Privacy Policy
This is a translation provided for your convenience. In the event of any discrepancy, the Turkish version prevails.
This policy explains which personal data we process when you use the Testoman mobile app and the T-Club community on testoman.io, why we process it, and how you can exercise your rights. By using the app, we assume you have read and accepted this policy.
1. Controller
Enegal Tech Yazılım Bilişim Danışmanlık San. ve Tic. Ltd. Şti. (MERSIS: 0334132164900001, Ümraniye / İstanbul, Türkiye), the operator of Testoman, is responsible for the processing of your data as the data controller. For any question, request, or privacy enquiry: [email protected].
2. Data we process
- Account information: the identity obtained when you use Sign in with Apple or Sign in with Google (email address and/or name) and the unique user ID assigned to your account.
- Your profile and onboarding answers: information you provide to personalise the app, such as your goals, body type, mood, and training preferences.
- Meal photos and meal descriptions: images you upload or text you write for nutrition/macro analysis.
- Health and fitness data (Apple Health / Health Connect): with your permission, we read your steps, running/walking, and sleep data. This data is used solely to give you fitness insights; it is never used for advertising or marketing purposes and is never sold to third parties.
- Community content (T-Club): the topics you open, your replies, your reactions, and your nickname (username).
- Usage and progress: your T Score, your rank, your ritual/program records, and your challenge and arena progress.
- Notification token: your device notification token, so we can send push notifications (with your permission).
- Subscription status: active/past subscription information (we do not see your payment card details; payment is handled entirely through the Apple App Store or Google Play).
- Advertising measurement data: only if you give permission, your device's advertising identifier (IDFA on iOS, Advertising ID on Android) together with events such as app install, onboarding completion, and subscription. Its only purpose is to measure which channel our ads work through. The app shows no ads. Your health data, meal photos, and T-Club content are never included in this measurement.
- In-app event log: events such as which screens were opened, whether onboarding was completed, and whether the subscription screen was shown are stored on our own servers and are not passed on to any third party.
3. Why we process your data
- To run the app, manage your account, and sync it across your devices.
- To analyse your meal photo/text and produce nutrition insights.
- To build your personal plan and score from your health data.
- To operate the T-Club community and its moderation.
- To send the notifications you have consented to.
- For security, abuse prevention, and to meet legal obligations.
4. Who we share your data with
We do not sell your data. We share it only with the processors required to provide the service:
- Supabase — authentication, database, and storage infrastructure (servers are hosted in the European Union region).
- Anthropic (Claude) — the meal photo/meal text you upload is sent encrypted, solely for the purpose of analysis.
- RevenueCat — subscription management: the user ID assigned to your account and App Store purchase/renewal events are processed (USA); payment card details never reach RevenueCat or us.
- Apple — Sign in with Apple, Apple Health, App Store subscription, and push notifications (APNs).
- Google — authentication when you use Sign in with Google; on Android also the Google Play subscription, step/workout data via Health Connect, and push notifications (FCM).
- TikTok and Meta (Facebook) — advertising measurement. If you gave permission, your device's advertising identifier is sent to these networks together with install and subscription events; if you did not, no advertising identifier is sent at all. We buy ads from these networks; we do not show ads in the app.
- DeepL — when you choose to read a T-Club post in your own language, only that post's text is sent for translation; no identity or account information is sent.
Refusing advertising measurement: permission is asked the first time you use the app and you can withdraw it at any time — on iOS under Settings › Privacy & Security › Tracking, on Android under Settings › Google › All services › Ads. Turning it off does not restrict any feature of the app.
5. Retention period
We retain your data for as long as your account is active. When you delete your account, all of your account data (profile, T Score, rank, ritual/program, T-Club posts, photo analyses) is permanently and irreversibly deleted.
6. How to exercise your rights
- Deletion: in the app you can permanently delete your account and all of your data immediately via Profile > Account > Delete Account.
- Access / rectification: to access or correct your data, contact us at [email protected].
- Withdrawing permissions: you can turn off Camera, Photos, Health, and Notification permissions at any time in iOS Settings.
Note: deleting your account does not cancel your App Store subscription. You must cancel the subscription separately on your iPhone via Settings > Apple Account > Subscriptions.
7. Children's privacy
Testoman is intended for adults and is not directed at anyone under the age of 18. We do not knowingly collect data from anyone under 18.
8. Health disclaimer
Testoman does not provide medical advice; the content it offers is for information and general fitness purposes only. Consult your doctor before making any health, nutrition, or supplement decisions.
9. Changes
We may update this policy from time to time. We will notify you of material changes in the app or on this page. The current version is always published at this address.
10. Contact
You can send your questions to [email protected].