App name (store listing): Goodness Chain — Good Deeds (App Store: Goodness Chain: Good Deed) · Also known as: İyilik Zinciri · Package / Bundle: com.goodnessgarden.app · Google Play developer: Victory_77 · App Store developer: Yelda Cicek Cankaya · Contact: zafer.cankaya@gmail.com

Privacy Policy

Last updated: 9 August 2026

Goodness Chain is built so that doing good never costs you your privacy. This policy explains exactly what we collect, what we deliberately do not collect, and how you can remove everything.

The short version

• You can use the app without giving us an email address or a name.
• Your proof photos are private by default — only you can see them.
• Audio never leaves your phone. It is held in a temporary buffer only long enough to measure the sound level, then deleted — nothing is kept and nothing is uploaded.
• Your exact location is never stored. Only an approximate, city-level area.
• You are never asked to photograph the person you helped.
• You can delete your account and all of your data from inside the app, instantly.

Who we are

Goodness Chain is operated by the developer of the app. For any privacy question, write to zafer.cankaya@gmail.com. We answer within 30 days, as required by GDPR and KVKK.

What we collect

When you first open the app

We create a silent account tied to a device identifier so that your garden survives if you close the app. This account has no name and no email address. We also store your language, your approximate country, your time zone and the reminder hour you choose.

When you complete a kindness

We store which task you completed, when, and which kind of proof you used. If the task involved a photo, that photo is stored and linked to your account only. If the task measured time, distance or steps, we store the resulting number — not the underlying sensor stream.

If you choose to sign in

If you link your account with Apple, Google or an email address, we store the identifier the provider returns and, where you allow it, your email address. We never receive your password from Apple or Google. If you register with an email address, your password is stored only as a salted hash.

If you allow notifications

We store a push token so we can send your daily reminder and chain events. Removing notification permission removes the token.

What we deliberately do not collect

• Audio. Voice-based tasks measure how long you actually spoke. To do that, sound is captured into a temporary buffer on your device and only its loudness is read; the buffer is deleted the moment the task ends. No recording is kept, and nothing is ever transmitted. We cannot hear what you said, because the audio never leaves your phone.
• Precise location. Location-based tasks reduce your position to a coarse area before anything is stored. Raw coordinates are discarded on your device.
• Photographs of other people. No task asks you to photograph the person you helped. Where a kindness needs a second person to confirm it, they confirm with a single tap and are never photographed.
• Your contacts, your calendar contents, or your photo library.

Photo metadata

Location and device metadata (EXIF) is stripped from every photo before it is uploaded. Photos can only be taken inside the app; there is no gallery upload.

How long we keep things

• Proof photos: deleted automatically after 12 months.
• Kindness records: kept while your account exists, so your garden and streak stay intact.
• Confirmation IP hashes (from kindness receipts): 30 days, then deleted.
• Everything: deleted immediately when you delete your account.

Kindness chains

A chain shows its links as a category and a country. Your name appears only if you choose to show it. Chain links carry no photo, no exact location and no contact detail.

Kindness receipts

When someone confirms a kindness you did for them, they do so without an account and without installing anything. We store the fact that a confirmation happened and a hashed form of their IP address for 30 days, purely to detect abuse. We do not learn who they are.

Community counters

Aggregate totals per country and category contain no identifiers and cannot be traced back to a person.

Who we share with

We do not sell data. We share only with the services required to run the app:

• Apple and Google — for sign-in and subscription payments.
• RevenueCat — to verify subscription status.
• Expo — to deliver push notifications.
• Sentry — to receive crash reports, with personal data scrubbed.

Advertising

Free accounts may see ads. On iOS, personalised advertising requires your explicit permission through Apple's tracking prompt; if you decline, ads still appear but are not personalised. Premium subscribers see no ads and the advertising SDK is never started.

Children

Goodness Chain is not directed at children and has no child profiles. We do not knowingly collect personal data from anyone under the age required by law in their country. If you believe a child has created an account, write to us and we will delete it.

Your rights

Under GDPR and KVKK you may access, correct, export or delete your data, and object to processing. Deletion is available directly in the app under Settings → Account → Delete my account, and takes effect immediately. For anything else, write to zafer.cankaya@gmail.com.

Changes

If this policy changes in a way that affects what we collect, we will tell you in the app before the change takes effect.