Privacy Policy

This privacy policy explains how NFC Tool for iPhone and Android (the "App") handles your information. The App is made by FIRST POINT YAZILIM LİMİTED ŞİRKETİ ("First Point", "we", "us").

Effective date: 2026-11-10

Summary

1. Who is responsible for your data

FIRST POINT YAZILIM LİMİTED ŞİRKETİ, Balgat Mah. Ceyhun Atuf Kansu Cad. No: 36 İç Kapı No: 6, 06520 Çankaya, Ankara, Türkiye, is the data controller for the personal data described in this policy under the EU and UK General Data Protection Regulation (GDPR) and Turkish Personal Data Protection Law No. 6698 (KVKK). You can reach us at contact@firstpoint.com.tr.

2. Data that stays on your device

This data is kept in the App's local storage and is not sent to us or to anyone else. You can delete single history entries or clear your history in the App (entries you marked as saved stay until you remove them), and deleting the App removes all of it. On iPhone, like other app data, it can be included in your device backups if you have backups turned on; the Android version opts out of Android's system backup. When you export your history as text or CSV, the file is created on your device and goes only where you choose to share it.

3. Permissions

The App does not access your location, your contacts, your camera or your microphone.

4. Advertising

If you do not have NFC Tool Pro, the App shows ads: full-screen ads after some NFC operations, an ad when you return to the App, and optional video ads you can choose to watch to unlock a Pro feature for a limited time. Ads are served by Google AdMob (Google Mobile Ads SDK).

Google may collect and process: your device's advertising identifier (IDFA on iOS, only if you allow tracking; the Android Advertising ID on Android), your IP address and an approximate location derived from it, device and operating-system information, information about the ads shown to you and your interactions with them, and diagnostic data. It uses this data to deliver, personalise, limit the frequency of and measure ads, and to prevent fraud.

Your choices:

Google's policies: how Google uses information in ads, AdMob and user data.

5. Usage statistics and crash reports

Google Firebase Analytics (Google Analytics 4) collects standard events such as first open, sessions, screen views, app updates and in-app purchases, and these events of our own: onboarding finished; the paywall opened and closed (where from and the result); purchases and restores, with the product ID; an NFC scan started; a read or write succeeded or failed, with the tag's chip family, the number of records, the record type (for example URL or Wi-Fi), single or batch write and whether it failed or was cancelled; which tool was opened; and when a video-ad prompt was shown and how it ended. It also records whether you have NFC Tool Pro. Firebase processes an app instance identifier, device model, operating-system version, app version, language and an approximate country derived from your IP address and, where available (on iOS only if you allow tracking), the advertising identifier, which links these statistics with ad measurement. Tag contents, tag UIDs and anything you type are never sent. Firebase privacy information

Google Firebase Crashlytics sends a diagnostic report if the App crashes or hits an error: technical error details, device model, operating-system version, app version, device state at the time (such as free memory) and a Crashlytics installation identifier. Reports do not contain your tag data. Firebase privacy information

6. Purchases

NFC Tool Pro is an auto-renewable subscription sold through the App Store (Apple) or Google Play (Google). Payments are processed by them under their own privacy policies (Apple, Google). We never see your name, payment card or store account details.

RevenueCat manages NFC Tool Pro subscriptions and the paywall. It receives an anonymous app user identifier created by RevenueCat, your purchase and subscription status and history, transaction details from the store (product, price, currency and dates), the app version, platform and country, and the Google Analytics app instance identifier, so that subscription events such as trial starts, renewals and cancellations can be passed on to Google Analytics. RevenueCat does not receive your name, email address or payment card details. RevenueCat privacy policy

Refund requests. If you ask Apple or Google for a refund of a purchase made in the App, the store may ask us for information to help it decide. RevenueCat answers these requests automatically on our behalf. It sends the store information about that purchase and your use of it, such as whether the purchase was delivered, how long you have been a customer, your purchase and refund history with the App, and our refund preference. It does not send your name, contact details or the data stored in the App. The store makes the final decision. We rely on our legitimate interest in handling refund requests fairly and preventing refund abuse; see also section 4 of our Terms of Use.

7. First Point's own server

Like any web server, ours processes your IP address to deliver these requests.

8. How we use information and on what basis

We use the information above to run the App, show and measure ads in the free version, provide NFC Tool Pro, fix crashes, understand which features are used, answer your feedback and measure our own advertising campaigns. Depending on the processing, we rely on what is needed to provide the App and the purchases you make, on your consent (personalised ads, tracking on iOS and the feedback you choose to send), and on our legitimate interest in keeping the App working, secure and improving (usage statistics, crash reports and campaign measurement). We do not sell your information. We share it only with the service providers named in this policy, who process it to provide their services, and with authorities where the law requires it.

9. How long we keep it

10. Your rights

Under the GDPR and KVKK you may have the right to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict its processing, to receive it in a portable format, to withdraw consent at any time and to complain to a data protection authority (in Türkiye, the Personal Data Protection Authority; in the EU or UK, your local supervisory authority). Under Article 11 of KVKK you can also ask whether your data is processed and for what purpose, learn to whom in Türkiye or abroad it is transferred, ask that corrections or deletions be passed on to those recipients, object to a result against you that comes solely from automated analysis, and claim compensation for damage caused by unlawful processing.

To exercise these rights, email contact@firstpoint.com.tr. Because the App has no accounts, please include what we need to find your data, for example the email address you used for feedback. We answer within the time limits set by law.

11. Withdrawing consent and stopping collection

12. International transfers and security

Google (Firebase and AdMob) and RevenueCat process data in the United States and other countries, so your data may be transferred outside Türkiye and outside your own country. These providers protect transferred data with their own safeguards, such as standard contractual clauses. All network requests from the App use encrypted connections (HTTPS), and we limit access to the data we hold.

13. Children

The App is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has sent us personal information, for example through feedback, contact us and we will delete it.

14. Changes

We may update this policy, for example when the App changes. The current version is always on this page, and the effective date above shows when it last changed.

Contact

FIRST POINT YAZILIM LİMİTED ŞİRKETİ
Balgat Mah. Ceyhun Atuf Kansu Cad. No: 36 İç Kapı No: 6, 06520 Çankaya, Ankara, Türkiye
Email: contact@firstpoint.com.tr