SessionPlanner Privacy Policy

Effective date: 18 August 2026

This Privacy Policy explains how personal data is processed in the SessionPlanner mobile application provided by İsmail Çift (“we”, “us”, or “SessionPlanner”).

Contact: sessionplannerapp@gmail.com

1. Scope of the application

SessionPlanner is an organisation tool for scheduling sessions, managing clients and working hours, tracking fees and payment status, and viewing business statistics. It does not provide healthcare, diagnosis, treatment, or emergency services.

2. Data we process

Depending on how you use the application, the following data may be processed:

• Account and authentication data: Email address, user ID, verified identity information received from your selected sign-in provider, and optional first and last name.
• Profile and preference data: Name, professional title, application language, currency, week-start preference, default session fee, session duration, and working hours.
• Client information you enter: Client name, date of birth, phone number, email address, notes, and active status.
• Session and financial tracking information: Session date and time, duration, status, fee, amount collected, payment status, currency, and session notes.
• Subscription information: Purchased product, entitlement status, expiration date, and the app user ID required for purchase and restoration. We do not receive complete payment-card details; Apple processes payments.
• Technical and security information: IP address, device or application information, and transaction logs that service providers may generate for authentication, error prevention, abuse detection, and service security.

Based on the current application functionality, SessionPlanner does not track users for advertising and does not request access to location, contacts, camera, microphone, or the photo library.

3. Why we use data

We process data to:

• Create and verify your account and provide secure sign-in.
• Provide session-planning and client-management features.
• Preserve your preferences across devices and sessions.
• Verify subscription entitlement, restore purchases, and provide access to paid features.
• Fulfil data-export and account-deletion requests.
• Maintain the security, availability, and technical operation of the service.
• Meet legal obligations and protect our rights.

Where applicable, processing is based on performance of a contract, legal obligations, legitimate interests, and consent where required.

4. Client data and the professional user’s responsibility

Professional users who enter client data into SessionPlanner are responsible for determining the lawful basis for collecting and storing that data. They must provide required notices, obtain necessary permissions or consent, enter only necessary data, and comply with professional confidentiality obligations.

Entering health information or other sensitive personal data in note fields is not required. Users must not enter unnecessary, excessive, or unlawful data. SessionPlanner does not use client content for advertising or profiling.

5. Service providers and international transfers

We use a limited number of third-party services to provide the application:

• Supabase: Authentication, database, and server infrastructure.
• Apple: Sign in with Apple, App Store purchases, and subscriptions.
• RevenueCat: Subscription verification and matching purchase entitlement to an application account.
• Google: Authentication when Google Sign-In is enabled.

These providers may process data under their own agreements and privacy policies to the extent necessary to provide their services. Depending on server locations, data may be transferred outside your country. Transfer safeguards required by applicable law are assessed and applied.

6. Retention

Account data and application content are retained while your account is active or as needed to provide the service. You may delete your account through the application. After deletion, data is removed from active systems. Limited records may be retained as necessary for security, fraud prevention, legal obligations, or ordinary provider backup cycles and are deleted when the relevant retention need or backup cycle ends.

Records retained independently by Apple or other service providers remain subject to those providers’ policies and legal obligations.

7. Security

We use technical and organisational safeguards such as authentication, user-specific access controls, and encryption in transit. No electronic transmission or storage method is completely risk-free. You are also responsible for protecting your account credentials and device access.

8. Your rights

Depending on applicable law, you may have rights to request information, access, correction, deletion, restriction or objection to processing, and data portability. The application provides account deletion and data export features. For other requests, contact sessionplannerapp@gmail.com.

We may need to verify your identity to protect your request. You may also have the right to contact the competent data-protection authority where you live.

9. Children’s privacy

SessionPlanner is not a service directed to children. You must be old enough to enter into a binding agreement in your country. If a professional enters data concerning a child client, that professional is responsible for required parent or guardian notices and legal permissions.

10. Changes

We may update this policy when the service or legal requirements change. We will communicate material changes through appropriate means and update the effective date above.

11. Contact

For privacy questions or requests:

İsmail Çift
sessionplannerapp@gmail.com