you use the service, unless deleted by you
• Subscription and transaction records for legal, tax, accounting, and fraud-prevention periods
• Support requests for operational and dispute-resolution purposes
• Security, analytics, and diagnostic logs for limited periods
• Aggregated or anonymized data for analytics and product improvement

When you delete your account, we delete or anonymize personal data according to our deletion process, except where retention is legally required or reasonably necessary for legitimate purposes.

11. Security

We use technical and organizational measures designed to protect personal data, including authentication controls, access restrictions, server-side authorization, encryption in transit, monitoring, logging, and least-privilege access practices.

No system is perfectly secure. You are responsible for keeping your account credentials and device secure.

12. Children

Reseta is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided personal data to Reseta, contact us and we will take appropriate steps.

If local law requires a higher age threshold or parental consent, users must comply with that requirement.

13. International Users

If you use Reseta from outside Türkiye, your data may be processed in Türkiye, the European Economic Area, the United States, or other countries where we or our service providers operate. Data protection laws in those countries may differ from those in your country.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will provide notice through the app, website, store listing, email, or another appropriate method. The "Last updated" date shows when the latest version was published.

15. Contact

For privacy questions, account deletion requests, or data protection requests, contact:

• destek@huma.ist
• info@huma.ist

Postal address:

Huma Yazılım Anonim Şirketi
Sarıdemir Mah. Ragıp Gümüşpala Cad.
Ahenk Han İş Merkezi No: 29 İç Kapı No: 103
Fatih / İstanbul, Türkiye