Privacy Policy
Last Updated: July 2026
Developer: Kaan Dındış
Contact Email: madebykd.app@gmail.com
1. Introduction
This Privacy Policy explains how Twen5 ("the App"), developed by Kaan Dındış, handles your data.
Twen5 is a local-first pomodoro focus timer. All session records and user preferences are stored directly on your device using SwiftData and UserDefaults. We do not operate our own backend servers, and your data is never transmitted to external systems.
The only exceptions are subscription-related information processed securely by Apple's In-App Purchase infrastructure and RevenueCat, and a device-generated Apple Search Ads attribution token used to measure ad campaign performance, both described in Section 5.
2. What Data We Collect
Twen5 collects only the minimum data required for core functionality.
The App does NOT collect:
• Name or email address
• Phone number
• Location data
• Photos or contacts
• Advertising identifiers (IDFA)
• Cross-app or cross-website behavioral data
• Crash reports or remote analytics
2.1 User-Generated Data (Stored Locally Only)
A. Session Records
Each time you complete (or end) a timer session, the App records:
• Session type (focus, short break, or long break)
• Start time and duration
• Whether the session was completed
All records are stored locally on your device using SwiftData. No data is sent to a remote server.
B. App Preferences
Stored locally on your device via UserDefaults:
• Timer durations (focus, short break, long break) and long-break interval
• Auto-start preferences for breaks and focus sessions
• Sound, haptics, and notification preferences, including the optional daily reminder time
• Selected theme (light / dark / system), language, and week start day
• Daily focus goal
• Onboarding completion status and your answers to the onboarding questions (your focus intent and main obstacle), used only to personalize the app on your device
2.2 Automatically Generated Local Data
• Local notification identifiers for scheduled session alerts and the daily reminder
No analytics SDKs, logging services, or remote data collection mechanisms are used in the app.
2.3 A Note on "Stats" in the App
The Stats view within Twen5 (daily / weekly / monthly / yearly focus summaries, session counts, and streaks) is a local computation module only. It calculates summaries from the session records stored on your device and does not transmit any data externally.
3. How We Use Your Data
All data remains on your device and is used solely to:
• Run the timer and record your focus sessions
• Display your focus statistics and streaks
• Trigger local reminder notifications
• Manage free vs. Pro access
• Personalize the interface (theme, language, daily goal)
Twen5 does not:
• Track users across apps or websites
• Sell or share personal data
• Transmit session or preference data to external servers
• Use advertising identifiers
• Use third-party analytics or crash-reporting SDKs
4. Permissions We Request
4.1 Notifications
Used solely for local, device-scheduled alerts: session-end notifications and the optional daily "time to focus" reminder. Twen5 does not send remote push notifications from a server. All notifications are scheduled directly on your device.
You can enable or disable notifications in the app's Settings tab. If permission is denied, the app will prompt you to update your preferences in iOS Settings.
Notifications is the only system permission Twen5 requests. The App does not request access to your photos, camera, microphone, location, or contacts.
4.2 App Tracking Transparency (ATT)
ATT is not requested.
Twen5 does not use advertising identifiers (IDFA), does not engage in cross-app tracking, and does not use any tracking-enabled SDK. No ATT permission dialog is shown.
• NSPrivacyTracking = false
• Tracking = Disabled
• IDFA = Not used
• ATT pop-up = Not shown
This is also reflected in the app's Privacy Manifest (PrivacyInfo.xcprivacy), which declares NSPrivacyTracking = false, no tracking domains, and no collected data types.
5. Third-Party Services
Twen5 uses a limited set of third-party services for subscription management and to measure the performance of its Apple Search Ads campaigns.
5.1 Apple App Store (Payments)
All purchases are handled securely by Apple. Twen5 never receives or stores your payment details.
5.2 RevenueCat (Subscription Status & Ad Attribution)
RevenueCat is used to verify whether your Twen5 Pro subscription is active, and to measure which Apple Search Ads campaign, ad group, or keyword (if any) led to your app install.
RevenueCat may receive:
• An anonymous App User ID (generated by RevenueCat; not linked to your identity)
• Purchase and subscription status from Apple
• Device and network information (e.g., IP address), handled directly by RevenueCat for fraud prevention and security purposes
• A device-generated Apple Search Ads attribution token (via Apple's AdServices framework), used solely to attribute your install to an ad campaign/keyword if you tapped a Twen5 Search Ad. This token does not use IDFA, does not require Apple's App Tracking Transparency permission, and is not linked to your personal identity.
RevenueCat does NOT receive:
• Your session records or focus statistics
• Your preferences or reminder settings
• Your onboarding answers
• Any user-created content
The app itself does not collect or transmit your IP address or any network identifiers. Any such data is handled directly by RevenueCat under their own privacy policy.
RevenueCat Privacy Policy: https://www.revenuecat.com/privacy/
6. Data Retention
Since all app data is stored locally on your device:
• Data persists as long as the app is installed
• Deleting the app permanently removes all local data, including session records and preferences
• Twen5 does not use iCloud, CloudKit, or any cross-device sync. Your session records exist only on the device they were created on.
• iOS may include app data in your encrypted iCloud Device Backup if you have that feature enabled in iOS Settings. This is managed entirely by iOS and is not controlled by Twen5. We do not have access to iCloud backups.
• You can manually erase all app data at any time via Settings → Clear All Data within the app
We do not retain any of your data on external servers.
7. Data Security
Your data is protected by iOS platform-level safeguards:
• Secure app sandboxing
• Encrypted device storage (managed by iOS)
We do not have access to the data stored on your device.
8. Children's Privacy
Twen5 is not directed at children under the age of 13. We do not knowingly collect personal data from children. Deleting the app removes all locally stored data.
9. GDPR Compliance (EU Users)
Right to Access — All data is viewable directly within the app.
Right to Rectification — You can adjust any preference; session records can be deleted via Clear All Data.
Right to Erasure — Use Settings → Clear All Data or delete the app.
Right to Data Portability — Data is accessible within the app; no automated export tool is currently available.
Right to Restrict / Object — Twen5 does not transmit or process your personal data on external servers.
10. CCPA (California Residents)
We do not:
• Sell personal data
• Share personal data with third parties for advertising
• Track users
• Collect advertising identifiers
You may delete all local data at any time via the app or by deleting the app.
11. Your Privacy Rights
You may:
• Delete your data at any time via Settings → Clear All Data
• Control notification permissions via iOS Settings
• Adjust or reset any preference within the app
• Manage your Pro subscription via your Apple ID
• Contact us with any privacy-related questions
12. Changes to This Privacy Policy
We may update this Privacy Policy as the app evolves. Significant changes may be noted in the app or in App Store release notes. The "Last Updated" date at the top of this document reflects the current version.
13. Contact
For any privacy-related questions:
Email: madebykd.app@gmail.com
Developer: Kaan Dındış