Effective date: September 14, 2026
This Privacy Policy explains how Maslaking Yazılım Anonim Şirketi ("Maslaking," "Resona," "we," "us," or "our"), a company organized under the laws of the Republic of Türkiye and headquartered in Istanbul, collects, uses, discloses, and protects information when you use the Resona mobile application and any related services (together, the "App").
Resona is a focus and relaxation soundscape app. It is not a medical device, does not provide medical, psychological, or clinical advice, and is not intended to diagnose, treat, cure, or prevent any disease or condition.
By using the App, you agree to the collection and use of information as described in this Policy.
You can use most of Resona as a guest, without creating an account — we assign your device an anonymous account so your data can sync while you use the App.
If you choose to link a Google or Apple account from Settings, we receive your name and email address from that provider to identify you and let you sign back in on other devices.
We never see or store your password; sign-in is handled entirely by Apple or Google.
We store data you generate while using the App, so your experience carries over across sessions and devices:
Saved sound presets (your custom multi-stem soundscape mixes)
Favorited tracks
Listening and session history (which tracks or presets you played, when, and for how long)
Onboarding answers (the goals, preferred listening times, and sensitivity settings you tell us during setup)
Files you choose to download for offline playback, which are stored locally on your device only — we do not receive a copy of them
Subscriptions are billed and processed entirely by the Apple App Store or Google Play — we never receive or store your card number or other payment details.
We use RevenueCat to determine your entitlement status. RevenueCat receives your subscription and product identifiers, purchase history, and the device and attribution identifiers described in Section 1.5.
We use Google Firebase Analytics to understand how the App is used, including app opens, screens viewed, and in-app actions, for example saving a preset, favoriting a track, completing a session, or downloading a track for offline use.
This data is tied to an anonymous, app-scoped identifier, not to your name or email.
To measure the effectiveness of our marketing and understand how people discover Resona, we use Adjust and Meta (Facebook).
On iOS, we request your permission through Apple's App Tracking Transparency (ATT) framework before collecting your device's advertising identifier (IDFA). If you decline, we do not collect the IDFA, and these services operate with reduced, non-cross-app-tracking data only.
On Android, similar attribution signals are gated by your device's advertising ID and system-level privacy settings.
Depending on your choice, these services may process:
An advertising identifier (IDFA on iOS, or the Android advertising ID)
A vendor identifier (IDFV) and an Adjust- or Meta-generated anonymous device ID
General device and app information (device model, OS version, install/session timestamps)
We automatically receive some technical information whenever you use the App, such as device model, operating system and version, app version, language settings, and general crash or error logs, so we can keep the App working reliably.
Resona's audio engine relies on an operating-system framework that also supports microphone input, which is why your device may show a microphone permission for the App — but Resona never activates your microphone and never records, accesses, or transmits audio from your surroundings.
We also do not collect precise location, contacts, photos, or health data from your device.
We use your information:
To provide, maintain, and personalize the App's core features
To process and manage your subscription
To understand product usage and improve the App
To measure the performance of our advertising and understand which channels bring people to Resona
To keep the App secure and prevent fraud or abuse
To comply with legal obligations and enforce our Terms of Service
We do not sell your personal information, and we do not use your onboarding answers or listening activity to make automated decisions that produce legal or similarly significant effects on you.
Where the GDPR applies to you, we rely on the following legal bases: performance of a contract (to provide the App), our legitimate interests (to keep the App secure and improve it), your consent (for the tracking and advertising identifiers in Section 1.5, which you can withdraw at any time), and compliance with legal obligations.
We work with the following third-party service providers:
Supabase
Purpose: Authentication and app database (Postgres with row-level security)
RevenueCat
Purpose: Subscription and entitlement management
Google Firebase
Purpose: Product analytics
Adjust
Purpose: Marketing attribution measurement
Meta (Facebook)
Purpose: Marketing attribution measurement
Apple / Google
Purpose: Sign-in, app distribution, and payment processing
Each provider processes data under its own privacy policy and only for the purposes described in this Policy.
We do not permit these providers to use your information for their own independent marketing purposes.
Maslaking is based in Türkiye, and the providers listed in Section 3 may process information on servers located outside Türkiye, including in the European Union and the United States.
Where we transfer personal information internationally, we rely on the safeguards required by applicable law, such as standard contractual clauses, an adequacy decision, or your explicit consent.
We retain your account and app activity data for as long as your account remains active.
If you delete your account, we permanently delete your account and the personal data associated with it, except where we are required to retain certain records, for example transaction records, to comply with legal, tax, or accounting obligations.
Aggregated or anonymized data that can no longer identify you may be retained for longer, for analytics purposes.
Delete your account:
You can permanently delete your account and all associated data at any time from Settings → Delete account in the App.
Restrict tracking:
On iOS, you can allow or deny App Tracking Transparency when prompted, or change your choice later in your device's Settings → Privacy & Security → Tracking.
Access or correct your data:
Contact us using the details in Section 10.
Restore purchases:
Available anytime from Settings → Restore Purchases.
If GDPR-equivalent law applies to you, you have the right to access, rectify, erase, restrict, or port your personal information, and to object to certain processing, including profiling for marketing purposes.
You may also lodge a complaint with your local data protection authority.
If you are a California resident, you have the right to know what personal information we collect, to request its deletion or correction, and to opt out of the "sale" or "sharing" of personal information — which, under California law, can include the advertising identifiers described in Section 1.5.
You may exercise these rights, including "Do Not Sell or Share My Personal Information," by declining App Tracking Transparency or contacting us using the details in Section 10.
We do not discriminate against you for exercising these rights.
If you are located in Türkiye, you have the rights listed in Article 11 of the Personal Data Protection Law No. 6698 ("KVKK"), including the right to learn whether your personal data has been processed, to request its correction or deletion, and to object to results arising from the analysis of your data through automated systems.
You may submit KVKK requests using the contact details in Section 10, and you may lodge a complaint with the Kişisel Verilerin Korunması Kurulu (the Turkish Data Protection Board).
Resona is not directed at children under 13, or the minimum age required by your local law, and we do not knowingly collect personal information from children under that age.
If we learn that we have collected personal information from a child without appropriate consent, we will delete it promptly.
Parents who believe their child has provided us with personal information may contact us using the details in Section 10.
We use industry-standard safeguards, including encryption in transit, database-level row-level security, and access controls, to protect your information.
No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
If we become aware of a security incident affecting your personal information, we will notify you and any applicable regulator as required by law.
We may update this Privacy Policy from time to time.
We will update the "Effective date" above when we do, and where changes are material, we will provide reasonable notice, such as an in-app notice.
Continued use of the App after a change takes effect means you accept the updated Policy.
If you have questions about this Privacy Policy or want to exercise your data rights, contact us at:
Email: info@maslaking.com
Data Controller:
Maslaking Yazılım Anonim Şirketi
Istanbul, Türkiye