Privacy Policy

This privacy policy applies to the Burstsend app for mobile devices, together with any related services operated by Enes Eken (collectively, the "Application"). Enes Eken is hereby referred to as the "Service Provider".

Information Collection and Use

Burstsend is designed to work without user accounts and without a file-storage server operated by the Service Provider. The Application processes the following information:

Profile name and profile photo — provided by you, stored locally on your device, and shared only with the nearby devices you choose to pair with. This information is not intentionally transmitted to the Service Provider.

Transferred files — photos, videos, documents, and other files you select are transferred directly between the sending and receiving devices over the local network or through device-to-device communication technologies. Burstsend does not upload transferred files to, or store transferred files on, a server or cloud-storage service operated by the Service Provider. The Service Provider does not have access to the contents of transferred files. Transferred files may remain on the sending device, the receiving device, in locations selected by the device owner, or in device or cloud backups.

On-device settings and app state — preferences, an app-generated device identifier, saved nearby-device information, transfer-history metadata, onboarding and update choices, cached purchase-display information, and Pro status are stored locally using iOS storage, including UserDefaults. Information needed by the share extension may be shared only between the Burstsend app and its extension through their private App Group. This information is not used to track you across unrelated apps or websites and is not intentionally transmitted to the Service Provider.

Purchase information — if you buy Burstsend Pro, which is a one-time purchase as described in the “Purchases” section below, a pseudonymous RevenueCat App User ID, purchase receipt or transaction information, device model, operating-system version, Internet Protocol address, and other technical information reasonably necessary to validate or restore the purchase may be processed by RevenueCat, the Service Provider's purchase-infrastructure provider.

The Application does not intentionally collect your precise location, contacts, browsing history, or advertising identifiers. It contains no advertising SDKs or general-purpose behavioral analytics SDKs. RevenueCat provides purchase validation, entitlement management, and purchase-related reporting and analytics as described in this Privacy Policy.

Purchases

Burstsend Pro is offered as a single one-time purchase. There is no subscription and no automatic renewal.

Payment is handled by Apple through your App Store account. In connection with the payment transaction, the Service Provider does not receive your complete payment-card details, payment credentials, Apple Account password, or billing address.

To validate and restore purchases, the Application uses RevenueCat, which may process a pseudonymous RevenueCat App User ID, purchase receipts, transaction information, entitlement information, device information, and related technical data on the Service Provider's behalf.

The RevenueCat App User ID is described as pseudonymous rather than completely anonymous because it may be associated with purchase and entitlement records even when the Service Provider does not know your civil identity.

Cookies and Tracking Technologies

The current native version of the Application does not use browser cookies and does not track you across unrelated apps or websites for targeted advertising.

The Application does not contain advertising SDKs or use advertising identifiers for targeted advertising.

RevenueCat processes the purchase-related and technical information described in this Privacy Policy for purchase validation, entitlement management, restoration, fraud prevention, troubleshooting, and purchase-related reporting and analytics.

If non-essential analytics, advertising technologies, or cross-app tracking are introduced in the future, this Privacy Policy and any required consent controls will be updated as required by applicable law.

Your Rights

Depending on your location and applicable law, you may request access to, correction of, or deletion of personal data that is controlled by the Service Provider or processed on the Service Provider’s behalf.

Depending on your location and applicable law, you may have rights concerning identifiable personal data controlled by the Service Provider or processed on the Service Provider’s behalf. These rights may include requesting information about the processing, access to, correction or deletion of personal data, objecting to certain processing, withdrawing consent where processing is based on consent, and submitting a complaint to a competent data-protection authority.

These rights do not apply to information that exists only on your device or another user’s device and cannot be accessed by the Service Provider. To exercise an applicable right concerning identifiable RevenueCat purchase records or support and privacy communications sent to the Service Provider, contact burstsendapp@gmail.com. The Service Provider may request limited information reasonably necessary to verify the request and locate the relevant record.

Burstsend does not maintain server-side copies of your profile information, on-device settings, or transferred files. The Service Provider therefore cannot access, correct, export, or delete information that exists only on your device or another user’s device.

You may correct or delete locally stored profile information directly through the Application where the relevant controls are available.

Uninstalling the Application normally removes information from the Application’s active local storage. However, copies may remain in device, iCloud, or computer backups, in Keychain if the Application uses Keychain storage, in files saved outside the Application’s private storage, or on recipient devices.

Applicable rights may still be exercised in relation to identifiable purchase-related records processed by RevenueCat on the Service Provider’s behalf and support or privacy communications sent to the Service Provider.

Because Burstsend does not require a user account, the Service Provider may request only the limited information reasonably necessary to verify your request and locate the relevant RevenueCat purchase record or support communication.

Your California Privacy Rights (CCPA/CPRA)

This section applies only to the extent that the California Consumer Privacy Act, as amended by the California Privacy Rights Act, applies to the Service Provider or the relevant processing activity.

Where applicable, California residents may have the right to know what personal information is collected, request access to or correction of personal information, request deletion of personal information, opt out of the sale or sharing of personal information, and receive non-discriminatory treatment for exercising applicable privacy rights.

The Service Provider does not sell personal information or share personal information for cross-context behavioral advertising as those terms are defined under applicable California law.

To exercise an applicable CCPA/CPRA right, contact the Service Provider at burstsendapp@gmail.com.

Third Party Access

The Service Provider does not operate a server that stores profile information or transferred files and does not intentionally receive your profile name, profile photo, or the contents of transferred files.

Purchase-related and technical information may be processed by RevenueCat on the Service Provider’s behalf as described in this Privacy Policy.

The only third-party SDK currently embedded in the Application is RevenueCat:

• RevenueCat  

Purchase validation, entitlement management, restoration, fraud prevention, troubleshooting, and purchase-related reporting and analytics for the one-time Burstsend Pro purchase.

RevenueCat may use authorized subprocessors to provide its services. RevenueCat’s processing is subject to its own privacy policy and applicable contractual terms.

Apple independently processes App Store account information, payments, purchase history, transaction information, and other information required to provide App Store services. Apple’s processing is governed by Apple’s own terms and privacy practices.

If you contact the Service Provider at burstsendapp@gmail.com, Google may process your email address, message contents, attachments, and related email metadata as the provider of the Gmail service used for support communications. Google’s processing is governed by Google’s own terms and privacy practices.

Profile information and transferred files are made available to devices that you intentionally select or connect with. The owner of a recipient device is not a service provider controlled by the Service Provider.

The Service Provider may disclose limited information:

as required by a binding legal obligation, court order, or other lawful legal process;

where the Service Provider reasonably believes in good faith that disclosure is necessary to investigate fraud, protect the safety or legal rights of users or other persons, respond to a lawful government request, or establish, exercise, or defend legal rights;

with service providers that process information on the Service Provider’s behalf, subject to appropriate contractual and legal requirements.

Any disclosure will be limited to information reasonably necessary for the relevant lawful purpose, to the extent required or permitted by applicable law.

International Data Transfers

RevenueCat, Apple, Google, and their authorized service providers may process information in countries outside your country of residence, including the United States and countries outside Türkiye or the European Economic Area.

Data-protection laws in those countries may differ from the laws in your country.

Where applicable law requires an international data-transfer mechanism or safeguard, transfers must be carried out using a mechanism permitted under the applicable law.

Depending on the applicable country and processing activity, such mechanisms may include:

Standard Contractual Clauses approved by the European Commission;

an applicable adequacy decision;

another legally recognized appropriate safeguard; or

an applicable statutory exception where its legal requirements are satisfied.

RevenueCat’s Data Processing Addendum describes the use of European Commission Standard Contractual Clauses for certain transfers governed by European data-protection law. These clauses do not, by themselves, establish compliance with the separate international-transfer requirements of every country.

Where Turkish data-protection law applies, international transfers must be based on a transfer mechanism permitted under Article 9 of Turkish Personal Data Protection Law No. 6698.

This Privacy Policy does not, by itself, create or replace any contract, regulatory notification, authorization, or other transfer mechanism required by applicable law.

Opt-Out Rights

You can stop future on-device processing performed by the Application by uninstalling it.

Uninstalling the Application normally removes information from the Application’s active local storage. However, uninstalling does not automatically delete:

purchase records maintained by Apple;

purchase, receipt, entitlement, or technical information already processed by RevenueCat;

support or privacy-request emails previously sent to the Service Provider and processed through Google’s email services;

information contained in device, iCloud, or computer backups;

information stored in Keychain, if the Application uses Keychain storage;

files exported or saved outside the Application’s private storage;

files or profile information retained on recipient devices; or

information that must or may lawfully be retained for legal compliance, fraud prevention, dispute resolution, or legal claims.

Stopping or deleting RevenueCat purchase-related processing may prevent the Application from validating or restoring Burstsend Pro functionality.

Data Retention Policy

Information is retained only for as long as reasonably necessary for the purposes described in this Privacy Policy, subject to applicable legal requirements and the retention practices of the relevant third-party providers.

Profile data and on-device application data: Profile information, preferences, saved nearby-device information, transfer-history metadata, onboarding and update choices, cached purchase-display information, Pro status, and other Application state are stored locally until you delete the relevant information, the Application removes it as part of its normal operation, or you uninstall the Application.

Uninstalling the Application normally removes this information from the Application’s active local storage. Depending on the storage method, device settings, and operating-system behavior, copies may remain in device, iCloud, or computer backups. Information stored in Keychain, if any, may be subject to separate iOS Keychain behavior. The Service Provider does not control backups maintained by you or Apple.

Transferred files: The Service Provider does not maintain server-side copies of transferred files. Transferred files may remain on the sending or receiving device, in Photos, Files, or another location selected by the device owner, in device or cloud backups, in copies created or forwarded by a recipient, or in another location outside the Application’s private storage. These copies remain until deleted by the person or service controlling the relevant storage location.

Purchase data via RevenueCat and Apple: Purchase-related information may be retained for as long as reasonably necessary for purchase validation, entitlement management, restoration, fraud prevention, reporting, security, dispute resolution, and compliance with applicable legal obligations. RevenueCat and Apple may apply their own retention practices and legal obligations.

Support and privacy communications: Support and privacy-request communications may be retained for as long as reasonably necessary to respond to and resolve the request, maintain a record that the request was handled, prevent fraud or abuse, comply with applicable legal obligations, and establish, exercise, or defend legal rights.

Data required for legal compliance: Information required for legal compliance, regulatory obligations, fraud prevention, dispute resolution, or legal claims may be retained for the period permitted or required by applicable law.

Data Deletion

You can modify or delete locally stored profile information through the Application where the relevant controls are available.

Uninstalling the Application normally removes information from the Application’s active local storage, subject to operating-system backup, Keychain, export, and restoration behavior.

Because Burstsend does not create a user account, there may be no separate Burstsend account to delete. A request described as an account-deletion request will be treated as a request to delete identifiable personal information controlled by the Service Provider, where such information exists.

The Service Provider may require reasonable verification before processing a deletion request.

Deleting a RevenueCat customer record does not delete the underlying App Store purchase history controlled by Apple, cancel or refund a purchase, or necessarily prevent purchase information from being created again if the purchase is later restored or revalidated.

The Service Provider cannot delete information stored only on your device, information stored on a recipient’s device, Apple-controlled purchase records, information that cannot reasonably be linked to the requester, or information that must or may lawfully be retained.

Verified requests will be processed without undue delay and within the timeframes required by applicable law.

Children

Burstsend is a general-audience Application and is not specifically directed to children under the age of 13.

The Application does not ask users to provide their age, and the Service Provider does not knowingly collect personal information from children through a file-storage server operated by the Service Provider.

Profile information and transferred files may be transmitted to nearby devices intentionally selected by the user. Where an in-app purchase is made or restored, purchase-related and technical information may also be processed by Apple and RevenueCat as described in this Privacy Policy.

Where applicable law requires parental or guardian authorization for processing based on consent, the required authorization must be obtained before the relevant processing takes place. The applicable minimum age may vary depending on the user’s country, including between 13 and 16 in European Union Member States.

The Service Provider does not guarantee immediate or automatic deletion from Apple-controlled records, independent third-party systems, sending or recipient devices, device or cloud backups, files copied or forwarded by another person, or records that must or may lawfully be retained.

Security

The Service Provider uses reasonable technical and organizational measures appropriate to the limited nature of the information processed.

Burstsend is designed to transfer files directly between devices rather than through a file-storage server operated by the Service Provider. The Application uses security capabilities made available by iOS and the networking technologies used by the Application.

Profile information is shared only with devices that you intentionally select or pair with.

Purchase-related information is processed through Apple and RevenueCat, which maintain their own security programs and practices.

No method of electronic storage, local-network communication, or electronic transmission can be guaranteed to be completely secure.

The Service Provider therefore does not guarantee absolute security, uninterrupted availability, compatibility with every device or network, prevention of every unauthorized access attempt, or protection against every possible security incident.

Nothing in this section excludes or limits any responsibility that cannot lawfully be excluded or limited.

Data Breach Notification

If the Service Provider becomes aware of a personal data breach involving personal data under the Service Provider’s control, the Service Provider will assess the nature, scope, and potential effects of the incident.

The Service Provider will notify competent authorities and/or affected individuals where, when, and to the extent required by applicable law.

Because Burstsend does not require user accounts and the Service Provider may not possess users’ contact information, direct individual notification may not always be technically possible.

Where legally permitted and appropriate, notice may instead be provided through the Application, the page on which this Privacy Policy is published, the Application’s App Store listing, or another reasonably available communication method.

Nothing in this section creates a notification obligation beyond the requirements of applicable law.

Changes

The Service Provider may update this Privacy Policy to reflect changes to the Application, third-party services, technical infrastructure, legal requirements, or data-processing practices.

When this Privacy Policy is updated, the effective date displayed in the policy will also be updated.

Where applicable law requires additional notice, users will be informed through the Application, the page on which this Privacy Policy is published, the App Store listing, or another appropriate communication method.

Where a new or materially changed processing activity requires separate consent under applicable law, that consent will be requested separately before the relevant processing begins.

The Service Provider may retain dated copies of previous versions for legal, compliance, or record-keeping purposes. However, unless required by applicable law, the Service Provider does not guarantee that every previous version will be retained indefinitely or made publicly available upon request.

This privacy policy is effective as of 2026-07-14.

Your Consent

This Privacy Policy is an informational notice and is not, by itself, a request for consent.

Downloading, installing, opening, continuing to use the Application, or generally using an Application feature will not, by itself, be treated as valid consent where applicable law requires separate, specific, informed, freely given, and affirmative consent.

Where a particular processing activity legally requires consent, the Application will request that consent separately through a clear affirmative action relating to the specific processing activity.

You may withdraw consent at any time through the relevant Application control, where available, or by contacting the Service Provider at burstsendapp@gmail.com.

Withdrawal of consent does not affect the lawfulness of processing performed before the withdrawal.

Processing may continue after consent is withdrawn where it is based on another valid legal basis or where retention is permitted or required by applicable law.

Contact Us

If you have any questions regarding privacy while using the Application, or questions about its privacy practices, please contact the Service Provider via email at burstsendapp@gmail.com.