Muhammed Kılınç

← Natty

Privacy Policy

Last updated · August 12, 2026

Operator. Natty is operated by Muhammed Kılınç, an independent developer based in Türkiye. Contact: hello@muhammedkilinc.com.

In short

  • Natty works without a sign-up — the app creates an anonymous account for you automatically. No name, no email.
  • Your photo is used only for the read you ask for. It is sent for analysis only in that moment, processed in memory, and never stored on our servers or used to train any model.
  • The written result of each analysis is stored under your anonymous ID — to monitor quality and, in the future, to sync your archive across devices. It is never tied to your name and never used for advertising.
  • We use anonymous, aggregate usage analytics (which screens and features are used) to improve the app. It is keyed to your anonymous ID, never linked to your identity, and never used for advertising or cross-app tracking.
  • No ads are shown inside Natty, and we use no advertising identifier. We do measure which ad campaigns lead to new installs, through Apple’s SKAdNetwork — that measurement is campaign-level and aggregated, and your photo is never part of it. See “Ad measurement” below.
  • We do not sell your personal data.
  • Whether you are in the EU, UK, US, Türkiye, or elsewhere, the rights described below apply to you.

This Privacy Policy explains how Natty (“we”, “our”, “us”) handles information when you use the Natty app (the “Service”).

Your photos

Natty is built so that your photos are not collected:

  • Photos you shoot are stored only on your device, in the app’s local storage. They are not uploaded to, or kept on, any server we operate.
  • To produce a read, a single photo plus your context (for example “dinner” or “work”) is sent over an encrypted connection through our thin proxy to an AI provider, analyzed in memory, and discarded. It is not retained by us or the provider, and is not used to train any model (zero-retention / no-training).
  • The written result of the analysis is saved on your device in your calendar archive. A copy is also kept on our servers under your anonymous ID so we can monitor the quality of Natty’s reads — see “What we collect” below. The photo itself is never part of that copy, and the result is never tied to your name.

What we collect

  • An anonymous account. On first launch the app creates a pseudonymous user ID (no name, no email, no password). Everything below is keyed to that ID — never to your identity.
  • Written analysis results. The text result of each completed analysis (the reading, the suggestion, your selected context and preferences like tone) is stored under your anonymous ID. We use it to monitor and improve the quality of Natty’s reads, and in the future to sync your archive across your devices. The photo itself, your free-text notes, and your outfit history are never stored on our servers.
  • On-device data (stays on device). Your photos and your calendar archive live locally on your device. This data is controlled entirely by you and is removed when you delete the app.
  • Transient analysis request. The photo and context you submit for a read are processed in memory by our AI provider and not stored (see “Your photos” above).
  • Usage counters (no personal data). To enforce the free and premium limits, our server keeps a small counter keyed to your anonymous ID, the current week or day, and a count.
  • Anonymous usage analytics. We use Firebase Analytics (Google Analytics for Firebase) to understand aggregate, in-app usage — which screens and features are used — so we can improve Natty. It is keyed to your pseudonymous ID, never linked to your name or identity, and never used for advertising or to track you across other apps or websites.
  • Anonymous crash reports. If the app crashes, a technical report (stack trace, device model, OS version) is captured by Firebase Crashlytics so we can fix it. It contains no photos and no personal content.
  • Subscription state. When you subscribe, your purchase and renewal state are managed through the Apple App Store and RevenueCat. We do not see or store your payment details.

What we do NOT do

  • No ads are shown inside Natty. No banner, no interstitial, no AdMob.
  • No advertising identifier (IDFA) and no App Tracking Transparency prompt — the ad measurement described below works without either.
  • No behavioral advertising profiles. We do not build, buy, or hold a profile of you for advertising.
  • Your photo, your written reads, and your name are never given to an ad network, under any circumstances.
  • No selling or sharing of personal data.

Ad measurement

To know whether the ads we run are worth their cost, Natty measures which campaign a new install came from. This is the one part of the app that counts as “tracking” under Apple’s definition, so we describe it plainly:

  • It uses Apple’s SKAdNetwork. Apple sits in the middle, and what comes back to us is a campaign-level, aggregated signal — not a record of an individual person.
  • The TikTok Business SDK is included in the app for this purpose. It reports a small number of conversion events (for example: a first analysis completed, a trial started, a subscription purchased). It reports the event name only. It never receives your photo, the text of your reads, your name, or your usage analytics.
  • No advertising identifier is involved. We never request App Tracking Transparency permission, so the IDFA stays unavailable and the SDK runs in SKAdNetwork-only mode.
  • Because an SDK does send those events to a third party, our App Privacy label and privacy manifest declare Device ID and Product Interaction as “used to track”. We would rather declare this than quietly rely on the fact that no IDFA is involved.

This applies from version 1.0.1 onward. Version 1.0 contained no ad measurement of any kind.

How we use information

  • Provide the style-analysis feature and your on-device archive.
  • Manage subscriptions and determine entitlement to Premium.
  • Enforce fair-use limits and prevent abuse, via the pseudonymous usage counter.
  • Understand aggregate, anonymous usage to improve the app.
  • Comply with legal obligations.

Legal bases (EU / UK / EEA)

Where GDPR applies, we process data on the following bases:

  • Contract — to provide the Premium subscription you purchased.
  • Legitimate interests — to keep the Service stable, enforce fair use, prevent abuse, and understand aggregate, anonymous usage to improve the app, using pseudonymous data only.

Third-party services

  • Anthropic (AI analysis) — The photo and context you submit are processed by Anthropic’s API under a zero-retention, no-training configuration: inputs are not stored and are not used to train models. See Anthropic’s Privacy Policy.
  • Supabase — Hosts our thin proxy (which holds the AI key server-side) and the pseudonymous usage counter. Photos are never stored there. See Supabase’s Privacy Policy.
  • Firebase (Google) — Crashlytics for anonymous crash reports, and Firebase Analytics (Google Analytics for Firebase) for anonymous, aggregate usage analytics keyed to your pseudonymous ID. Neither uses advertising identifiers nor tracks you across apps. See Google’s Privacy Policy.
  • RevenueCat — Subscription management and entitlement verification. RevenueCat receives a pseudonymous user ID and purchase receipts. See RevenueCat’s Privacy Policy.
  • TikTok (ad measurement, from version 1.0.1) — The TikTok Business SDK reports a small set of conversion event names so we can tell which ad campaign an install came from, via Apple’s SKAdNetwork. It receives no photo, no read text, no name, and no advertising identifier. See TikTok’s Privacy Policy.
  • Apple App Store (StoreKit 2) — Subscription and in-app purchase management.

Each of these providers is bound by a data processing agreement (or the equivalent terms of their business/API agreement) that requires them to provide the same or equal protection of your data as this policy describes: to process it only on our documented instructions, for the sole purpose of delivering their part of the Service, and never to sell it, share it, or use it for their own advertising or model-training purposes. Before you send a photo for a read, the app tells you in plain language what is sent and who receives it, and asks for your agreement.

Data storage, retention, and transfers

Server-side we store only what is described above — written analysis results and usage counters, keyed to your anonymous ID — on managed infrastructure in the EU (Frankfurt). Deleting your account removes all of it. Our processors may process data outside your country and rely on Standard Contractual Clauses or equivalent safeguards for international transfers. Your on-device data (photos, archive) is controlled entirely by you and can be removed by deleting the app.

Your rights

Anyone can request information, correction, or deletion of any data we hold by emailing hello@muhammedkilinc.com. We will respond within 30 days.

EU / UK / EEA residents (GDPR)

You have the right to:

  • Access the personal data we hold about you.
  • Rectify inaccurate data.
  • Erase your data (“right to be forgotten”).
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw any consent you previously gave.
  • Lodge a complaint with your local supervisory authority.

California residents (CCPA / CPRA)

You have the right to:

  • Know what personal information we collect, use, and disclose.
  • Delete personal information we hold about you.
  • Opt out of any “sale” or “sharing” of your personal information — we do not sell personal data and do not share it for cross-context behavioral advertising.
  • Not be discriminated against for exercising any of these rights.

Türkiye residents (KVKK)

Natty operates in compliance with Law No. 6698 on the Protection of Personal Data. Turkish residents have the rights granted under KVKK Article 11, including access, rectification, deletion, and the right to lodge a complaint with the Personal Data Protection Authority (KVKK).

Children

Natty is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

Subscriptions

Subscribing to Natty Premium lifts the free analysis limit and unlocks a deeper read. Your calendar and archive are always free and never gated. Subscription details, renewal, and cancellation are managed through your Apple ID; we do not see or store your payment information.

Changes

This policy may be updated from time to time. Material changes will be communicated in the app where appropriate. The “last updated” date at the top of this page reflects the most recent revision.

Contact

Questions about privacy: hello@muhammedkilinc.com.