Privacy Policy
Last updated: 4 October 2026
1. Who is responsible
Tessera is developed and published by Taha Yerdekalmazer. “We” in this policy means that. For any question or request: hi@tahayerdekalmazer.com
2. What stays on your phone
The whole app works without an account. The target photo you choose, the memories you add, the titles and notes you write, your names and all of your photos are stored only on your device, in the private space iOS gives the app. The mosaic is computed on your device too; no internet connection is needed for it.
Without an account, only these reach us:
- Unless you switch it off, the anonymous usage counts described in section 3.
- The general settings the app reads from our server when it opens (for example “update required” or a maintenance notice). Nothing about you is sent with that request; only your phone's IP address reaches the server, by the nature of a connection.
Both arrived with version 1.4. Versions 1.3 and earlier send us no data at all unless an account is created.
If you delete the app, your data is deleted from your device. If you have no account we have no copy, so we cannot bring it back.
3. Anonymous usage measurement
We have no other way to know how many people complete their first memory, where they get stuck, or whether the app crashes. So from version 1.4 the app sends short records that describe what happened, not what you made. Measurement is on by default for new installs and after the update; people who update are told about it once inside the app.
What goes
- The name of the event: the app was opened, a setup step was passed, a memory was started or completed, a moment was picked for this week, other suggestions were asked for, the mosaic was opened, an offer was shown, taken or dismissed, the purchase screen appeared, a purchase started, finished or did not go through, someone signed in, an invite was created or accepted, joining a partner's mosaic started, finished or failed, a sync finished or failed, a share card was saved, reminder permission was given or not, and similar.
- Numbers and fixed values for that event: which moment it was (its position), its theme (adventure, romantic…), how many photos were added, which Premium plan, whether Premium is on, whether you have an account and a partner (yes/no), an error code if something failed, how long something took, how many days you have been using the app.
- If the app crashes, a technical summary of which version crashed and in which part of the code.
- Your phone's model, iOS version, app version, language, time zone, screen size, and whether it is on Wi-Fi or cellular.
- A random install number the measurement tool creates on first launch. It lets us count records from the same phone together; it is never matched with your name, your email or your account.
What never goes
- Your photos, or anything derived from them
- Memory titles, moments you wrote yourselves, and notes
- Your names or your partner's, your email address
- Invite codes
- Your account number — measurement is not tied to your account, even if you have one
- Screen recordings, screenshots, or which buttons you tap — these are off
- Your location
By the nature of a connection, your phone's IP address reaches the measurement server. The app asks for no location to be derived from it.
Switching it off: Us → Settings → Privacy → Anonymous usage data. From that moment no record is sent, crash summaries included, and anything still waiting to be sent is discarded. You can switch it back on at any time.
Measurement and crash summaries run on PostHog, hosted in the European Union (see sections 6 and 7).
4. If you create an account
When you want to invite your partner or back up your journey, an account is created through Sign in with Apple. From then on, the following is processed:
| Account ID | A user number unique to you. It is what ties your journey to you and pairs you with your partner. |
|---|---|
| Email address | Comes from Sign in with Apple. If you use Apple's “Hide My Email”, your real address never reaches us; we receive a relay address Apple creates instead. |
| Display name | Optional. Only so your partner recognises you. The app works without it. |
| Journey content | The target photo and the photos you add to memories; memory titles, moments you wrote yourselves, notes and the dates of your memories; which memories are complete; the two names you put on the mosaic and the date you got together; the moment and day you picked for this week. |
| Pairing | The fact that you and your partner share a journey, and the invite code you create. Invite codes stop working once used or expired. |
| Technical logs | Our server provider keeps standard access logs (IP address, time of request) for security and debugging. They are never used for marketing. |
What we do not collect
- Your location
- Your contacts, calendar or data from other apps
- The advertising identifier (IDFA) — we show no ads and do not track you across other apps
- Your whole photo library — only the pictures you pick in the system photo picker are copied into the app
- Your phone's notification address (push token) — this version sends no notifications from the server; reminders are scheduled on your phone itself and send us nothing
- Your payment details — payments go entirely through Apple, and your card details never reach us
5. Why we process it
Account, journey content and pairing rely on performance of a contract (KVKK art. 5/2-c, GDPR art. 6(1)(b)): you asked for partner pairing and backup, and we provide them. Technical logs rely on legitimate interest (KVKK art. 5/2-f, GDPR art. 6(1)(f)) and serve only the security of the service.
Anonymous usage measurement is there to see that the app works, does not crash and actually helps couples. No content goes into it, it is not tied to your account, and it can be switched off in Settings.
We do not use your data for profiling, ad targeting or automated decision-making.
6. Where it is stored
| Account, journey, photos | Supabase — Frankfurt, Germany (AWS eu-central-1) |
|---|---|
| Anonymous usage measurement | PostHog — European Union (PostHog EU cloud) |
So your data is stored outside Türkiye, on servers in the European Union. It is encrypted in transit with TLS and at rest at disk level.
Access to your account data is limited by row-level security rules enforced in the database itself: a journey can be read and written only by its members — you and, if you have one, your partner. The rule lives in the database, not in the app's code.
7. Who it is shared with
We do not sell your data and do not share it with anyone for marketing. We use only the following providers to run the service:
| Apple | App distribution, Sign in with Apple, and all payments. Apple's own privacy policy applies. |
|---|---|
| Supabase | Database, authentication and file storage. Servers in Frankfurt. |
| PostHog | Anonymous usage measurement and crash summaries. Servers in the European Union. |
| Netlify | Hosting this website and the partner invite page. The code in an invite link sits after the “#” in the address; browsers do not send that part to the server. |
Beyond these, we share your data only where the law requires it (such as a court order), with the relevant authority.
Your partner is not a provider, but you should know: when you join a shared journey, your partner sees every photo, title, note and name in that journey, and your display name. That is the feature itself.
8. How long we keep it
Your journey data is kept until you delete it.
When you delete your account (Us → Settings → Account → Delete account) your account and — if you do not share a journey — your journey and memories are deleted from the server straight away. Photo files go into a deletion queue and are removed from storage by a job that runs every ten minutes. The copy on your phone stays; you can remove it by deleting the app or resetting the journey.
If you share a journey and delete your account, the journey stays with your partner — it belongs to both of you, and deleting it one-sidedly would wipe out months of the other person's effort too. The photos you added stay in the journey so your partner's mosaic is not broken, and their link to you is removed. When the last member of the couple deletes their account too, every photo of the journey is deleted. If you want the photos you added removed before that, write to us.
Anonymous measurement records are deleted automatically in PostHog when their retention period ends. Because the install number is not tied to your account, we cannot tell which records are yours either, so they cannot be deleted one by one. Once you switch measurement off, no new records are created.
9. Your rights
Under KVKK art. 11 and the GDPR you have the right to:
- learn whether your personal data is processed;
- request information about it if it is;
- get a copy of your data (portability);
- have incorrect or incomplete data corrected;
- have your data deleted;
- object to processing.
Some you can use straight from the app: delete your account with Us → Settings → Account → Delete account, and switch measurement off with the switch under Us → Settings → Privacy. (In version 1.3 and earlier, account deletion is under Settings → Delete account.) For anything else write to hi@tahayerdekalmazer.com; we reply within 30 days at the latest.
You keep the right to complain to the Turkish Personal Data Protection Authority (KVKK), or, in the European Union, to the data protection authority of your country.
10. Children
Tessera is not made for children, and we do not knowingly collect data from anyone under 13. If we find such data, we delete it.
11. If this policy changes
If we update the policy we change the date on this page. If a significant change widens the kinds of data collected, we tell you inside the app — as we did when anonymous usage measurement was added in version 1.4.
12. Contact
For anything: hi@tahayerdekalmazer.com