Scale (AI Scale) — Last updated: October 22, 2026 — Effective: October 22, 2026
The data controller for the Scale app ("the App", "the Service") is:
GUNAYDIN APP STUDIO YAZILIM HIZMETLERI LIMITED SIRKETI ("Gunaydin App Studio", "we", "us", "our")
Istanbul, Turkey
Email: hello@gunaydinappstudio.com
This policy explains what data the App handles, why, who receives it, how long we keep it, and what rights you have. It applies to the iOS app distributed through the Apple App Store. Please read it together with our Terms of Use.
| Category | What exactly | Source | Why |
|---|---|---|---|
| Device identifier | A random UUID generated on first launch, stored in the iOS Keychain (never synced to iCloud) with a copy in the App's local storage. It survives reinstalling the App unless you delete your data. | Generated by the App | Manage free usage limits, subscription status, analytics, push notifications, and let you delete your data later |
| Photos and frames | The photo you capture or pick, and, when AR scanning is used, up to five additional camera frames with depth and camera-angle metadata (no GPS) | You, via camera or photo picker | Produce the estimation you requested |
| Analysis metadata | Selected mode (e.g. Digital Scale, Calorie Counter), unit preference, language, app version, details you confirm on the result screen (for example the metal, construction or substance of the object), and the AI result | You / generated during use | Provide the Service, improve accuracy |
| History (on your device only) | Your past results, each with a small thumbnail of the photo. Stored in the App's storage on your device and never sent to us | Generated by the App | Let you look back at earlier results |
| Approximate location | Country, region and network operator derived from your IP address by Cloudflare on each request, and the country code of your device's region setting | Network / device settings | Diagnose regional outages, route requests, find legacy photo copies when you delete your data, aggregate statistics. We never collect precise GPS location |
| Usage and device data | Screens viewed, buttons tapped, feature usage, session length, your onboarding answers (for example what you plan to weigh), device model, OS version, app version, language, time zone, network type, and identifiers assigned by our analytics providers (for example the Apple Identifier for Vendor) | Automatically, via SDKs | Analytics, product improvement, tailoring the subscription offer |
| Session replays | Screen recordings of the App interface during your session, captured as periodic screenshots, plus network timing information. These recordings may include the camera preview, the photos you analyze, the results shown on screen and text you type, except in the contact form, which is masked. | Automatically, via PostHog | Understand usability problems and reproduce bugs |
| Result reports | When you report a result: the reason you choose, the correct value and comment you type (if any), the mode, and the text of the result you report. The photo is not included | You, via the result screen | Review wrong or inappropriate results and improve accuracy |
| Crash and performance data | Stack traces, device state at crash time, app launch and network performance metrics, linked to the device identifier | Automatically, via Firebase | Detect and fix crashes and slowdowns |
| Purchase data | Apple transaction and subscription status, product identifier, price, trial and renewal state, Apple Search Ads attribution token | Apple / Adapty | Unlock premium features, manage trials, measure revenue and marketing |
| Push notification data | APNs push token, OneSignal subscription identifier, subscription status, notification interactions | OneSignal | Deliver notifications you opted in to |
| Support messages | What you send through the App's contact form (Settings → Cancel or manage subscription): your message, the email address you give us for the reply, the device identifier, language and region setting, app version, whether you are a subscriber, and the country derived from your IP address. Anything you send us by email, including your email address | You | Answer your request |
We do not collect precise location, contacts, health data from Apple Health, biometric data, or the contents of your photo library beyond the individual photo you select.
When you request an analysis:
History on your device. The App saves each result with a small thumbnail of the photo in its own storage on your device, so you can find it again in History. History is never uploaded to us or to any provider. You can delete entries in History; Delete Account (Section 9) and uninstalling the App remove all of it. Like other app data, History is included in your iPhone backups (iCloud Backup or computer backups) if you use them.
Copies stored by earlier versions. Versions of the App released before September 2026 uploaded a reduced-size copy of each analyzed photo, together with the device identifier, the selected mode and the device country code, to our storage on Cloudflare R2 for quality assurance. We have stopped this practice: the upload endpoint was switched off in September 2026, so no version of the App can send copies any more. The copies that already exist remain in access-controlled storage, are not used for any purpose, are visible only to Gunaydin App Studio staff, and are deleted when you delete your data (Section 9) or at the latest 12 months after they were uploaded (Section 8).
Fallback routes. If our backend cannot be reached, or does not answer quickly enough on a device whose region, time zone or language points to mainland China, the App sends the photo directly from your device to OpenRouter, which uses the fallback model described above. If your device's region or time zone is set to Russia, or its primary language is Russian (wherever you are), the App sends the request instead through AITunnel, an AI gateway operated in the Russian Federation, because our primary infrastructure is frequently unreachable there. AITunnel forwards it to Google's Gemini models. In that case your photo is processed by AITunnel under its own privacy terms.
No AI training. We do not use your photos to train our own or anyone else's AI models, and we do not join any provider program that would allow it. The AI providers receive the image only to generate the response; some keep requests for a short time for abuse monitoring (Section 8).
Photos are analyzed by automated systems only. If you are in the EU/EEA or UK, note that the estimation is produced without human involvement; it is not a decision with legal or similarly significant effects on you.
| Purpose | Legal basis (GDPR / UK GDPR) |
|---|---|
| Producing the estimation you request, managing free credits and subscriptions | Performance of a contract (Art. 6(1)(b)) |
| Crash reporting and performance monitoring | Legitimate interest in keeping the Service working (Art. 6(1)(f)) |
| Product analytics, session replay and result reports | Legitimate interest in understanding how the App is used, fixing problems and improving accuracy (Art. 6(1)(f)). You can object at any time as described in Section 10 |
| Push notifications about offers and tips | Your consent, given through the iOS notification permission prompt (Art. 6(1)(a)) |
| Measuring marketing campaigns (Apple Search Ads, Google Ads on-device conversion) | Legitimate interest in measuring the effectiveness of our advertising (Art. 6(1)(f)) |
| Answering messages you send us, enforcing our Terms, complying with law | Legitimate interest and legal obligation (Art. 6(1)(c), (f)); for questions about your subscription, also performance of a contract (Art. 6(1)(b)) |
For users in Turkey, the corresponding grounds under the Personal Data Protection Law No. 6698 (KVKK) are the performance of a contract, compliance with legal obligations and our legitimate interests, and, for push notifications, your explicit consent given through the iOS permission prompt. Transfers abroad are described in Section 7.
We share data only with the service providers below, each acting on our instructions or under its own privacy terms as noted. We do not sell personal data and we do not share it with data brokers or advertising networks.
| Provider | Role | Data | Location | Policy |
|---|---|---|---|---|
| Cloudflare, Inc. | Backend hosting (Workers), request logs, storage (R2) of contact-form messages and, until deleted, the photo copies stored by earlier App versions | Photos in transit, device identifier, IP address, country/region, network operator, request metadata, contact-form messages | Global edge network; stored messages and legacy photo copies in Cloudflare's Eastern Europe storage location | cloudflare.com/privacypolicy |
| OpenRouter, Inc. | AI request routing | Photos, prompts, details you confirmed, language, unit preference | United States | openrouter.ai/privacy |
| Google LLC / Google Cloud | Primary AI model provider (Gemini) via OpenRouter and AITunnel | Photos and prompts | United States / EU | policies.google.com/privacy |
| Fallback model hosts: Cloudflare Workers AI, DeepInfra, Inc., or another host of the GLM model selected by OpenRouter (which may include Z.ai) | Fallback AI model (GLM by Z.ai) via OpenRouter | Photos and prompts | United States; other hosts may process data elsewhere, including Singapore or China | deepinfra.com/privacy, cloudflare.com/privacypolicy |
| AITunnel | AI gateway used only for devices whose region or time zone is set to Russia or whose primary language is Russian | Photos and prompts | Russian Federation | aitunnel.ru |
| Adapty Tech Inc. | Subscription management, subscription and onboarding screens, Apple Search Ads attribution, forwarding subscription events to OneSignal | Device identifier, IP address, device data, purchase and subscription data, attribution token, onboarding answers, OneSignal subscription identifier, subscription-screen interactions | United States | adapty.io/privacy |
| Google Firebase (Analytics, Crashlytics, Performance Monitoring) | Analytics, crash reporting, performance monitoring | Usage events, device data, crash logs linked to the device identifier, performance traces, Identifier for Vendor | United States | firebase.google.com/support/privacy |
| Google Ads on-device conversion measurement SDK | Measures whether an App Store install resulted from a Google ad. Matching happens on your device; we do not pass any personal identifiers to this SDK | Aggregated conversion signals | United States | policies.google.com/privacy |
| Mixpanel, Inc. | Product analytics | Usage events, device identifier, device data, preferences such as unit and premium status, purchase amounts | United States | mixpanel.com/legal/privacy-policy |
| PostHog, Inc. | Product analytics, feature flags, session replay, result reports | Usage events, device identifier, screen recordings, network timing, result reports | United States | posthog.com/privacy |
| OneSignal, Inc. | Push notifications | Push token, device identifier, device data, notification interactions, subscription events received from Adapty | United States | onesignal.com/privacy_policy |
| Apple Inc. | App distribution, in-app purchases, subscription billing, App Store analytics | Handled under Apple's own terms; we never see your payment details | Global | apple.com/legal/privacy |
Firebase services are not initialized on devices whose region is set to China.
We are established in Turkey and our providers are mainly in the United States, with some processing in the EU and, for the fallback model, possibly in other countries (Section 6). When personal data of EU/EEA, UK or Swiss users is transferred to a country without an adequacy decision, we rely on the European Commission's Standard Contractual Clauses (and the UK International Data Transfer Addendum) included in each provider's data processing terms, together with the providers' technical safeguards. Transfers to US providers certified under the EU-US Data Privacy Framework rely on that framework where applicable. You can request a copy of the relevant safeguards by contacting us.
Requests routed through AITunnel (Section 4) are transferred to the Russian Federation, which has no adequacy decision. This route is used only when your device's settings point to Russia or the Russian language, because our primary infrastructure is frequently unreachable from Russia.
For users in Turkey, transfers abroad are carried out in accordance with Article 9 of the KVKK, on the basis of the appropriate safeguards it provides for, such as standard contracts.
| Data | Retention |
|---|---|
| Photos and frames sent for analysis | Not stored by our analysis backend after the response is returned; deleted from AI providers according to their zero-retention or short-term abuse-monitoring policies (OpenRouter: per provider settings; Google: up to 30 days for abuse monitoring) |
| History (on your device) | Until you delete the entries, delete your data or uninstall the App |
| Photo copies stored by earlier App versions (Cloudflare R2) | No new copies are collected. Existing copies are deleted 12 months after upload, or earlier if you delete your data |
| Device identifier and free-credit state | Until you delete your data or, on our systems, 24 months after last activity |
| Backend request logs (no images) | 30 days |
| Analytics events and result reports (Firebase, Mixpanel, PostHog) | Up to 24 months, then deleted or aggregated |
| Session replays (PostHog) | 30 days |
| Crash and performance data (Firebase) | 90 days |
| Subscription records (Adapty) | Duration of the subscription plus the period Apple requires for refunds and disputes |
| Push notification data (OneSignal) | Until you unsubscribe or delete your data |
| Contact-form messages (Cloudflare R2) | 12 months after we receive them, or earlier if you delete your data |
| Support emails | Up to 3 years after the request is closed |
We may keep data longer where required by law, for example tax or accounting rules applying to purchases, or to establish or defend legal claims.
In the App: open Settings → Delete Account and confirm. The App will:
Because the old identifier is destroyed, events already held by our analytics and crash-reporting providers can no longer be linked to your device; those records expire under the retention periods in Section 8, or you can ask us to have them removed sooner by emailing us the old identifier. Providers may retain aggregated statistics that never identified your device, and Apple retains purchase records under its own terms. Deleting your data does not cancel an active subscription; manage subscriptions in iOS Settings → Apple Account → Subscriptions.
By email: if you have already uninstalled the App, write to hello@gunaydinappstudio.com. Because we do not have your name or email on file, please include the device identifier shown in Settings → Device ID if you still have it; otherwise we will help you identify your data from the details you can provide.
Simply uninstalling the App removes local data, including History, but not the Keychain identifier (which iOS may preserve) or data already on our servers. Use the in-app deletion or contact us to remove those.
Depending on where you live, you have the right to:
How to exercise them
California and other US states. We do not sell or share personal information for cross-context behavioral advertising, and we do not use or disclose sensitive personal information for purposes other than providing the Service. California residents may exercise access, deletion, correction and non-discrimination rights by contacting us. We do not respond differently to Global Privacy Control signals because we do not sell data.
The App does not contain third-party advertising SDKs and does not display ads. We do not combine data collected in the App with data from other companies' apps or websites for advertising, and we do not use the Apple App Tracking Transparency framework because we do not perform "tracking" as Apple defines it. Marketing measurement is limited to Apple Search Ads attribution (via Adapty and Apple's AdServices framework) and Google's on-device conversion measurement, neither of which shares a user-level identifier with us.
If you allow notifications, we send them through OneSignal and through local notifications scheduled on your device. They cover free-credit reminders, a reminder before a free trial ends, tips, product updates and promotional offers. You can stop them at any time in iOS Settings → Notifications → Scale. Turning notifications off does not affect the rest of the App.
All traffic between the App, our backend and our providers is encrypted with TLS. On our servers, photos are processed in memory and are not written to storage; the legacy copies described in Section 4 and contact-form messages sit in access-controlled storage reachable only through authenticated backend calls until they are deleted. Our backend requires an API key on every request. The device identifier is stored in the iOS Keychain and is never synced to iCloud. No system is perfectly secure; if we become aware of a breach affecting your data we will notify you and the competent authority as required by law.
The App is not directed to children under 13 and we do not knowingly collect personal data from them. If you are a parent or guardian and believe a child under 13 has used the App, contact us and we will delete the data. Users between 13 and the age of majority in their country need a parent's or guardian's permission to use the App.
We will post any new version here with a new "Last updated" date. If a change materially reduces your rights or adds new purposes for using your data, we will notify you in the App before it takes effect and, where the law requires, ask for your consent again.
GUNAYDIN APP STUDIO YAZILIM HIZMETLERI LIMITED SIRKETI
Istanbul, Turkey
hello@gunaydinappstudio.com