Apps by Oğuzhan ÇART
One policy, covering every app on this page. It is short because the apps keep very little: what you do in them stays on your device, and the table below says the rest in five words per app.
No analytics, no advertising, no tracking, in any of them. There is no advertising identifier, no measurement of what you tap, and no third-party code that reports your use of these apps anywhere.
Everything each app needs to do its job is compiled into it before it reaches you: the tables, the figures, the drawings and the text in every language it ships in. That is why they work with no signal at all. Two of them go a little further than that, and both are named below — Nightleaf sends a first name to write a story, and where an app is sold by subscription the fact of that purchase is handled by Apple.
| App | Personal data | Analytics | Ads | Account |
|---|---|---|---|---|
| BendMark | None | None | None | None |
| Nightleaf | Email address, only with an account | None | None | Optional |
| Flarely | None | None | None | None |
| FirstHey AI | Chats sent to an AI service to write replies | None | None | None |
FirstHey AI is the exception to "stays on your device": its characters are written by an AI service, so the recent conversation leaves the phone for each reply. It has its own privacy policy that lists exactly what is sent.
This table is the whole answer, and the words that are not "None" have their own sections below.
Nightleaf is the one app here that talks to a server, so it gets its own section rather than a footnote.
To write a story it sends four things to a text-generation service: the first name you typed, the pet or toy you named, the theme you chose from its list, and the language. Nothing else. No surname, no birthday, no device identifier, no account, because there is no account to attach any of it to. The same service reads the story aloud when you choose one of its voices.
Illustrations are requested separately, and a child's name is never included in an image request. A picture is asked for by the scene alone: a place, a time of evening and a mood, chosen from a fixed list.
The service is Pollinations, which routes the request to a language model. We do not send it anything that identifies you, and we keep no copy of the request ourselves. The finished story comes back to the phone and is stored there.
If you would rather nothing left the device at all, Nightleaf still writes stories with no network at all on an iPhone that has Apple Intelligence, and falls back to a set of stories written by hand and compiled into the app everywhere else. Turn on Airplane Mode and it keeps working.
Nightleaf works with no account, and that is how it starts: no button, no prompt, nothing to sign into. An account exists for one reason. A phone gets lost, or replaced, and the stories a child asks for again go with it. If you sign in, they do not.
Making one asks for an email address and a password. The address is how you sign back in and nothing else: no newsletter, no marketing, no sharing with anybody. The password is stored only as an Argon2 hash, which cannot be turned back into the password.
With an account, what is kept on our server is the words of a story and who it was for: the title, your child's first name, the theme, the language, and the pet or toy in it. That is what a new phone needs to put the shelf back.
What is never kept there: the photograph of your child, which stays in the app's own storage on the phone; the pictures, which are drawn again from the same seed on whichever phone is asking; and any identifier for your device.
Deleting the account deletes all of it. The button is in the app, on the account screen, and it takes effect immediately: the account, the sign-ins and every story kept under it. The stories on your own phone stay, because they are yours.
An app remembers your settings so it opens where you left it. Those settings live in the app's own storage on your phone. They are never transmitted, nobody else can read them, and deleting the app deletes them.
For BendMark that means: the bender head, conduit size and units you picked, whether marks refer to the arrow or the centre of the bend, any figures you typed in for your own bender, and the runs you saved with the names you gave them.
For Nightleaf that means: your child's first name, the photograph of them if you added one, the pet or toy you named, the age range and language you chose, the voice you picked, and the stories you kept. All of it stays on the device and is deleted with the app. The photograph in particular is never uploaded, never attached to an account and never part of a picture request.
For Flarely that means the whole diary: every day you logged, the severities, the factors, the medicines, your written notes, the symptoms you chose to track, the language you picked and whether the lock is on. There is no server, so this is not a copy of something kept elsewhere — it is the only copy, and deleting the app deletes it.
Flarely is a symptom diary and it has no account and no server. Every day you log is written to your phone and stays there; the app contains no way to send it anywhere. We never receive a symptom, a note or a name, which is why its row above is "None" across the board.
What does leave the phone is a purchase. Flarely Premium is billed by Apple and its subscription state is read through RevenueCat, which sees that a subscription exists and an anonymous identifier for it — not linked to your name, and never carrying any part of the diary.
If you turn on Lock the diary, Flarely asks for Face ID or your passcode before it opens. Your face and your passcode are checked by the phone; the app only learns whether the phone said yes.
Deleting Flarely deletes the diary, because there is no other copy. Export it first if you want to keep it.
These apps ask for no location, no camera, no contacts, no microphone, no photo library and no notifications.
BendMark reads the accelerometer on one screen, the angle finder, to work out the tilt of the phone laid on a bent pipe. That reading is shown and immediately discarded. It is not stored and not sent.
Nightleaf asks for one, and only when you tap it: the photo library, to pick a picture of your child for their shelf. It is copied into the app and stays on the phone. Nothing else is asked for: no location, no camera, no contacts, no microphone, no notifications.
Flarely asks for Face ID, and only if you turn the lock on yourself. The phone does the checking and answers yes or no; the app never receives your face or your passcode, and there is nothing for it to store.
The apps carry no user content, no messaging, no links out and no advertising, so there is nothing for a child to be exposed to.
Nightleaf is made for children to be read to, so it is worth being exact about it. It shows no advertising, has no links out of the app, and cannot connect a child with anybody. Stories are built from a fixed list of themes a parent chooses from, and a parent sees every story on screen before it is read aloud. An account is a parent's decision, made on a screen a child does not reach by accident, and nothing about a child is published anywhere.
Data protection law gives you the right to see what a company holds about you, to correct it, and to have it deleted. Here that is simple: nothing is held. There is no database with your name in it, because there is no database.
Payment is handled entirely by Apple. Apple, not this developer, holds your purchase record and your payment details, under Apple's own privacy policy.
If this policy changes, the date below changes with it and the change is named in the release notes of the app it affects.
Questions about any of this go to oguzhancart1@gmail.com. One person reads that inbox.