This privacy policy explains how Longy for iPhone and Android (the "App") handles your information. The App is made by FIRST POINT YAZILIM LİMİTED ŞİRKETİ ("First Point", "we", "us").
Effective date: 2026-11-10
FIRST POINT YAZILIM LİMİTED ŞİRKETİ, Balgat Mah. Ceyhun Atuf Kansu Cad. No: 36 İç Kapı No: 6, 06520 Çankaya, Ankara, Türkiye, is the data controller for the personal data described in this policy under the EU and UK General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK). You can reach us at contact@firstpoint.com.tr.
This data is kept in the App's local storage. Your session times, intensity, water temperatures and notes, your age and your health answers are never sent to us or to anyone else, and from version 1.2.6 neither are session durations. A few general choices are counted in our usage statistics (section 5): the session type (sauna or cold plunge) when a session starts or is completed, the mode and temperature unit you choose during onboarding, language changes, and the number of saved sessions when a rating prompt is shown. Your PRO status is also known to Adapty and the app store (section 6). You can delete your session history in Settings with "Clear All Data", and deleting the App removes all of it. On iPhone, like other app data, it can be included in your device backups if you have backups turned on; the Android version opts out of Android's system backup. When you export your sessions, the export is created on your device and goes only where you choose to share it.
Longy does not read from or write to Apple Health or Health Connect.
The App does not access your location, your contacts, your camera or your microphone.
From version 1.2.6 the App shows no ads. It contains no advertising service and shows no consent form or tracking prompt for ads. It does not share your information with anyone to target ads at you or to track you across other companies' apps and websites.
Versions 1.2.5 and earlier. If you have not updated, the free version may show a full-screen ad from Google AdMob after you save a session (never after your first session). Google may collect your device's advertising identifier (on iPhone only if you allow tracking), your IP address and an approximate location derived from it, device information and your interactions with the ads, and uses them to deliver, personalise and measure ads and to prevent fraud. In those versions, personalised ads in the EEA, UK and Switzerland need your consent, which you can change in the App under Settings > Ad Preferences, and you can turn tracking off on iPhone in iOS Settings > Privacy & Security > Tracking. They also use the age you entered during onboarding to ask Google to limit ad personalisation for users under 16 and to mark ad requests from users under 13 as directed at children. Updating the App removes the ads and Google AdMob. Google's policies: how Google uses information in ads, AdMob and user data.
Google Firebase Analytics (Google Analytics 4) collects standard events such as first open, sessions, screen views, app updates and in-app purchases, and these events of our own: a session started or completed, with its type (sauna or cold plunge; versions before 1.2.6 also sent its duration); onboarding finished, with the chosen mode and temperature unit; the paywall shown (where from); a purchase completed and purchases restored; a review prompt shown, with your number of sessions; a language change; views and taps in the list of our other apps; and feedback opened, sent or failed, with the feedback type. Firebase processes an app instance identifier, device model, operating-system version, app version, language and an approximate country derived from your IP address. On Android it may also receive your device's advertising ID, which you can reset or delete in your device settings. On iPhone, from version 1.2.6 it never receives the advertising identifier, because the App does not ask for permission to track you (earlier versions shared it only if you allowed tracking). Your notes, age, health answers, water temperatures and email address are never sent to Firebase, and from version 1.2.6 neither are session durations. From version 1.2.6 the App turns off Google Analytics' ad-personalisation and ad-user-data signals, so the App asks Google not to use these statistics to personalise ads. If an earlier version of the App saved an age under 13 on your device, version 1.2.6 and later turn Firebase Analytics off on that device. Firebase privacy information
Google Firebase Crashlytics sends a diagnostic report if the App crashes or hits an error: technical error details, device model, operating-system version, app version and a Crashlytics installation identifier. Reports do not contain your sessions or notes. Firebase privacy information
Longy PRO is sold through the App Store (Apple) or Google Play (Google), as an auto-renewable subscription (weekly, monthly or yearly) or, where offered, as a one-time Lifetime purchase. Payments are processed by them under their own privacy policies (Apple, Google). We never see your name, payment card or store account details.
Adapty shows the paywall and manages Longy PRO purchases. It creates an anonymous profile for your installation and receives your purchase and subscription status, the store's transaction details (product, price, currency and dates), device and app information and your IP address. On Android it may also receive your device's advertising ID. On iPhone, from version 1.2.6 it never receives the advertising identifier (earlier versions shared it only if you allowed tracking). The App does not sign you in to Adapty or send it your name or email address. Adapty privacy policy
Refund requests. If you ask Apple for a refund of a Longy PRO purchase, Adapty may, on our behalf, send Apple information about that purchase and about how the App was used, to help Apple decide on the request. This can include the purchase and refund history of your installation, whether you used a free trial, how long ago the App was installed, how much it has been used and an anonymous identifier. If you dispute a Google Play purchase with your bank or card issuer (a chargeback), Adapty may send Google information about that purchase for the same purpose; no personal data is included. Apple and Google make the final decision on every request. If you do not want this information shared with Apple, contact us (see Contact) with the Order ID or order number of your purchase (section 10).
Like any web server, ours processes your IP address to deliver these requests.
We use the information above to run the App, provide Longy PRO, fix crashes, understand which features are used and answer your feedback, and in versions before 1.2.6 to show and measure ads in the free version. Depending on the processing, we rely on what is needed to provide the App and the purchases you make, on your consent (the feedback you choose to send and, in versions before 1.2.6, personalised ads and tracking on iOS), and on our legitimate interest in keeping the App working, secure and improving (usage statistics and crash reports) and in protecting our purchases against unjustified refunds (refund requests, section 6). We do not sell your information. We share it only with the service providers named in this policy, who process it to provide their services and provide the same or equal protection of your data (section 12), with Apple or Google when you request a refund or dispute a purchase (section 6), and with authorities where the law requires it.
Under the GDPR and KVKK you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive it in a portable format, to withdraw consent at any time and to complain to a data protection authority (in Türkiye, the Personal Data Protection Authority; in the EU or UK, your local supervisory authority). Under Article 11 of KVKK you can also ask whether your data is processed and for what purpose, learn to whom in Türkiye or abroad it is transferred, ask that corrections or deletions be passed on to those recipients, object to a result against you that comes solely from automated analysis, and claim compensation for damage caused by unlawful processing.
To exercise these rights, email contact@firstpoint.com.tr. Because the App has no accounts, please include what we need to find your data, for example the email address you used for feedback. We answer within the time limits set by law.
Deleting data held by us and our service providers. Email contact@firstpoint.com.tr with the subject "Longy data deletion". Because the App has no accounts, these services store data under random identifiers rather than your name, so please include:
Google (Firebase Analytics and Firebase Crashlytics) and, in versions before 1.2.6, Google AdMob and Adapty process data in the United States and other countries, so your data may be transferred outside Türkiye and outside your own country. Every third party that receives user data from the App (Google for Firebase Analytics and Firebase Crashlytics, and Adapty) is bound by its data protection terms, including standard contractual clauses for international transfers, to provide the same or equal protection of your data as described in this policy. Our own server, which receives your feedback and serves the App's configuration and the list of our other apps, is operated by First Point and protected under this policy. All network requests from the App use encrypted connections (HTTPS), and we limit access to the data we hold.
The App is not directed at children under 13, and we do not knowingly collect personal information from children under 13. On the App Store it is rated 13+. From version 1.2.6 the age picker in onboarding starts at 13, and Settings does not accept a lower age. If an earlier version of the App saved an age under 13 on your device, version 1.2.6 and later turn off Firebase Analytics on that device. Your age always stays on your device and is used only to show safety guidance (and, in versions before 1.2.6, to set the ad request flags described in section 4). If you believe a child under 13 has sent us personal information, for example through feedback, contact us and we will delete it.
We may update this policy, for example when the App changes. The current version is always on this page, and the effective date above shows when it last changed.
FIRST POINT YAZILIM LİMİTED ŞİRKETİ
Balgat Mah. Ceyhun Atuf Kansu Cad. No: 36 İç Kapı No: 6, 06520 Çankaya, Ankara, Türkiye
Email: contact@firstpoint.com.tr