Skip to content
Firas
DRAFT These texts are drafts: the data controller details have not been filled in yet, and a lawyer will review them before publication.

Privacy Policy

This text is a draft; it must be reviewed by a lawyer before publication.

1. In short

Firas is a culture and entertainment app. It does not ask you to create an account, and it does not ask for your name, email or phone number. All readings are done on your phone and stay on your phone:

2. Data controller

For users in Türkiye, the information notice under the Turkish Personal Data Protection Law No. 6698 (KVKK) is provided separately, titled "Personal data notice (KVKK)", in the app and alongside this text.

3. Data processed on your device and kept on your device

The data in this section does not leave your phone; we (the data controller) cannot access it. Android backup is disabled for the app, so this data does not go into Google backup either.

3.1 Photo and camera image

For face and hand readings, the front or rear camera is opened. Before the camera is opened for the first time, a separate screen explains in plain words what will happen and asks for your explicit consent; if you do not consent, you continue without a photo by describing yourself. You can withdraw your consent at any time in Profile → "Photo consent". The image is processed on your phone by face and hand recognition models running on the device (Google ML Kit, Google MediaPipe); the proportions of your face and hand are calculated and turned into labels such as "wide" or "medium". The image is then deleted from memory and from temporary files. The photo is not written to disk and is not sent to any server, or to any analytics or error reporting service. No identification is made from the image: the app does not recognise you and does not match your face with a person or a database. When you scan a QR code for harmony, camera frames are likewise processed only in memory and are not stored.

3.2 Reading history

The readings you choose to "Save" (physiognomy reading, character, dream, twitching, birth chart summary, couplets you liked, the moderation journey) are stored on your phone in a single encrypted block (AES-256-GCM; the key is in the Android Keystore, on iOS in the Keychain). The history contains no photos and no measurement ratios: only the input of the reading (e.g. "eyebrows: wide-set"), whether each input came from the photo or from your own answer, the result and the date are kept. We store the text of your dream only if you choose "Save with the text of your dream".

3.3 Birth details

The birth chart is calculated on your phone. Your birth date, time and place are stored only if you turn on the "Remember my birth details" option (off by default), in the same encrypted block as your reading history, and only on this device. Your moment and place of birth are never sent from the device under any circumstances. The list of birthplaces is built into the app; searching it does not go online.

3.4 Settings, acceptances and consents

Your language, notification settings and your onboarding consent are kept in the app settings on your phone. The version of the texts and the moment at which you accepted the terms of use and stated that you read the personal data notice, and the version and moment of your photo consent, are kept in your phone's encrypted storage (Android Keystore, iOS Keychain); these records are only on your device.

3.5 Exporting measurement ratios

If you turn on the "Export my measurements to help tune thresholds" option in Profile, you can copy the measurement ratios of photo-based results (numbers only; no date, identity or image) to the clipboard as JSON, or share them with an app you choose. The app never sends these ratios anywhere on its own; measurement ratios are shared only if you explicitly export them.

3.6 Share cards and harmony code

The share card (PNG) on the result screen and the "Share my profile for harmony" code are generated on your phone. They are handed only to the app you choose, and only when you say share. The harmony code contains the archetype, axis scores, moderation and, optionally, a name you type; it contains no photo and no measurements. The code the other person gives you is not stored.

4. Firas's AI interpretation

This feature is not in use at the moment: it is turned off in the app and the app does not connect to the internet. If it is turned on, you will be told in advance and asked for your approval before the first use; this section will be updated then.

5. Anonymous device ID

Not in use at the moment: the app neither generates nor sends a device ID.

6. What is kept on the server

The app does not connect to our server; no data of yours is on the server. Our server only publishes the website (see 15). Country where the server is hosted: Türkiye.

7. Transfer abroad

There is no transfer of data abroad at the moment: the app sends no data from your device, and the country where our server, which publishes the website, is hosted is Türkiye. If the AI interpretation is turned on, the summary of the reading will be transferred to Anthropic, PBC, based in the USA; in that case you will be told in advance, asked for your approval, and this section will be updated.

8. Notifications

The couplet of the day and the twitching reminder are local notifications set up on your phone; they are off by default. No notification server or push notification service is used. Notification texts contain no personal data or reading results; their settings are kept only on your device.

9. Permissions

Firas asks only for these Android permissions:

Internet, location, contacts, microphone, storage, exact alarm and advertising ID permissions are not requested.

10. Third-party libraries

Face and hand recognition (on Android Google ML Kit and Google MediaPipe, on iOS Google MediaPipe) and QR reading (on Android Google ML Kit, on iOS the system camera framework) run entirely on the device. The Android libraries include Google’s usage statistics infrastructure (datatransport): numerical events about how the libraries run (e.g. duration, version; not images) may be kept briefly on the device. The component that uploads these events to Google has been removed from the app; the built app contains neither the uploader nor Google’s logging addresses. Verification of this with network traffic on a real device is ongoing. Because the Android app has no internet permission, these libraries cannot go online either. A Google-internal statistics component has been found in the compiled MediaPipe library on iOS; that the iOS version does not go online on a real device will be verified before publication. The app has no analytics, advertising or crash reporting service.

11. Children and the 18+ age limit

Firas is for people over 18; on the onboarding screen you declare that you are over 18 and that you will only have your own face read. Children's faces are not read, and we do not knowingly process data belonging to children. Because the app does not collect identity or age data, we cannot tell whether data belongs to a child; if you become aware of such a case, you can write to the contact address below. All data on the device can be deleted with "Delete all my data".

12. Retention and deletion

Profile → "Delete all my data" deletes from this device all the readings, characters and couplets you saved, your saved birth details, the encryption key, your settings, your onboarding consent, your acceptance of the texts and your photo consent; this cannot be undone. Since there is no record linked to you on our server, this action fulfils the right to erasure under KVKK Art. 11 for all the data on your device.

13. Security

Your history, acceptance and consent records are kept encrypted on the device. Since the app does not connect to the network, no data flows out of your device.

14. Your rights

Your rights under KVKK Art. 11 and how to apply are explained in the personal data notice (KVKK). If you are outside Türkiye, you can also reach us at the same contact address.

15. Website and email list

The website (for now https://getfiras.com) uses no cookies, analytics, advertising or external resources (font services, content delivery networks); fonts are loaded from the site itself. Since no cookies are used, there is no cookie banner either. The server writes no access logs; your IP address is not recorded.

No email addresses are collected at the moment: there is no email list on the website. If a list is opened, it will be announced in advance, with a separate notice and only with your explicit consent.

16. Changes

If we change this policy, we will publish the current text in the app; we will separately announce in the app any change that materially alters data processing. If the terms of use or the personal data notice change, the app shows the new version at launch.

17. Contact

[VERİ SORUMLUSU ADI] · info@getfiras.com · [ADRES]

Back to home